Granting full administrative access to a queue manager

Grant full administrative access to a queue manager, to each group of users with a business need for it.


To grant full administrative access to the queue manager, use the appropriate commands for your operating system. On the following platforms, we can also use the SET AUTHREC command:

  • IBM i
  • Linux
  • UNIX
  • Windows

Note: On IBM MQ Appliance we can use only the SET AUTHREC command.


Procedure

  • On UNIX, Linux, and Windows:
    setmqaut -m QMgrName -t qmgr -g GroupName +alladm
    
  • On IBM i:
    GRTMQMAUT OBJ(' ObjectProfile ') OBJTYPE(*MQM) USER(GroupName) AUT(*ALLADM) MQMNAME(' QMgrName ')
    
  • On z/OS :
    RDEFINE MQADMIN QMgrName.QMGR UACC(NONE)
    PERMIT QMgrName.QMGR CLASS(MQADMIN) ID(GroupName) ACCESS(ALTER)
    
    The variable names have the following meanings:

      QMgrName
      The name of the queue manager.

      On z/OS, this value can also be the name of a queue sharing group.

      ObjectProfile
      The name of the object or generic profile for which to change authorizations.

      GroupName
      The name of the group to be granted access.

Parent topic: Granting required access to resources