Your auditor comes to you and says, “I need two more reports today. I need one that lists all enabled users with command line access, and one that lists all enabled users with *ALLOBJ special authority that have a default password.” You shake your head and start scrambling to make the new query definitions required to get the reports. It seems like every day it’s always new user reports…right?
Or perhaps you have an auditor coming next month and you want to make sure you have your system ready for inspection. Instead of writing a ton of custom queries, there is a better way to get all these various user profile reports.
A new command called Work with Profile Security Attributes (WRKPRFSECA) can save you loads of time when you need various flavors of user reports. In fact, there are thousands of different report combinations. It is a very comprehensive tool — and it’s taken me almost 5,000 lines of code to get it all together!
Articles on Apis 