Grant full administrative access to some queues on a queue manager, to each group of users with a business need for it.
About this task
To grant full administrative access to some queues, use the appropriate commands for your operating system.
On
UNIX,
Linux®,
Windows systems, and
IBM® i, you can also use the
SET AUTHREC command.
Note: On IBM MQ Appliance you can use only the SET AUTHREC command.
Procedure
-
For UNIX, Linux and Windows systems, issue the following command:
setmqaut -m QMgrName -n ObjectProfile -t queue -g GroupName +alladm
-
For IBM i, issue the following command:
GRTMQMAUT OBJ(' ObjectProfile ') OBJTYPE(*Q) USER(GroupName) AUT(*ALLADM) MQMNAME(' QMgrName ')
-
For z/OS®, issue the following commands:
RDEFINE MQADMIN QMgrName.QUEUE. ObjectProfile UACC(NONE)
PERMIT QMgrName.QUEUE. ObjectProfile CLASS(MQADMIN) ID(GroupName) ACCESS(ALTER)
The variable names have the following meanings:
- QMgrName
- The name of the queue manager. On z/OS, this value can also be the name of a queue-sharing group.
- ObjectProfile
- The name of the object or generic profile for which to change authorizations.
- GroupName
- The name of the group to be granted access.