As a BRMS administrator, you understand the importance of protecting user and system data from deletion, distortion, and theft. The BRMS functional usage model allows you to customize user access to BRMS functions (backup, recovery, and media management) and to the different components of each function. For example, you can give one user authority to change a control group, and another the authority only to use and view it. You can also use the functional usage model to grant all users access to a particular function or functional component.
You need to access the BRMS functional usage model through the System i Navigator interface. You can find instructions on how to use System i Navigator with the functional usage model later in this chapter. If you do not have System i Navigator installed on your system, you can find some tips on how to secure your BRMS functions in the "Working with i5/OS Security Controls" section of this chapter.
BRMS also provides another security option, the SETUSRBRM command, that allows you to reset a user or group profile by job category, *OPERATOR or *ADMINISTRATOR. Use the Set User Usage for BRM (SETUSRBRM) command as a starting point for controlling access to BRMS functions, and use the System i Navigator interface to tailor your security setup to better meet your requirements. You do not need to have System i Navigator installed to use this command.
BRMS provides effective control over user access to BRMS functionality. Use i5/OS security options to prevent users from causing accidental or intentional damage to your files or system. However, because BRMS ships its databases with *PUBLIC *USE authority (which allows use but not change), irreparable damage is unlikely to occur.