Admin Access

A forum for discussing DataStage<sup>®</sup> basics. If you're not sure where your question goes, start here.

Moderators: chulett, rschirm, roy

Post Reply
Nagac
Premium Member
Premium Member
Posts: 127
Joined: Tue Mar 29, 2011 11:39 am
Location: India

Admin Access

Post by Nagac »

Hi

I have been granted admin rights is admin console by administrator(selected all roles). So I should be able to access any DS Project without assigning rights in DS Administrator permissions tab. But I am unable to access projects unless I have been assigned a project in DS Admin permissions tab.

Our Security model is LDAP and PAM is enabled. Hence I have not been mapped credentials to OS level user.

Can you please let me know if we miss any steps in between.

Thanks
Mike
Premium Member
Premium Member
Posts: 1021
Joined: Sun Mar 03, 2002 6:01 pm
Location: Tampa, FL

Post by Mike »

You have a misunderstanding.

DataStage permissions as set via the DataStage Administrator client are separate from the roles and permissions established via the Information Server admin console.

You still have to grant your LDAP users and/or groups permission for a DataStage project via DataStage Administrator.

Mike
PaulVL
Premium Member
Premium Member
Posts: 1315
Joined: Fri Dec 17, 2010 4:36 pm

Post by PaulVL »

And the user id has to be part of the dstage group (if defaults were used in your shop).
Nagac
Premium Member
Premium Member
Posts: 127
Joined: Tue Mar 29, 2011 11:39 am
Location: India

Post by Nagac »

Thanks to both

I am still in doubt as far as i remember. I didnt assign rights to projects in DS Admin as we are assigning all roles to user earlier in different clientand worked fine.

Also, DS user is not created on Server or not given any rightsto server. We have different users on server.

As i mentioned PAM is configured in server,

Forgot to add when i log in to DS Admin, i cant seepermissions tab enabled for the project which was manually assigned to me in DS admin
Nagac
Premium Member
Premium Member
Posts: 127
Joined: Tue Mar 29, 2011 11:39 am
Location: India

Post by Nagac »

Any ideas?
Mike
Premium Member
Premium Member
Posts: 1021
Joined: Sun Mar 03, 2002 6:01 pm
Location: Tampa, FL

Post by Mike »

Nagac wrote:Forgot to add when i log in to DS Admin, i cant seepermissions tab enabled for the project which was manually assigned to me in DS admin
This tells me that the ID that you logged in with does not have the DataStage and QualityStage Administrator role (only a DataStage administrator has access to the permissions tab). A suite administrator can add that role for you through the Information Server Admin Console.

Once your ID has that role, then you can use the DataStage Administrator Client permissions tab to add the DataStage Developer role (or other DataStage roles) on a per project basis for your LDAP groups that should have a role in the project.

Mike
Nagac
Premium Member
Premium Member
Posts: 127
Joined: Tue Mar 29, 2011 11:39 am
Location: India

Post by Nagac »

Thanks Mike for your response.

But i had check it again and could see all roles were checked against my user id.

As i mentioned earlier, we have LDAP authentication to login into DataStage and we have separate user id to login into DataStage Server. are there any other things to consider

Thanks
ray.wurlod
Participant
Posts: 54607
Joined: Wed Oct 23, 2002 10:52 pm
Location: Sydney, Australia
Contact:

Post by ray.wurlod »

Check your credential mapping (in web console for Information Server, under Domain Management).
\
But that should not impact role-based access.
IBM Software Services Group
Any contribution to this forum is my own opinion and does not necessarily reflect any position that IBM may hold.
Post Reply