Setting up administration security

You can activate administrative control for an individual broker when you create it. If appropriate, you can enable the security after creation by changing broker properties. When you have activated broker administration security, grant users or groups authority to complete their expected tasks.

You can also grant permissions to users of the web user interface by associating the web user account with a predefined role. For more information, see Role-based security and Managing web user accounts.

• Enabling administration security
• Authenticating users for administration
• Authorizing users for administration
• Disabling administration security

On z/OS®, WebSphere® MQ uses the System Authorization Facility (SAF) to route requests for authority checks to an external security manager (ESM) such as the z/OS Security Server Resource Access Control Facility (RACF®). WebSphere MQ does no authority checks of its own. All information about broker administration security on z/OS assumes that you are using RACF as your ESM. If you are using a different ESM, you might need to interpret the information provided for RACF in a way that is relevant to your ESM.