Task 25: Grant RACDCERT permissions to the security administrator for Advanced Message Security

Your IBM® MQ Advanced Message Security security administrator requires authority to use the RACDCERT command to create and manage digital certificates.

Identify the appropriate user ID for this role and grant permission to use the RACDCERT command. For example:


PERMIT IRR.DIGTCERT.* CLASS(FACILITY) ID(admin) ACCESS(CONTROL)
SETROPTS RACLIST(FACILITY) REFRESH

where admin is the user ID of your IBM MQ Advanced Message Security security administrator.