Add /identifier values to a user account in UAF

[Neal Kirby]

Copy These (or Add These):

Identifier Value Attributes
QAOP_ACCESS %X8001000A
WWRD_REPORT %X81030001
WWRD_UPDATE %X81030002
etc..

From 1 user account to another.

Thanks
Neal

[Uwe Zessin · Accepted solution]

Identifiers are never attached to usernames.

Those are general identifiers which can be 'granted' to UIC-based identifiers. From memory:

UAF> grant /identifier QAOP_ACCESS U2
UAF> revoke identifier QAOP_ACCESS U1

[Ken Robinson]

To add an identifier to a USER, you use the GRANT/ID command.

Here is the help for that command:

$ mc authorize help grant/id

GRANT

/IDENTIFIER

Assigns the specified identifier to the user and documents the
user as a holder of the identifier in the rights database.

Format

GRANT/IDENTIFIER id-name user-spec




Additional information available:

Parameters Qualifier
/ATTRIBUTES
Example

GRANT /IDENTIFIER Subtopic?

Ken

[Robert Gezelter]

Neal,

Identifiers, as Ken noted, are separate from Usernames. They are maintained in a separate database (RIGHTLIST) from the authorization file (SYSUAF).

Identifiers are associated with a user name using the GRANT command. There are options on the command, and it is best to check what options teh identifier was GRANTed with using the SHOW /FULL command.

Then, the identifiers can be granted to the new user using the GRANT/IDENTIFIER command. Once the new holder is known to be functioning correctly, you can use the REVOKE/IDENTIFIER command to remove access from the previous holder.

- Bob Gezelter, http://www.rlgsc.com

[Neal Kirby]

All responses are correct and all responses have provided new information (each one in turn).

Thanks

Neal

[Neal Kirby]

I have already added a reply. Thanks for the continued support.

Neal