Page 1 of 2
Assign role from command line
Posted: Fri Aug 17, 2018 10:26 am
by dspxguy
How do I grant a user the common metadata user role from command line
Code: Select all
[root~]# ./DirectoryCommand.sh -url https://nnnnnnnnn:9080 -user xyz -password xyz -sub_list_sep ^ -usr_roles "UserDev^Common Metadata User"
------------------ Executing "assign_user_roles" command. ------------------
Error RoleId "Common Metadata User" is not a valid Suite or Product role.
Thanks
Posted: Sun Aug 19, 2018 6:29 pm
by ray.wurlod
I don't have access to DataStage today but am moved to ask whether you've consulted the syntax help for DirectoryCommand.sh.
Perhaps try the full form of the option, namely -assign_user_roles (there have been issues in the past where the short-form options do not work).
Posted: Mon Aug 20, 2018 2:07 pm
by dspxguy
Code: Select all
./DirectoryCommand.sh -url https://nnnnnnnnn:9080 -user xyz -password xyz -sub_list_sep ^ -assign_user_roles "UserDev^CommonMetadataUser"
------------------ Executing "assign_user_roles" command. ------------------
Error RoleId "CommonMetadataUser" is not a valid Suite or Product role.
------------------ Executing "assign_user_roles" command. ------------------
Error RoleId "Common Metadata User" is not a valid Suite or Product role.
Posted: Mon Aug 20, 2018 8:33 pm
by ray.wurlod
Can you assign any of the suite roles? Can you assign any Suite Component roles?
It might be time to involve your official support provider.
Posted: Tue Aug 21, 2018 12:32 pm
by dspxguy
Yes, I am able to assign other roles. Just struggling to get the right syntax for Common Metadata User, Common Metadata Administrator and Common Metadata Importer.
Code: Select all
./DirectoryCommand.sh -url https://nnnnnnnnn:9080 -user xyz -password xyz -sub_list_sep ^ -usr_roles "UserDev^SuiteAdmin"
------------------ Executing "assign_user_roles" command. ------------------
Role assignments - User Ids: "UserDev" Role Ids: "SuiteAdmin".
------------------------------------------------------------.
./DirectoryCommand.sh -url https://nnnnnnnnn:9080 -user xyz -password xyz -sub_list_sep ^ -usr_roles "UserDev^SuiteUser"
------------------ Executing "assign_user_roles" command. ------------------
Role assignments - User Ids: "UserDev" Role Ids: "SuiteUser".
------------------------------------------------------------.
./DirectoryCommand.sh -url https://nnnnnnnnn:9080 -user xyz -password xyz -sub_list_sep ^ -usr_roles "UserDev^DataStageAdmin"
------------------ Executing "assign_user_roles" command. ------------------
Role assignments - User Ids: "UserDev" Role Ids: "DataStageAdmin".
------------------------------------------------------------.
Thanks
Posted: Tue Aug 21, 2018 9:29 pm
by ray.wurlod
Clutching at straws here, but how about CMDUser, CMDImporter and CMDAdmin ?
Posted: Wed Aug 22, 2018 4:50 am
by chulett
How about support?
Posted: Fri Aug 24, 2018 7:43 am
by dspxguy
Thanks Ray - But still no luck
Posted: Mon Aug 27, 2018 4:36 am
by qt_ky
When in doubt, try searching the documentation.
Here is the support portal URL (as of today):
https://www.ibm.com/mysupport/s/?language=en_US
A quick search there reveals a useful technote:
https://www-01.ibm.com/support/docview. ... wg21625366
And it says:
Be sure to put the correct value for the role you wish to set. To see all valid values run:
Posted: Mon Aug 27, 2018 4:56 am
by qt_ky
Ray, you were really close. Here is the command output from an 11.3 server.
Code: Select all
------------------ Listing roles in ASB directory. ------------------
Role ID: "CMAdmin" Name: "Common Metadata Administrator".
Role ID: "CMImporter" Name: "Common Metadata Importer".
Role ID: "CMUser" Name: "Common Metadata User".
Role ID: "DCAuthor" Name: "DCAuthor".
Role ID: "DCUser" Name: "DCUser".
Role ID: "DQCConsoleAdmin" Name: "Data Quality Console Administrator".
Role ID: "DQCBusinessSteward" Name: "Data Quality Console Business Steward".
Role ID: "DQCReviewManager" Name: "Data Quality Console Review Manager".
