2.1 mpsetacl Command

Synopsis

[Windows]

[To set/modify]
mpsetacl -a -t Target {-u User | -g Group | -w Wellknown } [-s Domain] -p {w | c | x | r}
[To delete]
mpsetacl -d -t Target [ [ {-u User | -g Group | -w Wellknown } ] [-s Domain] ]

[UNIX]

[To set/modify]
mpsetacl -a -t Target {-u User | -g Group } -p {w | c | x | r}
[To delete]
mpsetacl -d -t Target [-u User | -g Group ]

Description

This command sets, modifies, or deletes user or group access rights for projects specified with Target.

Options

-a

Specify when setting or changing user or group access rights for a project.

-t Target

Specify the project name for which access rights are set, modified, or deleted in the following format.

[Windows]

mpjobsch\schedule\project name

During multiple subsystem operation, specify a project in the following format. (Note)

mpjobsch\schedulen\project name


n: Subsystem number (1 to 9)

Note:: Specify the project having subsystem number 0 in the same format as that used when multiple subsystems are not running.

[UNIX]

mpjobsch/schedule/project name

During multiple subsystem operation, specify a project in the following format. (Note)

mpjobsch/schedulen/project name


n: Subsystem number (1 to 9)

Note:: Specify the project having subsystem number 0 in the same format as that used when multiple subsystems are not running.

-u User

Specify the name of the user to whom access rights are granted.

If the user name includes any space characters, enclose the entire user name in double quotations ("").

The user's principal name cannot be specified. [Windows]

-g Group

Specify the name of the group to which access rights are granted.

If the group name includes any space characters, enclose the entire group name in double quotations ("").

-w Wellknown [Windows]

Specify the name of the well-known group to whom access rights are granted. The well-known group name indicates the groups such as "Everyone" and "NETWORK" that are registered on the system beforehand.

If the well-known group name includes any space characters, enclose the entire well-known group name in double quotations ("").

-s Domain [Windows]

Specify the domain of the user specified with "-u" or the group specified with "-g." The default for this option is the domain name of the user or group on the computer where this command is executed.

-p

Specifies the access right to be granted. One of the following operands must be specified: w, x, r or c. Update rights include change rights, operation rights and reference rights. Similarly, both change rights and operation rights include reference rights.

Specify the access rights to be granted. Make sure to specify one of the following:

w:	Update right
c:	Change rights
x:	Operating right
r:	Reference right

-d

Specify when deleting a user's or a group's access rights for a project.

Note that if you specify this option but omit the user (-u option) or group (-g option), all access rights for the project specified with Target are deleted. If a user or a group is specified, all access rights for the specified user or group are deleted from the project specified with Target.

Command Location

Windows	Systemwalker Operation Manager installation directory\mpwalker\bin
Solaris HP-UX AIX Linux	Systemwalker Operation Manager installation directory/FJSVfwseo/bin

Privilege Required

System administrator (user belonging to the Administrators group or superuser) privileges are required.

Cautions

If "-a" is specified, the user (-u option), group (-g option) or well-known group (-w option) must be specified.
In cluster environments, execute this command only on the active node (the node where the shared disk is mounted).
The settings configured with this command on the active node will be applied to the standby node at the time of next failover. Check which nodes are the active node or standby node in the cluster system currently used.

Examples

When setting access rights:

The following example shows how to state this command in order to establish the update right as the access right of the user "user1" set in the project "proj1."

[Windows]

mpsetacl -a -t mpjobsch\schedule\proj1 -u user1 -p w

[UNIX]

mpsetacl -a -t mpjobsch/schedule/proj1 -u user1 -p w

When setting access rights during multi-subsystem operation:

The following example shows how to state this command in order to establish the update right as the access right of user "user1" being set in project "proj1" of subsystem number 2.

[Windows]

mpsetacl -a -t mpjobsch\schedule2\proj1 -u user1 -p w

[UNIX]

mpsetacl -a -t mpjobsch/schedule2/proj1 -u user1 -p w

When deleting access rights:

The following example shows how to state this command in order to delete the access rights of the user "user1" set in the project "proj1".

[Windows]

mpsetacl -d -t mpjobsch\schedule\proj1 -u user1

[UNIX]

mpsetacl -d -t mpjobsch/schedule/proj1 -u user1

When deleting a project:

If the user (or group) name is omitted, all access rights set for the project "proj1" are removed.

[Windows]

mpsetacl -d -t mpjobsch\schedule\proj1

[UNIX]

mpsetacl -d -t mpjobsch/schedule/proj1