How can we restrict users with the DataStage Operator role to a read-only view of the Director?

Created by Linda Wang on
Published URL:
https://www.ibm.com/support/pages/node/413203
413203

Question & Answer


Question

How can we restrict DataStage Operator user role to:
- Provide read-only view of the Director client
- Prevent DataStage SuperOperator user role from deleting or creating jobs in the Director (to make it consistent with the use of this role in the Designer client)
- Prevent users with the DataStage Operator user role from accessing project properties in the Administrator client.

Answer

As of DataStage 9.1 and beyond this feature is included. 

Mark a project as "read-only" add the following line to the DSParams file in the InternalSettings section:

[InternalSettings]
OperatorLite=1

If this setting is found, then the following actions will be disabled in the Director client for users with the DataStage SuperOperator role:
  • Delete
  • Batch creation, editing, saving and deletion

Also, the following actions in the Director client will be disabled for users with the DataStage Operator role:
  • Running a job: Run now, Validate, Reset, Stop, Set parameter defaults
  • Scheduling a job: Add to schedule, Reschedule, Unschedule
  • Job logs: Clear logs, Change log auto-purge settings
  • Cleanup job resources, clearing job status file
  • Delete
  • Batch creation, editing, saving and deletion
  • Resource Estimation and Performance Analysis
  • Message Handler management and Data Set Management
  • Running the Designer client
  • Adding custom tools
  • Setting error and warning limits
  • Setting process priority for jobs

Also, if a project is marked as "OperatorLite" then users with the DataStage operator role for that project will not be able to access the project properties using the DataStage Administrator client.

Internal Use Only

This segment has been removed since it is not relevant for the latest versions 
The first thing needed is to install patch, patch_DirectorLite_client_windows_8012, on the DataStage Client. The patch can be requested from support.

[{"Type":"MASTER","Line of Business":{"code":"LOB76","label":"Data Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSZJPZ","label":"IBM InfoSphere Information Server"},"ARM Category":[{"code":"a8m50000000L175AAC","label":"DataStage-\u003EDataStage Director Client"},{"code":"a8m0z000000GmpwAAC","label":"Information Server Administration-\u003EIIS Roles"}],"ARM Case Number":"","Platform":[{"code":"PF033","label":"Windows"}],"Version":"11.3.0;11.5.0;11.7.0;8.1.0;8.5.0;8.7.0;9.1.0;9.1.2"}]

Document Information

Modified date:
22 June 2025

UID

swg21456987

Page Feedback