There are five user classes which are hierarchical in authority. The classes represent different roles in the AS400 environment. These are convenient ways to assign the special authorities listed above to different types of users. A higher class can perform all the functions of a lower class; for example, *SECOFR includes the privileges of *SECADM by default. The following are the five user classes.
1. *SECOFR Security Officer
Security officer: Create and manage user profiles, manage and monitor system security configuration, monitor past security-relevant events. Security Officer has full access to the system.
2. *SECADM Security Administrator
Security Administrator: Performance tuning, perform system upgrades, install and configure third-party applications, manage third-party job scheduler, TCP/IP configuration, WebSphere configuration, perform LPAR configuration and management
3. *PGMR Programmer
Programmer: Write and update application code, test code, debug production issues, fix programming defects
4. *SYSOPR System Operator
Operator: Perform back-ups, submit routine batch jobs, run nightly processing jobs, restore libraries as necessary, monitor for system messages, work with printed output
5. *USER End User
1. *SECOFR Security Officer
Security officer: Create and manage user profiles, manage and monitor system security configuration, monitor past security-relevant events. Security Officer has full access to the system.
2. *SECADM Security Administrator
Security Administrator: Performance tuning, perform system upgrades, install and configure third-party applications, manage third-party job scheduler, TCP/IP configuration, WebSphere configuration, perform LPAR configuration and management
3. *PGMR Programmer
Programmer: Write and update application code, test code, debug production issues, fix programming defects
4. *SYSOPR System Operator
Operator: Perform back-ups, submit routine batch jobs, run nightly processing jobs, restore libraries as necessary, monitor for system messages, work with printed output
5. *USER End User