IBM i User Profile Analysis Using QSYS2.USER_INFO

August 26, 2026 
  
Like many of you, I receive IBM Notifications via email multiple times per day. The IBM Notification Page can be found here. 
Take advantage of this if you haven't already. 
 
  Sign up: 
- Select IBM products in which you are interested.
- Choose daily or weekly notifications.
- Select a delivery method: e-mail and/or RSS news feed.    
 
In a recent notification, a topic and link about "IBM i User Profile Analysis" was presented. There is a lot of good material to review. Many admins already have SQL's and queries relating to this topic.
 
IBM summarizes the page as follows:      
 "IBM i User Profile Analysis Using QSYS2.USER_INFO explains how IBM i security administrators        can use SQL services to audit and analyze user profiles across the system".
 
 "The document focuses on the QSYS2.USER_INFO view, which provides detailed information about    all user profiles defined on an IBM i partition. By combining this view with related services such as        QSYS2.GROUP_PROFILE_ENTRIES and SYSTOOLS.AUDIT_JOURNAL_CP, administrators can      perform comprehensive security reviews directly through SQL, eliminating the need for traditional          green screen commands and manual profile inspections."
The link to the QSYS2.USER_INFO page can be opened here. 
There are 12 SQL's listed with related IBM i Services and References including 
composed SQL's that can copied off of the page and used. There is also recommended action for each SQL.
 
NOTE: Read the comments at the top of the SQL's. They show the V7Rx OS
the SQL's can be run on. In a couple of cases, I could comment out a field
on a V7R4 partition and get the SQL to run where it indicated it was a V7R5 / V7R6
SQL. Simple enough. 
 
 

No comments:

Post a Comment