Air Cleaner User Manual

Assume the following records exist:
Users to allow Users to deny Devices Directories
all greg peter bobby /dev/rmt0 vdev0 /usr/lpp/sysback/bf/local/all
root all usr/lpp/sysback/bf/local/root
alice /dev/rmt1
Based on the information above, the following statements are true:
1. Users greg, peter and bobby do not have backup access on this system because
they are explicitly denied access under all users. You can only deny access to
users when defining access for “all” other users. You cannot create a permission
record for any users that have been explicitly denied access.
2. User root has access to all devices (tape and virtual). User root is also provided
a disk image file backup option, with the default filename contained in the
/usr/lpp/sysback/bf/local/root directory. You can change the default name of the
backup file at backup time, but the file must exist in the
/usr/lpp/sysback/bf/local/root directory or one of its subdirectories.
3. User alice has access only to tape device /dev/rmt1. Because there are no
directories defined for backup image files, no disk image backup option is
provided to this user.
4. All other users (all users except those explicitly denied and those explicitly
defined) are provided access to tape device /dev/rmt0 and virtual device
vdev0. Those users are also provided a disk image backup option in the
/usr/lpp/sysback/bf/local/all directory. They can back up to only those devices
and directories defined in this record.
Also note that, if you remove user greg from the list of users denied access, he is
automatically provided access under the same record as all other users. Likewise,
removing user alice does not disable access, because she is not explicitly denied,
but her permission also defaults to that of all users.
Adding or Changing Local User Device/Directory Access
All users on the system are provided access to all of the backup devices on the
system when SysBack is first installed. This is accomplished by providing a
permission record for a user called all. You might not want certain users to have
access to all devices and backup directories, so you might want to deny specific
users access, or change the device or directory list that specific users are allowed to
use. The devices and directories specified when using this option determine the list
of backup options that users receive when performing backups using SMIT, and
those devices or directories that other SysBack commands, executed at the
command line, can read or write to.
If you do not want all users on the system to be granted the same access, remove
access to user all before setting up access to specific users. This can help avoid
confusion in the future.
To add or change device or directory access to local users:
1. From the Local User Access menu, select Add or Change Local User
Device/Directory Access.
Note: You can also type smit sb_cfglocaccess at the command line.
2. Enter the name of the user whose access you want to add or change.
7-2 IBM Tivoli Storage Manager for System Backup and Recovery: Installation and User’s Guide