Revoking authority to a profile using the IBM i command line using wsadmin scripting

To revoke authority to objects and directories in a profile, run the rvkwasaut script from the Qshell command line.

About this task

To run the script, follow these steps:

Procedure

On the IBM® i command line, run the STRQSH (Start Qshell) command.
On the Qshell command line, use the cd command to change to the directory that contains the script:
```
cd app_server_root/bin
```
Run the rvkwasaut script:
```
rvkwasaut -profileName profile [-user usrprf | -authlist authlist]
```
where profile is the profile to which you want are revoking authority, usrprf is the user profile from which you are revoking authority, and authlist is the authorization list from which you are revoking authority. You do not need to specify both the -user and -authlist parameters, but you must specify at least one of them. For more information on the rvkwasaut script and additional parameters, see rvkwasaut command.

Example

In the following example, the user profile jsmith no longer has authority to the profile devinst:

rvkwasaut -profileName devinst -user jsmith -recursive

In the example, the user profile jsmith no longer has authority to the installedApps subdirectory and all nested objects in the installedApps subdirectory.

rvkwasaut -profileName devinst -object installedApps -user jsmith -recursive