Privilege User for IBM i V7

IBM i V7 (also written as IBM i Version 7.x) is a series of operating system releases for IBM Power Systems hardware. It is an upgraded version of what was known as OS/400 and i5/OS. IBM i is a highly integrated and stable enterprise operating system known for its security, scalability, and low administrative overhead.

Create a Scan User Account

To create a scan user account, the following prerequisites must be met:

Once the above pre-requisites are met, run the following commands:

CRTUSRPRF USRPRF(QUALYSUSER) PASSWORD(YOURPASSWORD) SPCAUT(*ALLOBJ *AUDIT *SERVICE *IOSYSCFG *SECADM) 

Running a Policy Compliance Scan

For running a Qualys Policy Compliance scans, the following 5 special authorities are required:

  • IOSYSCFG
  • ALLOBJ
  • SERVICE
  • AUDIT
  • SECADM

Update the CCSID Value for the Scan User

Apart from the special authorities, we need to set the CCSID value to 37 for the newly created user,s as it defines the character encoding used when interacting with the system. This can be achieved using the following command:

CHGUSRPRF USRPRF(QUALYSUSER) CCSID(37)

CCSID 37 is EBCDIC US/Canada (Latin-1), common for English-speaking North America. It affects how text is interpreted and what character set and language-specific symbols the user can use.

CCSID defines the character encoding used by the user when interacting with the system (for example, during terminal sessions or job execution). It affects the following:

  • How text is interpreted (such as ASCII, EBCDIC, and Unicode).
  • What character set and language-specific symbols the user can use.

Add Unix Authentication Record with Target Type IBM i Server (PC)

  1. Go to Scans > Authentication > New > Operating Systems > Unix > Login Credentials.

    New Unix record window.
  2. Enter the Username, Password, and Confirm Password.
  3. Select Target Type as IBM i Server (PC).
  4. Click Create.


- Ensure to use the target type in the authentication record as IBM i Server (PC). 
- The highest privilege a user or root user on IBM i server is QSECOFR with UID 0. This user has all the privileges and special authorities.