Re: Question about Groups usage on the AS400/i

[Rob Berendt <robertowenberendt@xxxxxxxxx>]

The GUI Navigator probably has a way to do this from/to either direction.
I tend to prefer authorization lists over group profiles.  You can really
mess with the internals of authority and storage if you do group profiles
wrong.  I've cleaned up more than one system where this has gone wonky.
It's common enough that IBM has added operations to MGTOOLS for cleaning
this up.



On Tue, May 13, 2025 at 1:01 PM Kristen Henry <klhnry@xxxxxxxxxxxx> wrote:

> Hi,
>
> I am a long time 38/AS400/iSeries developer and have a client that
> develops software for user provisioning across many different system types.
> They are adding the ability to add users and remove users to/from Groups.
>
> In my experience on the iSeries, groups are set up with Q type user level
> and other access to give authorities to a Group, and the GROUP NAME is
> added/removed to a user profile to give the Authority.
>
> Is anyone using Groups to add/remove the user profile names to the groups
> themselves? In this example I imagine the group name would not then be
> added to the user profile...  In my experience no, but it looks possible,
> and other system types work this way.
>
> Please share with me so I can give accurate guidance to my client.
>
> Thanks,
>
> Kristen Henry
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.