Neoview User Management Information (R2.4 SP1)

1 Introduction to User Management Information on Neoview
This manual describes the facilities available for logging and monitoring user-management
actions on the Neoview platform. These features are available only on Neoview Release 2.4 SP
1 and later releases.
User Management on the Neoview Platform
On the Neoview platform, a user with the role ROLE.MGR has responsibility for user-management
actions including:
• Adding users
• Deleting users
• Granting roles (which determine what operations the user can perform)
• Revoking roles
• Changing passwords
To perform these actions, the ROLE.MGR uses either the DB Admin Utility or a set of User
Management Commands implemented as Stored Procedures in Java (SPJs). In general, DB Admin
is more convenient for managing users one at a time, whereas the User Management Commands
are more convenient for bulk operations, such as adding thousands of users at a time.
Whereas only the ROLE.MGR can add or delete users, assign or revoke roles, any user can change
his or her own password, using DB Admin or a Neoview ODBC client. User Management
Commands allow the ROLE.MGR to change passwords of other users but do not allow other
users to change even their own passwords.
NOTE: For complete information about Neoview user management, DB Admin, and the User
Management Commands, see the Neoview Database Administrator's Guide.
Monitoring User Management Actions
The database views described in this document let you monitor user-management actions taken
by the ROLE.MGR or, in the case of a password change, by another user. And because multiple
Neoview users can have the role ROLE.MGR, these views make it evident which ROLE.MGR
took each user-management action.
NOTE: In the current software release, user-management actions initiated from the DB Admin
utility do not reflect which user performed the action. Rather, all actions initiated from DB Admin
are attributed to SUPER.SERVICES.
To access the views, you use SQL queries from the Neoview Command Interface (NCI) or any
other standard SQL tool. For example, the query:SELECT * from
HP_USER_LOGGING.USERINFO displays all Neoview users, their roles, when each user's role
was modified and by whom, and when the user's password was modified and by whom. (For
more details, see Chapter 3 (page 13).)
By default, only a user who has the role ROLE.MGR or the services ID (HP Support) can execute
Select statements against the views. However, a ROLE.MGR can grant Select access to other
users.
User Management on the Neoview Platform 9