IBM MQ 8.0 was EOS 30th April 2020. Click EOS notice for more details

Setting up connection security

Grant the authority to connect to the queue manager to each user or group of users with a business need to do so.

About this task

To set up connection security, use the appropriate commands for your operating system.

On UNIX, Linux®, Windows systems, and IBM® i, you can also use the SET AUTHREC command.

Note: On IBM MQ Appliance you can use only the SET AUTHREC command.

Procedure

For UNIX, Linux and Windows systems, issue the following command:
```
setmqaut -m QMgrName -t qmgr -g GroupName +connect
```

For IBM i, issue the following command:


GRTMQMAUT OBJ('QMgrName') OBJTYPE(*MQM) USER('GroupName') AUT(*CONNECT)

For z/OS®, issue the following commands:
```
RDEFINE MQCONN QMgrName.BATCH UACC(NONE)
PERMIT QMgrName.BATCH CLASS(MQCONN) ID(GroupName) ACCESS(READ)
RDEFINE MQCONN QMgrName.CICS UACC(NONE)
PERMIT QMgrName.CICS CLASS(MQCONN) ID(GroupName) ACCESS(READ)
RDEFINE MQCONN QMgrName.IMS UACC(NONE)
PERMIT QMgrName.IMS CLASS(MQCONN) ID(GroupName) ACCESS(READ)
RDEFINE MQCONN QMgrName.CHIN UACC(NONE)
PERMIT QMgrName.CHIN CLASS(MQCONN) ID(GroupName) ACCESS(READ)
```
These commands give authority to connect for batch, CICS®, IMS and the channel initiator (CHIN). If you do not use a particular type of connection, omit the relevant commands.
The variable names have the following meanings:

QMgrName

The name of the queue manager. On z/OS, this value can also be the name of a queue-sharing group.

ObjectProfile

The name of the object or generic profile for which to change authorizations.

GroupName

The name of the group to be granted access.