Analyze Profile Activity (ANZPRFACT)
| Where allowed to run: All environments (*ALL) Threadsafe: No |
Parameters Examples Error messages |
The Analyze Profile Activity (ANZPRFACT) command will determine if profiles have been inactive for the specified number of days. If a profile has been inactive for the specified number of days it will be disabled. The last used date on the user profile is used to determine the number of days a profile has been inactive. If the last used date is blank, the restore date is used. If the restore date is blank, the creation date is used.
If the system is in a mirrored environment with replication active then the last used date, restore date, and creation date for the profiles on both systems in the mirrored environment will be used to determine if the profiles have been inactive for the specified number of days.
When a profile is disabled, a message will be sent to the message queue of the user who issued the ANZPRFACT command. You should examine the profiles that are disabled by this command to determine if they are still needed. If they are not, they should be deleted.
User profiles can be excluded from this processing by using the Change Active Profile List (CHGACTPRFL) command to add them to the list of profiles that will always be considered active.
It is recommended that you add to this list any profiles that have been created to own application objects and are not used to sign on. You will also want to add any other IBM ("Q") profiles to this list that you do not want disabled. It is not necessary to add any of the profiles in the following list since they will not be considered inactive.
The following user profiles will never be considered inactive:
- QANZAGENT
- QAUTPROF
- QCLUMGT
- QCLUSTER
- QCOLSRV
- QDBSHR
- QDBSHRDO
- QDFTOWN
- QDIRSRV
- QDLFM
- QDOC
- QDSNX
- QEJB
- QEJBSVR
- QFNC
- QGATE
- QIBMHELP
- QIPP
- QLPAUTO
- QLPINSTALL
- QLWISVR
- QMGTC
- QMSF
- QNETSPLF
- QNFSANON
- QNTP
- QPEX
- QPM400
- QSECOFR
- QSNADS
- QSPL
- QSPLJOB
- QSRV
- QSRVAGT
- QSRVBAS
- QSYS
- QTCM
- QTCP
- QTFTP
- QTMHHTTP
- QTMHHTP1
- QTMPLPD
- QTSTRQS
- QWEBADMIN
- QWSERVICE
- QYCMCIMOM
- QYPSJSVR
This information can be displayed using the Display Active Profile List (DSPACTPRFL) command.
When a value is specified for the INACDAYS parameter, a check is made every day for profiles that have been inactive for the specified number of days.
To turn off the Analyze Profile Activity function specify *NOMAX for the number of inactive days.
The ANZPRFACT job runs nightly. If you want to change the time this job runs, use the Change Job Schedule Entry (CHGJOBSCDE) command to change the QSECIDL1 job.
Restriction: You must have *ALLOBJ, *SECADM, and *JOBCTL special authorities to use this command.
| Top |
Parameters
| Keyword | Description | Choices | Notes |
|---|---|---|---|
| INACDAYS | Number of inactive days | 1-366, *NOMAX | Required, Positional 1 |
| Top |
Number of inactive days (INACDAYS)
This is a required parameter.
The number of days a user profile can be inactive before it is disabled. Profiles will be disabled when they have been inactive for the specified number of days. This can be from 1 to 366, or *NOMAX.
- *NOMAX
- Profiles will not be considered inactive.
| Top |
Examples
ANZPRFACT INACDAYS(30)
This command analyzes whether or not profiles have been active in the last 30 days. User profiles that have been inactive for 30 days or more will be disabled.
| Top |
| Top |