HMC

 View Only

 HMC Task Role permission for ACS Virtual Control Panel

Sylvain Manceau's profile image
Sylvain Manceau posted Fri January 31, 2025 02:08 AM

Hi!

Running v10r3m1061 vHMC and ACS 1.1.9.7 ACS.

I'm currently setting restricted tasks & resources roles, to restrict user access in ACS: 5250 Console, Virtual Control Panel, restricted (partition Power On & Off) HMC.

5250 Console & HMC restricted access are working fine, but I couldn't find the Task Role to give access to Virtual Control Panel.

I have set the following Task Roles, "Partition" group:

  • Activate Partition
  • Connect 5250 VTerm
  • Suspend Partition (not sure it's needed for IBM i)
  • View Partitions
  • Manage Partition Serviceable Events
  • Open 5250 VTerm
  • Reboot Partition
  • Shutdown Partition

Nothing is set in "Managed System" or "HMC Console" groups.

Virtual Control Panel get stuck on "Trying...":

(not a network problem, I could confirm by using a unrestricted HMC user profile).

Did anyone ever dealed with v9/10 HMC Roles, or have any clue?

Thanks!

Sylvain Manceau's profile image
Sylvain Manceau

(replying to myself)

It took me some time to find it, it's "View Managed Systems" in "Managed System" group (Task role).

There are two minor drawbacks:

  • VCP display get disturbed by an error message, some manual resizing is needed (see below)
  • I can't provide limited HTTP access to the HMC anymore, some unwanted panels would be available to users

VCP leftmost part need resizing.

Can't precisely resize, leftmost part get automatically extended to full width. Hopefully the window can be extended to the right.

I hope my users will have a big screen, or good eyesight!

Robert Berendt's profile image
Robert Berendt IBM Champion

I thought VCP was more of a Lan Console thing that an HMC function.

Are you looking at this HMC screen on a browser on YOUR pc, or, are you looking at it on the vmware vHMC?  On our vHMC we had to up the video memory from 4GB to 5GB to get better sizing.  More is not always better.  A jump to 8GB was UGLY.

Robert Berendt's profile image
Robert Berendt IBM Champion

Ok, I see VCP now too.  I was just so used to finding most of this function already on HMC that I had no use for this.

Sylvain Manceau's profile image
Sylvain Manceau

@Robert Berendt actually I use it a lot. I found it very useful and easier as HMC, as I already use ACS for 5250 console.

And it comes with a bonus: displaying some code information, just hovering your mouse on them ;)

Please just be aware of the authentication: it uses the user you specified in ACS configuration, when setting up the 5250 Console thing. Can be retrieved somewhere in XMLs after saving ACS configuration.