Access authorizations on IBM i

Use this information to understand the access authorization commands.

Authorizations defined by the AUT keyword on the GRTMQMAUT and RVKMQMAUT commands can be categorized as follows:

• Authorizations related to MQI calls
• Authorization-related administration commands
• Context authorizations
• General authorizations, that is, for MQI calls, for commands, or both

The following tables list the different authorities, using the AUT parameter for MQI calls, Context calls, MQSC and PCF commands, and generic operations.

AUT	Description
*ALTUSR	Allow another user's authority to be used for MQOPEN and MQPUT1 calls.
*BROWSE	Retrieve a message from a queue by issuing an MQGET call with the BROWSE option.
*CONNECT	Connect the application to the specified queue manager by issuing an MQCONN call.
*GET	Retrieve a message from a queue by issuing an MQGET call.
*INQ	Make an inquiry on a specific queue by issuing an MQINQ call.
*PUB	Open a topic to publish a message using an MQPUT call.
*PUT	Put a message on a specific queue by issuing an MQPUT call.
*RESUME	Resume a subscription using an MQSUB call.
*SET	Set attributes on a queue from the MQI by issuing an MQSET call. If you open a queue for multiple options, we must be authorized for each of them.
*SUB	Create, Alter or Resume a subscription to a topic using an MQSUB call.

AUT	Description
*PASSALL	Pass all context on the specified queue. All the context fields are copied from the original request.
*PASSID	Pass identity context on the specified queue. The identity context is the same as that of the request.
*SETALL	Set all context on the specified queue. This is used by special system utilities.
*SETID	Set identity context on the specified queue. This is used by special system utilities.

AUT	Description
*ADMCHG	Change the attributes of the specified object.
*ADMCLR	Clear the specified object (PCF Clear object command only).
*ADMCRT	Create objects of the specified type.
*ADMDLT	Delete the specified object.
*ADMDSP	Display the attributes of the specified object.

AUT	Description
*ALL	Use all operations applicable to the object. all authority is equivalent to the union of the authorities alladm, allmqi, and system appropriate to the object type.
*ALLADM	Perform all administration operations applicable to the object.
*ALLMQI	Use all MQI calls applicable to the object.
*CTRL	Control startup and shutdown of channels, listeners, and services.
*CTRLX	Reset sequence number and resolve indoubt channels.

Parent topic: IBM MQ authorities on IBM i