Import command for security assets

You can use the istool command line interface with the -security parameter to import IBM® InfoSphere® Information Server security assets, such as users and groups.

Purpose

You can import users, groups, roles, and credential mappings from previously exported archive files.

If a security asset of the same name exists in the target metadata repository, then the imported asset is merged with the existing asset. If the imported asset has entries for fields that are empty in the target asset, the imported settings are added to the target asset. For example, if a user has additional roles defined in the import file, those roles are added to the existing user in the target user definition.

You can use a single istool import command with the -all parameter to import most types of metadata assets from an archive file. See Moving all assets from one metadata repository to another.

Prerequisites

You must have the Suite Administrator role to import security assets.

The preferred way to run this command is in the istool command-line window. If you run this command in your operating system command-line window or in scripts, you must add istool before the command name.

Command syntax

Optional parameters and values in the syntax are enclosed in brackets, [ ].

import 
authentication
[generic parameters]
[-abortAfter number_of_errors]
-archive pathname
[-preview] | -replace
[-responseFile "file_name_and_path"]
-security

Parameters

authentication parameters
Required. All asset interchange commands use authentication parameters to connect to a specific installation of InfoSphere Information Server.
generic parameters
The generic parameters are available to all asset interchange commands. Use the generic parameters to request help on command syntax, to specify silent or verbose operation, and to use a script to run commands.
-abortAfter | -abort number_of_errors
Specifies that the import stops if more than the specified number of errors occur.
-preview | -pre
Previews the import. The preview lists the assets that will be imported when the import runs. The assets are not imported when you run a command with the -preview parameter.
-replace
Required. Merges existing assets with imported assets if they have the same identity.
-archive | -ar file_name_and_path
Required. Specifies the .isx file to import assets from.
-responseFile | -rf "file_name_and_path"
Specifies the name and path of a response file that contains assets that failed to import during a run of a previous istool import -sec command. Not supported with the -preview parameter. For more information, see Using a response file with istool export and istool import commands.
-security | -sec
Required. Specifies that security assets are imported.

Importing multiple types of assets

Archive files can contain assets from multiple exports of multiple tools. For best performance, when you import from an archive file, or when you migrate assets of varying types in multiple archive files, run separate commands to import the following types of assets in the following order:
  1. Users and groups
  2. Common metadata
  3. InfoSphere DataStage® and QualityStage® assets.
  4. Reports.
  5. InfoSphere Information Analyzer assets.
  6. InfoSphere FastTrack assets.
  7. InfoSphere Information Governance Catalog extended data sources.
  8. InfoSphere Information Governance Catalog extension mapping documents.
  9. InfoSphere Information Governance Catalog business glossary assets. In versions earlier than 11.3, these assets are created in InfoSphere Business Glossary.
  10. Custom attributes for InfoSphere Information Governance Catalog extended data sources and extension mappings. In versions earlier than 11.3, these assets are created in InfoSphere Metadata Workbench.
Asset types not listed can be imported in any order.

Exit status

A return value of 0 indicates successful completion; any other value indicates failure.

Example

The following command previews the contents of the archive file /opt/IBM/InformationServer/exports/dsuserexport.isx:
import -domain server1:9443 -username user1 -password pass1 
-archive "/opt/IBM/InformationServer/exports/dsuserexport.isx" -security -preview
The following command imports users from the archive file /opt/IBM/InformationServer/exports/dsuserexport.isx:
import -domain server1:9443 -username user1 -password pass1 
-archive "/opt/IBM/InformationServer/exports/dsuserexport.isx" -security -replace