Run As User

Some types of Job Definition let you specify a user under which the code is executed. The user must exist and not be locked for the code to be executed on the target system.

The Remote Run As User is used in Job Definition of types FTP and SQLPLUS. This is the user for logging into the remote FTP server or Oracle database. The Run As User account is used to run the client software (jftp or sqlplus) on the Job Server.

You can use the syntax [<domain>\]<user>/<password>@<server> in a Run As User field. However, this syntax does not let you use '/', '\', or '@' in passwords and is not recommended.

Redwood recommends using the Credentials feature for authentication. For more information, see the Assign Users from External Platforms to OS Processes with Credentials. The syntax for a credential is [[<domain>\]<username>, where <domain> is the LAN Manager domain name found in the domain dropdown list when you log into Microsoft Windows Domains, and <username> matches the Username field of the credential. The syntax for a credential with virtual user is {virtual}:<user>, where <user> is the value of the Virtual User field of the credential.

Run As User is generally used to control the user account under which the OS process runs on the host where the Platform Agent runs. Remote Run As User is used to control an extra user account that is used in particular Job Definition types only.

For SQLPLUS and JCL_FTP, the Run As User value is used for the remote account, because there is no use for the local Run As User.

Note: You can override the values of the [Remote] Run As User fields with JCS_[REMOTE_]USER parameters. For more information, see Assign Users from External Platforms to OS Processes with Credentials.

Controlling the RunAsUser and/or RemoteRunAsUser at Runtime

If you need to control the user account at submission, you can override the user, password, and endpoint parts of a credential with the following parameters:

  • JCS_USER
  • JCS_ENDPOINT- (for SQLPLUS and JCL_FTP only)
  • JCS_REMOTE_USER
  • JCS_REMOTE_ENDPOINT

Note: The endpoint for Job Definition types other than SQLPLUS and JCL_FTP is fixed to the EndPoint Job Server parameter, or if that is not set, the RemoteHostName Job Server parameter.

Examples

If a credential for user oracle exists for all Job Servers attached to the Queue where you submitted the Job, Run As User can be set to oracle.

If a credential for EXAMPLE\jdoe exists for all Job Servers attached to the Queue where you submitted the Job, and all of the Job Servers trust users from the EXAMPLE domain, Run As User can be set to EXAMPLE\jdoe

If a credential has the Virtual User field set to erpuser for all Job Servers attached to the Queue where you submitted the process, Run As User can be set to {virtual}:erpuser.