Role-based security

A role is a system user account that has a set of security permissions assigned to it, and each web user account is associated with a particular role. The permissions are checked to determine a web user's authorization to perform tasks in the web user interface or the REST application programming interface (API).

As a broker administrator, you can control the access that web users have to broker resources, by assigning each user to a predefined role. You can authorize users with a particular role to complete specific actions, by enabling or disabling aspects of the web or REST interface, or by configuring the web user interface to display only the options for which users are authorized. For example, you might allow users with one role to view broker resources, while allowing users with another role to modify them.

You can grant the same authorizations to multiple users by assigning them to the same role, but each user can be assigned to only one role.

For more information about assigning web users to roles, see Managing web user accounts, Controlling access to data and resources in the web user interface, and the mqsiwebuseradmin command.