Role ID: "DQCReviewer" Name: "Data Quality Console Reviewer".
Role ID: "DataStageAdmin" Name: "DataStage and QualityStage Administrator".
Role ID: "DataStageDeveloper" Name: "DataStage and QualityStage Developer".
Role ID: "DataStageOperationsViewer" Name: "DataStage and QualityStage Operations Viewer".
Role ID: "DataStageOperator" Name: "DataStage and QualityStage Operator".
Role ID: "DataStageProductionManager" Name: "DataStage and QualityStage Production Manager".
Role ID: "DataStageSuperOperator" Name: "DataStage and QualityStage Super Operator".
Role ID: "DataStageUser" Name: "DataStage and QualityStage User".
Role ID: "EMAdmin" Name: "Exception Management Administrator".
Role ID: "EMBusinessSteward" Name: "Exception Management Business Steward".
Role ID: "EMDataSteward" Name: "Exception Management Data Steward".
Role ID: "EMStewardManager" Name: "Exception Management Steward Manager".
Role ID: "FastTrackAdministrator" Name: "FastTrackAdministrator".
Role ID: "FastTrackProjectAuthor" Name: "FastTrackProjectAuthor".
Role ID: "FastTrackProjectManager" Name: "FastTrackProjectManager".
Role ID: "FastTrackProjectUser" Name: "FastTrackProjectUser".
Role ID: "FastTrackUser" Name: "FastTrackUser".
Role ID: "ISDAdministrator" Name: "ISD Administrator".
Role ID: "ISDConsumer" Name: "ISD Consumer".
Role ID: "ISDDesigner" Name: "ISD Designer".
Role ID: "ISDOperator" Name: "ISD Operator".
Role ID: "ISDProjectAdministrator" Name: "ISD Project Administrator".
Role ID: "ISDUser" Name: "ISD User".
Role ID: "SorcererBusinessAnalyst" Name: "Information Analyzer Business Analyst".
Role ID: "SorcererDataAdmin" Name: "Information Analyzer Data Administrator".
Role ID: "SorcererDataAnalyst" Name: "Information Analyzer Data Analyst".
Role ID: "SorcererOperator" Name: "Information Analyzer Data Operator".
Role ID: "SorcererDataSteward" Name: "Information Analyzer Data Steward".
Role ID: "SorcererDeveloper" Name: "Information Analyzer Developer".
Role ID: "SorcererDrilldownUser" Name: "Information Analyzer DrillDown User".
Role ID: "SorcererAdmin" Name: "Information Analyzer Project Administrator".
Role ID: "SorcererUser" Name: "Information Analyzer User".
Role ID: "GlossaryAdmin" Name: "Information Governance Catalog Glossary Administrator".
Role ID: "GlossaryAuthor" Name: "Information Governance Catalog Glossary Author".
Role ID: "GlossaryBasicUser" Name: "Information Governance Catalog Glossary Basic User".
Role ID: "MDWAdministrator" Name: "Information Governance Catalog Information Asset Administrator".
Role ID: "GlossaryAssigner" Name: "Information Governance Catalog Information Asset Assigner".
Role ID: "MDWUser" Name: "Information Governance Catalog Information Asset Author".
Role ID: "GlossaryUser" Name: "Information Governance Catalog User".
Role ID: "RulesAdministrator" Name: "Rules Administrator".
Role ID: "RulesAuthor" Name: "Rules Author".
Role ID: "RulesManager" Name: "Rules Manager".
Role ID: "RulesUser" Name: "Rules User".
Role ID: "SuiteAdmin" Name: "Suite Administrator".
Role ID: "SuiteUser" Name: "Suite User".
------------------------------------------------------------.
Posted: Mon Aug 27, 2018 6:02 am
by chulett
People can be Sorcerers? Interesting...
Posted: Mon Aug 27, 2018 7:53 pm
by ray.wurlod
Sorcerer was the internal project name for Information Analyzer.
Now, listen to "
Journey of the Sorcerer" (The Eagles) and see if you recognize the tune.
Posted: Mon Aug 27, 2018 9:22 pm
by chulett
HHGTTG
However, did any of that help fix the problem dspxguy is having?
Posted: Tue Aug 28, 2018 2:05 am
by ray.wurlod
chulett wrote:HHGTTG
However, did any of that help fix the problem dspxguy is having?
42
Posted: Tue Aug 28, 2018 4:29 am
by qt_ky
With that, I vote to mark this topic resolved!
