Authorizing the user IDs to run the agent

For a user ID to configure, start, and stop the WebSphere® MQ agent, the user ID must belong to the mqm group, which has full administrative privileges over IBM® MQ (WebSphere MQ). Also, for a non-root user or a non-administrator user, you must grant users the access to the IBM MQ (WebSphere MQ) objects by using the IBM MQ (WebSphere MQ) control command.

• On AIX or Linux system, complete the following steps:
  1. Log on to the AIX or Linux system by using the root ID.
  2. Add the user ID that is used to run the agent to the mqm group.
  3. (WebSphere MQ V7.5 or later): If the user ID is a non-root user on the AIX or Linux system, set the appropriate level of authority for the user ID to access the IBM MQ (WebSphere MQ) objects by running the following command:

     setmqaut -m queue_manager -t qmgr -p user_ID +inq +connect +dsp +setid

     where queue_manager is the name of the queue manager of WebSphere MQ V7.5 or later and user_ID is the non-root or non-administrator user ID to run the agent.
• On Windows systems, complete the following steps:
  1. Log on to the Windows systems as a system administrator.
  2. Add the user ID that is used to run the agent to the mqm group.
  3. If the user ID that you use to start, run, and stop the agent is not a member of the Administrators group, use the Registry Editor to set permissions for a user ID to ensure that the agent can be started and stopped successfully:
     1. Click Start > Run, and then type regedit.exe to open the Registry Editor.
     2. In the Registry Editor, locate the key, HKEY_LOCAL_MACHINE\SOFTWARE\Candle.
     3. Right-click the key and click Permissions.
     4. If the user ID for the WebSphere MQ agent is not in the Group or user names list, click Add to add the user ID to the list.
     5. Click the user ID in the list.
     6. In the Permissions for the user-ID list, where user-ID is the user ID of WebSphere MQ agent, select Full Control in the Allow column and click OK.
     7. In the Registry Editor, locate the key, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib.
     8. Right-click the key and click Permissions.
     9. If the user ID for the WebSphere MQ agent is not in the Group or user names list, click Add to add the user ID to the list.
     10. Click the user ID in the Group or user names list.
     11. In the Permissions for the user-ID list, where user-ID is the user ID of WebSphere MQ agent, select Read in the Allow column and click OK.
     12. Close the Registry Editor.
     13. Locate the install_dir directory, where install_dir is the agent installation directory.
     14. Right-click the directory and click Properties.
     15. On the Security tab, if the user ID for WebSphere MQ agent is not in the Group or user names list, click Edit and then Add to add the user ID to the list.
     16. Click the user ID in the Group or user names list.
     17. In the Permissions for the user-ID list, select Full Control in the Allow column, where user-ID is the user ID of WebSphere MQ agent.
     18. Click OK.