How do I prevent a user, who is authorized to PSAudit, from working with a file that is being audite (NETIQKB39511)

goal
How do I prevent a user, who is authorized to PSAudit, from working with a file that is being audited by DAR?

fact
VigilEnt Security Agent for iSeries 7.5

fact
VigilEnt Security Agent for PSAudit 7.5

fact
VigilEnt Security Agent for iSeries 5.4/7.0

fact
VigilEnt Security Agent for iSeries PSAudit 5.4

fact
Data Auditing and Reporting

fix

In Data Auditing and Reporting, Option 4 Work With Authority to Files of the System Menu, lets you manage the list of files which users are authorized to audit and report on. Follow the steps below:

1. From the NetiQ product access menu, select Option 1 PSAudit and press Enter.
   
2. Select Option 3 Data Auditing and Reporting and press Enter.
   
3. Press F11=Sys Menu.
   
4. Select Option 4 Work With Authority to Files and press Enter.
   
5. Put a 4=Delete next to the *All User ID entry to remove the global authority and press Enter.
   
6. Press F6=Add new user.
   
7. In the 'User' field indicate the user profile you are wanting to restrict.
   
8. In the 'Group' field indicate an X if the user profile is a group profile.
10. In the 'Library' field indicate the library where the file exists.
    
11. In the 'File' field indicate the file you want to restrict the user from.
    
12. Indicate Y in the 'Exclude' field to revoke access to the file and press Enter.
    
13. The Administrator field is not currently used.

 

  

Formerly known as NETIQKB39511