Configuring Switch Pairs

Examine the list of users with special authorities on your systems. Identify profiles that do not need the special authorities, or profiles that only need the special authorities on an emergency basis, or at specific times. Your goal should be to reduce the number of users with each of the special authorities to a very small number on each system.

TIP: If you have Powertech Compliance Monitor, you can quickly find this information using the Profiles with Special Authority report (Complete Assessment/User). This will allow you to conveniently generate this information for multiple systems.
NOTE: During an active Authority Broker profile switch, additional switches in the same job are not allowed, including profile switch attempts from other products.

For the following example, we will assume the previous scenario with Joan, Ted, and Alice.

To create the 'Switch To' profile

  1. Create the privileged profile with the higher level of authority needed, (for this example, "APMOD").
  2. Set the password to *NONE so that it cannot be used for interactive sign-ons.
  3. Set the Password Expiration Interval to *NOMAX to ensure it remains available.

To assign a system user to a "Switch To" profile

To assign a system user to a "Switch To" profile

  1. Use the command LWRKAUTBKR to Launch Authority Broker.
  2. From the Main Menu, choose 1. The Assign System Users to Switch Profiles screen appears.
  3. Under Opt, enter 1, then specify the user (ALICE) and switch profile (APMOD).

    4. NOTE: For a full description of this screen, Assign System Users to Switch Profiles screen.

  4. Press Enter. The Add Switch Information screen appears.
  5. Enter the desired switch information. Add Switch Information screen for a full description of these options. Alice will be allowed a 10-minute session to complete her task. In this case, since Joan and Frank have an interest in reviewing Alice's switches, they are added as Interested Parties who will receive a report each time Alice switches to APMOD.

  6. Press Enter. The Day of Week Schedule screen appears.

  7. Here, specify the days and times the User (Alice) will be able to switch to the APMOD profile.
  8. Press Enter. The Switch is added to the list. The message "Entry added to database" appears at the bottom of the screen.
  9. Enter Option 5 (View) to display the Display Switch Assignment screen where you can view the Switch information.

  10. Enter option 15 (Notification Information) to display the Switch Pair Notifications screen, which can be used to list, add, and remove Interested Parties associated with a Switch Pair.

    11. Interested Parties placed in the Switch Notifications section will be informed, via the given method, each time the System User switches to the Switch to Profile. Interested Parties placed in the Interested Parties (included on the Event reports) section will be incorporated into the Event reports.

  11. To delete a Switch Notifications entry or an Interested Party entry, simply use the space bar to blank out the entry.
  12. Enter option 17 (product exit points) to display the Work with Switch Pair Exit Points screen, which is used to maintain product exit points for a system user/switch profile combination. This is not valid when adding an assignment.
  13. Enter option 18 (Timed Overrides) to display the Work with Timed Overrides screen, which is used to maintain timed options for a system user/switch profile combination.

Next, inform system users how to access their 'Switch To' profile, using the steps in Switching Profiles.