Command Reference > infacmd ws Command Reference > SetOperationPermissions
  

SetOperationPermissions

Sets the user or group permissions for a web service operation. You can set permissions or deny permissions for a user or group.
The infacmd ws SetOperationPermissions command uses the following syntax:
SetOperationPermissions

<-DomainName|-dn> domain_name

<-ServiceName|-sn> service_name

<-UserName|-un> user_name

<-Password|-pd> password

[<-SecurityDomain|-sdn> security_domain]

[<-ResilienceTimeout|-re> timeout_period_in_seconds]

<-WebService|-ws> web_service

<-Operation|-op> operation

<-GranteeUserName|-gun> grantee_user_name|
<-GranteeGroupName|-ggn> grantee_group_name>

[<-GranteeSecurityDomain|-gsdn> grantee_security_domain]

[<-AllowedPermissions|-ap> list_of_allowed_permissions_separated_by_space]

[<-DeniedPermissions|-dp> list_of_denied_permissions_separated_by_space]
The following table describes infacmd ws SetOperationPermissions options and arguments:
Option
Argument
Description
-DomainName
-dn
domain_name
Required. Name of the Informatica domain. You can set the domain name with the -dn option or the environment variable INFA_DEFAULT_DOMAIN. If you set a domain name with both methods, the -dn option takes precedence.
-ServiceName
-sn
service_name
Required. Name of the Data Integration Service where the web service is deployed.
-UserName
-un
user_name
Required if the domain uses Native or LDAP authentication. User name to connect to the domain. You can set the user name with the -un option or the environment variable INFA_DEFAULT_DOMAIN_USER. If you set a user name with both methods, the -un option takes precedence.
Optional if the domain uses Kerberos authentication. To run the command with single sign-on, do not set the user name. If you set the user name, the command runs without single sign-on.
-Password
-pd
password
Required if you specify the user name. Password for the user name. The password is case sensitive. You can set a password with the -pd option or the environment variable INFA_DEFAULT_DOMAIN_PASSWORD. If you set a password with both methods, the password set with the -pd option takes precedence.
-SecurityDomain
-sdn
security_domain
Required if the domain uses LDAP authentication. Optional if the domain uses native authentication or Kerberos authentication. Name of the security domain to which the domain user belongs. You can set a security domain with the -sdn option or the environment variable INFA_DEFAULT_SECURITY_DOMAIN. If you set a security domain name with both methods, the -sdn option takes precedence. The security domain name is case sensitive.
If the domain uses native or LDAP authentication, the default is Native. If the domain uses Kerberos authentication, the default is the LDAP security domain created during installation. The name of the security domain is the same as the user realm specified during installation.
-ResilienceTimeout
-re
timeout_period_in_seconds
Optional. Amount of time in seconds that infacmd attempts to establish or re-establish a connection to the domain. You can set the resilience timeout period with the -re option or the environment variable INFA_CLIENT_RESILIENCE_TIMEOUT. If you set the resilience timeout period with both methods, the -re option takes precedence.
-WebService
-ws
web_service
Required. Name of the web service service.
-Operation
-op
operation
Required. Name of the web service operation.
-GranteeUserName|GranteeGroupName
-gun|-ggn
grantee_user_name|
grantee_group_name
Required. User name or group name to set or deny permissions for.
-GranteeSecurityDomain
-gsdn
grantee_security_domain
Required if you use LDAP authentication and you are granting user permissions. Name of the security domain that the user belongs to.
-AllowedPermissions
-ap
list_of_allowed_permissions_separated_by_spac e
Required. List of permissions to allow. Enter any of the following parameters separated by space:
  • - GRANT. Users can grant and revoke permissions on the operation using the Administrator tool or using the infacmd command line program.
  • - EXECUTE. Users can run the operation.
-DeniedPermissions
-dp
list_of_denied_permissions_separated_by_space
Optional. List of permissions to deny users. Enter any of the following parameters separated by space:
  • - GRANT. Users cannot grant and revoke permissions on the operation.
  • - EXECUTE. Users cannot run the operation.