AutoSys Workload Automation

  • 1.  Emergency Role Elevation Automation?

    Posted Feb 21, 2019 04:39 PM

    We have need for a small group to be SCHEDGRP daily in production. When in a critical issue resolution we have key developers who are granted SCHEDGRP to expedite resolution of the system issues. Currently the operations team (who are in ADMINGRP) manually add a elevated role upon a documented request. We want this automated to be self-service. What are suggestions to accomplish this?



  • 2.  Re: Emergency Role Elevation Automation?
    Best Answer

    Broadcom Employee
    Posted Feb 25, 2019 10:15 AM

    Hi,

    The user and group can only be changed from Desktop Client.  The imexutil utility allows import and export of artifacts.  It can only, however, export users and groups and import is disabled.  The user and groups is disabled to avoid any inconsistencies which can cause severe issues.  If you are ok to restart DE, then look at this KD

     

    First create a group similar to SCHEDGRP, e.g SCHED2.  Add your users to the group.  Next export the groups.

    imexutil.sh -h localhost -p 7500 -u user -w userpass -c "exportgroup -outdir /tmp/group"

    When you export, all groups are exported.  Delete all the other groups and leave the SCHED2.  Save this in a separate directory which will be used to turn on the permissions.

    Now, delete all the permissions in the SCHED2 group and export it again.  Save the second version in a directory which will be used to turn off the permissions.

     

    To turn on, follow the steps in the KD.  Put the SCHED2.xml file with all the permissions in <installdir>/Resources/DBInit/Group.   Restart DE.  You should see all the permissions.  Follow similar steps to remove the permissions.

     

     

    Thank you,

    Nitin Pande

    Broadcom



  • 3.  Re: Emergency Role Elevation Automation?

    Posted Feb 25, 2019 11:42 AM

    Thank you. We will continue with our manual process as restarting DE is not an option in the midst of a critical IT issue.