3.3.1 Establish DAS administrative group

Information

The dasadm_group parameter defines the group name with DAS Administration (DASADM) authority for the DAS. It is recommended that the dasadm_group group contains authorized users only.

The DAS is a special administrative tool that enables remote administration of DB2 servers. DASADM authority is the highest level of authority within the DAS.

Solution

1. Attach to the DB2 instance.
db2 => attach to $DB2INSTANCE
2. Run the following command from the DB2 command window:
db2 => update database configuration using dasadm_group <valid system group>
Default Value:
The default value for dasadm_group is null.

See Also

https://workbench.cisecurity.org/files/1654

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(7)

Plugin: Windows

Control ID: 32785e8e71dd5507abf7919bf0eb348f91b08f58376d4ff859b7cc6e4022de65