Halcyon Software Announces New Security Tool - Authority Swapper

Share Article

Halcyon Software have announced a new access control product for the IBM i called Authority Swapper with an official release date of November 30th. This new utility allows a user to temporarily swap to a different profile that typically has additional authorities so that they can complete a specific task. The swapped user can be audited to a very in-depth level to meet auditors’ requirements and ensure that they do not attempt to do anything untoward.

“Security has tightened up at customer sites and IT teams are under scrutiny to ensure that no one has greater levels of access than they need. Authority Swapper was invented to address this need." Donnie MacColl, Dir.Tech. Services, Halcyon Software

Halcyon Software have announced a new access control product for the IBM i called Authority Swapper with an official release date of November 30th.

This new utility allows a user to temporarily swap to a different profile that typically has additional authorities so that they can complete a specific task. The swapped user can be audited to a very in-depth level to meet auditors’ requirements and ensure that they do not attempt to do anything untoward.

The two key benefits of the Authority Swapper software means that security officers can now control when the user has access to the additional authorities as well as record a log of what each user did on the system when they had been granted the higher level of authority.

Donnie MacColl, Director of Technical Services at Halcyon Software, comments “Over the last 2 years we have noticed how security has tightened up at customer sites and IT teams are under closer scrutiny to ensure that no one has greater levels of access than they need to carry out their everyday tasks.

More stringent security legislation and regulations like PCI compliance have caused this increased focus on access control. However there are times when people do need for defined periods higher levels of access to the IBM i than their normal user profile would allow. Authority Swapper was invented to address this need. There is an option to schedule temporary authority for specific time-frames if required and the solution can be integrated into our other monitoring modules as we know that real-time intrusion detection can also be important to our customers”.

Without this kind of specialist utility system administrators or security officers would have to do one of the following: give the user permanent additional authorities in their own profile, or provide a password of an alternative profile that has the required authorities or sign on to the system, on behalf of the user, with the appropriate level of authority as and when required.

Four typical scenarios provide key examples of how companies would use Authority Swapper as part of their security policy for controlling access to important information on the IBM i:

1) Non permanent staff can be given very low authority levels to signon to the IBM i and temporarily swap to an authorised profile to perform tasks of a higher level user whilst being audited. If required the ability to swap profiles can be restricted to certain times of the day and the duration of the swap can also be limited.

2) Helpdesk staff who need to create new users or grant authority to other users no longer need high level access. They can signon as a user class profile and swap to an administrator type role when they need to perform such tasks and be audited at all times.

3) If companies have users who need access to applications and files on the IBM i which contain confidential, sensitive or financial information usually they are given a user profile with the appropriate authority for access. This can be dangerous as it means they can use the same profile to extract data from the IBM i, for example exporting information into Excel without being detected.

4) When upgrading applications or performing IBM PTF updates – system administrators and security officers can allocate a specific user profile with privileges to perform these kinds of tasks and a user can be swapped to temporary profile as and when necessary.
To learn more customers can watch the guided technical tour: http://www.halcyonsoftware.com/tv/authority-swapper/index.html

About Halcyon Software
Halcyon Software is a global leader in multi-platform systems management software. With more than 20 years of delivering proven solutions and first class customer support, Halcyon’s products proactively monitor, manage and automate IT operations. Large multi-nationals, corporate and public sector data centres as well as small to medium sized organizations throughout the world rely on Halcyon Software to ensure their mission-critical systems, core applications and services are available 24/7.

Halcyon solutions support IBM enterprise class systems, including the IBM i®, AIX® as well as Windows®, UNIX® and Linux® platforms.

Halcyon Software reduces the complexity of systems monitoring and automation. Solutions deliver real ROI by automating 100 percent of routine tasks to free up valuable resources, reduce operating costs and minimize the risk of human error.

With regional offices in Peterborough UK, Philadelphia, USA and Melbourne, Australia, Halcyon also has a world-wide network of partners and distributors supporting EMEA the Americas, and Asia Pac territories.

###

Share article on social media or email:

View article via:

Pdf Print

Contact Author

Carole Chandler
Visit website