RE: Policy for Job Scheduler User Profiles

We have special accounts setup for this purpose. Each insurance
administration system has an "owner" account that is used for
scheduled jobs only. Our array of auditors seem to be ok with
this method.


Bentley Pearson
Vice President - Information Services
Southland National Insurance Corporation
1812 University Blvd
Tuscaloosa, Al
35403
205 345 7410
bpearson@xxxxxxxxxxxxxxxxxxxxx

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Burns, Bryan
Sent: Wednesday, August 13, 2008 8:55 AM
To: MIDRANGE-L@xxxxxxxxxxxx
Subject: Policy for Job Scheduler User Profiles

What's your policy on the user profile to be used for scheduled jobs?
In the past we've all used our own profiles but that's not the best
approach because the user might leave the company. In fact, our
invoicing job was running under a user's name long after he left the
company until I finally changed it.

Furthermore, auditors don't think that I - the operator / administrator
- should even have access to the JS due to the need for "separation of
duties". Well, management said they'll accept the risk on that one and
put detective controls in place.

And by the way, thanks to everyone who replied to my post about QSECOFR
user profiles - they were very helpful.

Bryan Burns
iSeries Specialist
ECHO, Incorporated
Lake Zurich, Illinois