[IBM i]

rvkwasaut command

The rvkwasaut command revokes user authority to a profile and the objects associated with it.

For usage instructions and examples, see Revoke authority to a profile. To run this script, your user profile must have *ALLOBJ authority.

Syntax

The command syntax is as follows:
rvkwasaut [-profileName profile] [-user usrprf | -authlist none]
 [-object path] [-recursive] [-verbose] [-help]

Parameters

The following options are available for the rvkwasaut command:

-profileName
This is an optional parameter. The value profile specifies the name of the profile to which you are revoking authority. The default value is default.
-user
The value usrprf specifies the user profile from which you are revoking authority. To revoke authority from multiple user profiles, specify all of the user profiles with a single -user parameter. Enclose the list of profiles in double quotation marks ("). For example, to revoke authority from usrprf1 and usrprf2, specify -user "usrprf1 usrprf2". You must specify -user, -authlist, or both.
-authlist
The value none specifies that the current authorization list associated with the object should be removed. If you use the -authlist parameter, you must specify the value none. You must specify either -user, -authlist, or both.
-object
This is an optional parameter. The value path specifies the subdirectory or partially qualified object name to which you are revoking authority. The profile root is prepended to the value to get the fully-qualified path. If you do not specify this parameter, the default value is the profile root. To revoke authority to multiple objects, you must run the script for each object.
-recursive
This optional parameter specifies whether to revoke authority to all subdirectories. If you do not specify this parameter, authority is revoked only to the object specified with the -object parameter, or the profile root directory if the -object parameter is not specified. This parameter applies to all objects specified with -object parameters.
-verbose
This optional parameter turns on verbose messages, which can be helpful if you need to debug the script.
-help
This optional parameter displays the help message. If you specify this parameter, the script ignores all other parameters.