mqsiwebuseradmin command - z/OS

BrokerName

(Required) The name of the locally defined broker. You must specify this parameter first.

-l

(Optional) Lists the web users that are defined within the broker, and the roles with which they are associated.  If -u (user) or -r (role) is supplied, the list is filtered by that user or role.

-c

(Optional) Creates a web user account, which can log on to the web user interface and make REST API calls. If you use this parameter, you must also specify the -u and -a parameters. If you do not specify the -r parameter when you create a web user account, a default role is created with the same name as the web user account. In this case, the web user account that you create must have the same name as the system user account that has been specified on the system.

-m

(Optional) Modifies a web user account. If you use this parameter, you must use the -u parameter to specify the user account, and you must also specify a value for at least one of the -a and -r parameters, dependent upon which parameter you are modifying.

-d

(Optional) Deletes a web user account. If you use this option, you must also use the -u parameter to specify the user account.

-u username

(Optional) Specifies the name of a web user account. This parameter is required if you specify the -c, -d, or -m parameters.

-a password

(Optional) Specifies a web user account password. This parameter is required if you specify the -c parameter.

-r role

(Optional) Specifies a role to be associated with the web user account. If you are using queue-based authorization, the role is the system user account whose administration security permissions are checked. Each web user account is associated with a single role, and multiple web user accounts can be assigned to the same role.

If you do not specify the -r parameter when you create a web user account (by specifying the -c parameter), a default role is created with the same name as the web user account. If you are using queue-based authorization, the web user account that you create must have the same name as the system user account that has been specified on the system.

For more information about roles, see Role-based security.

-v traceFileName

(Optional) This parameter sends internal debug trace information to the specified file.

-w timeoutSecs

(Optional) This parameter specifies the maximum time in seconds that the command waits for the broker to complete the request before returning.

You can set this parameter to a value in the range 1 - 2 145 336 164. If you do not provide a timeoutValue value, or you set a value less than 1 or greater than 2 145 336 164 is specified, an error is returned.

Set this parameter to a value greater than the sum of the configuration timeout parameters ConfigurationChangeTimeout and InternalConfigurationTimeout that you specified for the broker, if you want to ensure that a response is received within the timeoutValue period. If you set a smaller value, the response returned might indicate that the state of the deploy request is unknown.

If you try to connect to a remote broker by specifying the i, p, and q parameters, or by using a connection parameter file (.broker), the command attempts to use WebSphere® MQ Java™ client code. This option is not supported on z/OS, and returns the following error:

BIP1046E: Unable to connect with the broker (name)

The reported reason code is MQRC_ENVIRONMENT_ERROR. You must specify a local queue manager.