Supplemental Group Profiles

["Graap, Ken" <keg@xxxxxxxxxxxxxxxxxx>]

We are working on reviewing our AS/400's current security model
implementation.

We have one system that supports both development and production
environments.

Some user profiles are members in as many as 8-10 different group profiles.

The question has come up... What if any, risk is associated with using
Supplemental Group Profiles in order to give a single user profile access to
multiple environments? Would it be better to have multiple user profiles,
one designed to access each different environment?

An environment in this case would be defined a PRODUCTION, DEVELOPMENT,
STAGING, TRAINING etc.

Kenneth

****************************************
Kenneth E. Graap
IBM Certified Specialist
AS/400 Professional
Network Administrator
NW Natural (Gas Services)
keg@nwnatural.com
Phone: 503-226-4211 x5537
FAX:    603-849-0591
****************************************


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---