Can multiple people use profile exchange to exchange to the same alternate user profile?
Yes, they can. When multiple users exchange to the same profile, it can be a little harder to investigate which user made a specific change while using the profile. You need to refer to the Robot/SECURITY Activity List to determine which user was using Profile Exchange at that time to determine who was responsible for the change.

When a user has successfully exchanged to a profile with greater access privileges, can they use that authority to create new Robot/SCHEDULE jobs or other disruptive acts?
Yes, they could. However, if you use the security features of the Robot products correctly, you can prevent this type of mischief. For example, you can lock out alternate profiles from sensitive areas. If a user performs a malicious action while using Profile Exchange, Robot/SECURITY maintains a complete log of events to help you identify and prosecute the perpetrator.

During the time on the Access Schedule that a user is allowed to do a profile exchange, can they exchange as often as they want to?
Yes, users can exchange as many times as they wish within the times allowed on their access schedule.

Can you schedule profile exchanges within Robot/SCHEDULE jobs?
Yes, you can schedule profile exchanges as part of a Robot/SCHEDULE job by inserting the commands to start (RSESTREXC) and end (RSEENDEXC) profile exchange.

Note: This exchange affects only the batch job submitted by Robot/SCHEDULE; it has no effect on any interactive jobs.

This entry was posted on Wednesday, January 23rd, 2008 at 1:05 pm and is filed under Robot/SECURITY. You can follow any responses to this entry through the RSS 2.0 feed. Responses are currently closed, but you can trackback from your own site.