Command Reference > infacmd cluster Command Reference > setConfigurationPermissions
  

setConfigurationPermissions

Sets permissions on cluster configuration to a user or a group after removing previous permissions.
Allows you to add, change or delete cluster configuration permissions for a user or a group. Removes previous permissions on the user or group.
Use either the -RecipientUserName or the -RecipientGroupName option.
You can grant multiple permissions from the following set in a single command: READ, WRITE, EXECUTE, GRANT. You can grant only ALL or NONE separately.
The infacmd cluster setConfigurationPermissions command uses the following syntax:
setConfigurationPermissions
<-DomainName|-dn> domain_name
<-UserName|-un> user_name
<-Password|-pd> password
[<-SecurityDomain|-sdn> security_domain]
[<-ResilienceTimeout|-re> timeout_period_in_seconds]
<-ConfigurationName|-cn> configuration_name
<<-RecipientUserName|-run> recipient_user_name | <-RecipientGroupName|-rgn> recipient_group_name>>
[<-RecipientSecurityDomain|-rsd> recipient_security_domain]
<-Permissions|-p> READ_WRITE_EXECUTE_GRANT|ALL|NONE
The following table describes infacmd cluster setConfigurationPermissions options and arguments:
Option
Argument
Description
-DomainName
-dn
domain_name
Required. Name of the Informatica domain. You can set the domain name with the -dn option or the environment variable INFA_DEFAULT_DOMAIN. If you set a domain name with both methods, the -dn option takes precedence.
-UserName
-un
user_name
Required if the domain uses Native or LDAP authentication. User name to connect to the domain. You can set the user name with the -un option or the environment variable INFA_DEFAULT_DOMAIN_USER. If you set a user name with both methods, the -un option takes precedence.
Optional if the domain uses Kerberos authentication. To run the command with single sign-on, do not set the user name. If you set the user name, the command runs without single sign-on.
-Password
-pd
password
Required if you specify the user name. Password for the user name. The password is case sensitive. You can set a password with the -pd option or the environment variable INFA_DEFAULT_DOMAIN_PASSWORD. If you set a password with both methods, the password set with the -pd option takes precedence.
-SecurityDomain
-sdn
security_domain
Required if the domain uses LDAP authentication. Optional if the domain uses native authentication or Kerberos authentication. Name of the security domain to which the domain user belongs. You can set a security domain with the -sdn option or the environment variable INFA_DEFAULT_SECURITY_DOMAIN. If you set a security domain name with both methods, the -sdn option takes precedence. The security domain name is case sensitive.
If the domain uses native or LDAP authentication, the default is Native. If the domain uses Kerberos authentication, the default is the user realm specified during installation.
-ResilienceTimeout
-re
timeout_period_in_seconds
Optional. Amount of time in seconds that infacmd attempts to establish or re-establish a connection to the domain. If you omit this option, infacmd uses the timeout value specified in the INFA_CLIENT_RESILIENCE_TIMEOUT environment variable. If no value is specified in the environment variable, the default of 180 seconds is used.
-ConfigurationName
-cn
Name of the cluster configuration
Required. Name of the cluster configuration on the domain. Values are not case sensitive.
-RecipientUserName
-run
recipient_user_name
Required if you do not use the RecipientGroupName option. Name of the user to grant permission to.
-RecipientGroupName
-rgn
recipient_group_name
Required if you do not use the RecipientUserName option. Name of the group to grant permission to.
-RecipientSecurityDomain
-rsd
recipient_security_domain
Security domain that the user or group is a member of.
-Permissions
-p
READ | WRITE | EXECUTE | GRANT
ALL
NONE
Permission or permissions to grant. To enter more than one permission, separate permissions with a space.