Authority to administer IBM MQ on z/OS

Authority to administer IBM MQ on z/OS

This collection of topics describes various aspects of the authority you need to administer IBM MQ for z/OS®.

Authority checks on z/OS
IBM MQ for z/OS uses the System Authorization Facility (SAF) to route requests for authority checks to an external security manager (ESM) such as the z/OS Security Server Resource Access Control Facility ( RACF® ). IBM MQ does no authority checks of its own.
Command security and command resource security
Command security relates to the authority to issue a command; command resource authority relates to the authority to perform an operation on a resource. Both are implemented y using RACF classes.
MQSC commands and the system command input queue on z/OS
Use this topic to understand how the command server processes MQSC commands directed to the system command input queue on z/OS.
Access to the queue manager data sets on z/OS
IBM MQ for z/OS administrators need authority to access the queue manager data sets. Use this topic to understand which data sets need RACF protection.
Parent topic: Authority to administer IBM MQ