If QUERYAuth option is not set in dsmserv.opt :-)
I personally prefer to have QUERYAuth=ANalyst and give to such a person
the analyst authority. Thus other admins with no authority can open
"dsmadmc -consolemode" or "dsmadmc -mountmode" without being able to run
even queries.
May I am a way too paranoid.

Zlatko Krastev
IT Consultant






Dwight Cook <cookde AT US.IBM DOT COM>
Sent by: "ADSM: Dist Stor Manager" <ADSM-L AT VM.MARIST DOT EDU>
14.07.2003 23:37
Please respond to "ADSM: Dist Stor Manager"


        To:     ADSM-L AT VM.MARIST DOT EDU
        cc:
        Subject:        Re: administrator query only access


just simply register an admin but grant it no authority...

the only thing they can do are queries...
and they can't even perform "show" commands (but that depends on what
level
of tsm server you are at)

Dwight




                      Joni Moyer
                      <joni.moyer@HIGHM        To: ADSM-L AT VM.MARIST DOT EDU
                      ARK.COM>                 cc:
                      Sent by: "ADSM:          Subject:  administrator
query only access
                      Dist Stor
                      Manager"
                      <[email protected]
                      .EDU>


                      07/14/2003 12:39
                      PM
                      Please respond to
                      "ADSM: Dist Stor
                      Manager"






Hello!

I want to create an administrative id that can only run queries on certain
servers.  Is this possible?  I went out and checked the priviledge class,
but none of the definitions really fit.  Any ideas?

Joni Moyer
Systems Programmer
joni.moyer AT highmark DOT com
(717)975-8338