Dumping profile settings on UNIX, Linux, and Windows

Use the dmpmqaut control command, the DISPLAY AUTHREC MQSC command, or the MQCMD_INQUIRE_AUTH_RECS PCF command to dump the current authorizations associated with a specified profile. Note that on IBM MQ Appliance we can use only the DISPLAY AUTHREC command.

For a full definition of the dmpmqaut control command and its syntax, see dmpmqaut.

For a full definition of the DISPLAY AUTHREC MQSC command and its syntax, see DISPLAY AUTHREC.

For a full definition of the MQCMD_INQUIRE_AUTH_RECS PCF command and its syntax, see Inquire Authority Records.

The following examples show the use of the dmpmqaut control command to dump authority records for generic profiles:

1. This example dumps all authority records with a profile that matches queue a.b.c for principal user1.

   dmpmqaut -m qm1 -n a.b.c -t q -p user1
   

   The resulting dump looks something like this example:

   profile:     a.b.*
   object type: queue
   entity:      user1
   type:        principal
   authority:   get, browse, put, inq
   

   Note: UNIX and Linux users cannot use the -p option; they must use -g groupname instead.
2. This example dumps all authority records with a profile that matches queue a.b.c.

   dmpmqaut -m qmgr1 -n a.b.c -t q
   

   The resulting dump looks something like this example:

   profile:     a.b.c
   object type: queue
   entity:      Administrator
   type:        principal
   authority:   all
   - - - - - - - - - - - - - - - - - 
   profile:     a.b.*
   object type: queue
   entity:      user1
   type:        principal
   authority:   get, browse, put, inq
   - - - - - - - - - - - - - - - - - 
   profile:     a.**
   object type: queue
   entity:      group1
   type:        group
   authority:   get 
   

3. This example dumps all authority records for profile a.b.*, of type queue.

   dmpmqaut -m qmgr1 -n a.b.* -t q
   

   The resulting dump looks something like this example:

   profile:     a.b.*
   object type: queue
   entity:      user1
   type:        principal
   authority:   get, browse, put, inq
   

4. This example dumps all authority records for queue manager qmX.

   dmpmqaut -m qmX
   

   The resulting dump looks something like this example:

   profile:     q1
   object type: queue
   entity:      Administrator
   type:        principal
   authority:   all
   - - - - - - - - - - - - - - - - - 
   profile:     q*
   object type: queue
   entity:      user1
   type:        principal
   authority:   get, browse
   - - - - - - - - - - - - - - - - - 
   profile:     name.*
   object type: namelist
   entity:      user2
   type:        principal
   authority:   get
   - - - - - - - - - - - - - - - - - 
   profile:     pr1
   object type: process
   entity:      group1
   type:        group
   authority:   get
   

5. This example dumps all profile names and object types for queue manager qmX.

   dmpmqaut -m qmX -l
   

   The resulting dump looks something like this example:

   profile: q1, type: queue
   profile: q*, type: queue
   profile: name.*, type: namelist
   profile: pr1, type: process
   

Note: For IBM MQ for Windows only, all principals displayed include domain information, for example:

profile:     a.b.*
object type: queue
entity:      user1@domain1
type:        principal
authority:   get, browse, put, inq

Parent topic: Use OAM generic profiles on UNIX, Linux, and Windows