IBM i Developers Share RPGLE Pattern to Automate User Access Provisioning
A developer has published a production-tested RPGLE pattern on DEV Community that automates user access provisioning on IBM i without middleware or external servers. The system works by reading JSON request files dropped into an IFS inbox directory, which a scheduled RPGLE job periodically scans and processes using SQL and IBM's QSYS2 system views. Each request specifies a target user and a model user, and the program clones the model's profile and entitlements to the new account using a CL wrapper around the CPYUSRPRF command. The solution uses RPG's DATA-INTO opcode with a YAJL-based parser to deserialize JSON directly into data structures, eliminating manual token parsing. An audit trail is maintained by writing history records and emitting JSON audit events, addressing a common compliance gap in manual access provisioning workflows.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)
Log in to join the discussion and vote.
Log in