EIM association

The EIM association specifies whether an Enterprise Identity Mapping (EIM) association should be added to an EIM identifier for this user. Optionally, the EIM identifier can also be created if it does not already exist.

Add User prompt:
Not shown
CL parameter:
EIMASSOC
Notes:
  1. The EIM association information is not stored in the user profile. This information is not saved or restored with the user profile.
  2. If this system is not configured for EIM, then no processing is done. Not being able to perform EIM operations does not cause the command to fail.
Table 1. Possible values for EIMASSOC, single values:
Single values
*NOCHG EIM association will not be added.
Table 2. Possible values for EIMASSOC, element 1:
Element 1: EIM identifier

Specifies the EIM identifier for this association.
*USRPRF The name of the EIM identifier is the same name as the user profile.
character-value Specifies the name of the EIM identifier.
Table 3. Possible values for EIMASSOC, element 2:
Element 2: Association type

Specifies the type of association. It is recommended that a target association is added for an IBM® i user.

Target associations are primarily used to secure existing data. They are found as the result of a mapping lookup operation (for example, eimGetTargetFromSource()), but cannot be used as the source identity for a mapping lookup operation.

Source associations are primarily used for authentication purposes. They can be used as the source identity of a mapping lookup operation, but will not be found as the target of a mapping lookup operation.

Administrative associations are used to show that an identity is associated with an EIM identifier, but cannot be used as the source for, and will not be found as the target of, a mapping lookup operation.
*TARGET Process a target association.
*SOURCE Process a source association.
*TGTSRC Process both a target and a source association.
*ADMIN Process an administrative association.
*ALL Process all association types.
Table 4. Possible values for EIMASSOC, element 3:
Element 3: Association action
*REPLACE Associations of the specified type will be removed from all EIM identifiers that have an association for this user profile and local EIM registry. A new association will be added to the specified EIM identifier.
*ADD Add an association.
*REMOVE Remove an association.
Table 5. Possible values for EIMASSOC, element 4:
Element 4: Create EIM identifier

Specifies whether the EIM identifier should be created if it does not already exist.
*NOCRTEIMID EIM identifier does not get created.
*CRTEIMID EIM identifier gets created if it does not exist.