Granting full administrative access to some topics
Grant full administrative access to some topics on a queue manager, to each group of users with a business need for it.
To grant full administrative access to some topics for some actions, use the appropriate
commands for your operating system. On the following platforms, we can also use the
SET AUTHREC command:
- IBM® i
- Linux
UNIX
- Windows
Note: On IBM MQ Appliance we can use
only the SET AUTHREC command.
Procedure
-
On UNIX, Linux, and Windows:
setmqaut -m QMgrName -n ObjectProfile -t topic -g GroupName +alladm
-
On IBM i:
GRTMQMAUT OBJ(' ObjectProfile ') OBJTYPE(*TOPIC) USER(GroupName) AUT(ALLADM) MQMNAME(' QMgrName ')
-
On z/OS®:
RDEFINE MQADMIN QMgrName.TOPIC. ObjectProfile UACC(NONE) PERMIT QMgrName.TOPIC. ObjectProfile CLASS(MQADMIN) ID(GroupName) ACCESS(ALTER)
The variable names have the following meanings:- QMgrName
- The name of the queue manager.
On z/OS, this value can also be the name of a queue-sharing group.
- ObjectProfile
- The name of the object or generic profile for which to change authorizations.
- GroupName
- The name of the group to be granted access.