Neoview User Management and Security Administration Guide (R2.5)

For a description of the NCI DROP USER command, see “DROP USER Command (platform
users, database users)” (page 117). For more information about deleting a user in HPDM, see the
HPDM Online Help.
Assigning a New Role to an Existing User
A user in the role ROLE.MGR can grant an additional role to an existing user with either the
NCI GRANT ROLE command or the HPDM Grant Role dialog. However, only a user in the role
ROLE.SECMGR can grant the ROLE.SECMGR role to a user.
NOTE: The predefined users USERMGR and SECURITYMGR are limited to the roles ROLE.MGR
and ROLE.SECMGR, respectively. Neither of these predefined users can be granted additional
roles.
HPDM provides two other ways to grant a user a role:
• Use the Grant button on the Role Details display, which displays a list of all users who
currently have a role, to grant the same role to other users selected from a list.
• Use the HPDM Edit User Display to change the user's default and/or additional roles.
Table 5-6 Assigning a Role
CommentRangeInitial ValueField Name (HPDM)Parameter Name (NCI)
Must be an existing
user on Neoview. No
validation with
remote directory
server.
128 charactersNAUser NameUSER
name has 1–8
alphanumeric
characters, the first of
which must be
alphabetic.
ROLE.name in NCI
Choose from list in
HPDM
NAAdditional RolesROLE
If you specify a new
role as
primary/default, the
user's existing
primary role becomes
a secondary role.
Yes or No in NCI
Choose from list in
HPDM
NADefault RolePRIMARY
For a description of the NCI GRANT ROLE command, see “GRANT ROLE Command (database
users)” (page 118). For more information about the HPDM Grant Role dialog and how to navigate
to it, see the HPDM Online Help.
Revoking a Role from a User
A user in the role ROLE.MGR can revoke a role from an existing user with either the NCI REVOKE
ROLE command or the HPDM Grant/Revoke Database User Role dialog. Additionally, a user
in the role ROLE.SECMGR can revoke the ROLE.SECMGR role from a user.
Another way to revoke a role from a user in HPDM is to select a role from the Role Details display
and use the Revoke button to revoke the role from a specified user.
You may not revoke the user's default role. To revoke the role currently defined as a user's default
role, you must first make one of the user's other roles the default role, then delete the former
default role.
If you revoke the user's default role and the user has no secondary roles, this action drops the
user.
User Management Tasks 101