Connection security profiles for IMS connections

Profiles for checking IMS connections are composed of the queue manager or queue sharing group name followed by the word IMS . Give the IMS control and dependent region user IDs READ access to the connection profile.

Profiles for checking connections from IMS take the form: 
hlq.IMS

where hlq can be either qmgr-name (queue manager name) or qsg-name (queue sharing group name). If we are using both queue manager and queue sharing group level security, IBM MQ checks for a profile prefixed by the queue manager name. If it does not find one, it looks for a profile prefixed by the queue sharing group name. If it fails to find either profile, the connection request fails

For connection requests by IMS, permit access to the connection profile for the IMS control and dependent region user IDs.

For example, the following RACF commands allow:

  • The IMS region user ID, IMSREG, to connect to the queue manager TQM1.
  • Users in group BMPGRP to submit BMP jobs. 

RDEFINE MQCONN TQM1.IMS UACC(NONE)
PERMIT TQM1.IMS CLASS(MQCONN) ID(IMSREG,BMPGRP) ACCESS(READ)
Parent topic: Profiles for connection security