Planning Analytics

 View Only
Expand all | Collapse all

PAW Local - Promote a user to administrator

  • 1.  PAW Local - Promote a user to administrator

    Posted Wed April 27, 2022 11:30 AM
    All,

    Hopefully someone on this thread can help!

    We have a customer with PAW (2.0.72) installed on Linux.  The customer recently changed the Integrated Security Mode for a PA server that PAW was using for authentication to Mode 5.  PAW was also updated to mode 5 (successfully validated and applied in the Admin Tool) and users can log into PAW.  Unfortunately, no current PAW user is an Administrator in PAW:  previously this was the Admin PA user (Mode 1).  There is supposedly a way to promote a PAW user to Administrator via script:  We are attempting to follow the steps here:  Promote a user to administrator when your administrator is not available

    Just as an aside - the scripts at the link above do not show the parameters findLoggedInAtleastOnceUsers and changeUserRoleToAdmin!

    We can list the users (using docker exec -it wa-proxy bash -C /wa-proxy/tools/runTool.sh findLoggedInAtleastOnceUsers):
    [
    {
    "full-name": "Admin",
    "last-logon-dates": "2022-3-29 17:47:45"
    },
    {
    "full-name": "Azure AD/John Smith",
    "last-logon-dates": "2022-4-26 20:27:56"
    },
    {
    "full-name": "Azure AD/BusinessPartner BI Vendor",
    "last-logon-dates": "2022-4-27 12:37:55"
    },
    {
    "full-name": "BusinessPartner BI Vendor",
    "last-logon-dates": "2022-4-27 14:45:10"
    }
    ]

    The first three users are no longer relevant after changing PAW to use CAM authentication - only the last user.   That user can log into PAW.

    But, if we try to promote the user (e.g. "BusinessPartner BI Vendor") to Administrator using this script:  
    docker exec -it wa-proxy bash -C /wa-proxy/tools/runTool.sh changeUserRoleToAdmin "BusinessPartner BI Vendor"

    It fails with:
    Emulate Docker CLI using podman. Create /etc/containers/nodocker to quiet msg.
    ###############################################
    To change user role to 'administrator' run the following command replacing <containerId> and <userId> wih appropriate values.

    Linux: docker exec -it <containerId> bash -C /wa-proxy/tools/runTool.sh changeUserRoleToAdmin <userId>

    Windows: docker exec -it <containerId> powershell -command "C:\wa-proxy\tools\runTool.ps1 changeUserRoleToAdmin <userId>"
    ###############################################
    User with id: 'BusinessPartner, not found

    The script seems to be dropping everything after the space between 'BusinessPartner' and 'BI' in the userid ("BusinessPartner BI Vendor") which is what the previous script returned!

    No amount of quoting seems to help.

    Is there another userid besides the one returned from the previous script (maybe one that doesn't have spaces in it!) that PAW really has for the user that we should be using in the second script?  How would we go about finding that. One would infer that you use the results of the first script (the full-name value) as the userid in the second script.  

    Is there another way to promote a user to Administrator in PAW? 
    Thanks!
    Chris 


     


    ------------------------------
    Chris Wolfe
    ------------------------------

    #PlanningAnalyticswithWatson


  • 2.  RE: PAW Local - Promote a user to administrator

    Posted Wed April 27, 2022 02:30 PM
    All, 

    IBM Support was able to help - honestly would love to give a shout out to the support person! 

    To find the userid, you actually run this script (on Linux):
    docker exec -it wa-proxy bash -C /wa-proxy/tools/runTool.sh changeUserRoleToAdmin

    Running this script without a <userid> will actually return a similar list except the actual userid will be included!  Then run the script above adding the <userid> and, voilà, the user is now an Administrator in PAW.   
    docker exec -it wa-proxy bash -C /wa-proxy/tools/runTool.sh changeUserRoleToAdmin <userid> 

    Thanks to IBM Support for the assist here!
    Chris

    ------------------------------
    Chris Wolfe
    ------------------------------