Removing connectivity to the queue manager

If we do not want user applications to connect to your queue manager, remove their authority to connect to it.

About this task

Revoke the authority of all users to connect to the queue manager by using the appropriate command for the operating system. On UNIX, Linux, Windows systems, and IBM i, we can also use the DELETE AUTHREC command. Note: On IBM MQ Appliance we can use only the DELETE AUTHREC command.

Procedure

• For UNIX, Linux, and Windows systems, issue the following command:

  setmqaut -m QMgrName -t qmgr -g GroupName -connect
  

• For IBM i, issue the following command:

  RVKMQMAUT OBJ ('QMgrName') OBJTYPE(*MQM) USER(*ALL) AUT(*CONNECT)
  

• For z/OS, issue the following commands:

  RDEFINE MQCONN QMgrName.BATCH UACC(NONE)
  RDEFINE MQCONN QMgrName.CHIN UACC(NONE)
  RDEFINE MQCONN QMgrName.CICS UACC(NONE)
  RDEFINE MQCONN QMgrName.IMS UACC(NONE)
  

  Do not issue any PERMIT commands.

  The variable names have the following meanings:

  QMgrName

  The name of the queue manager.

  On z/OS, this value can also be the name of a queue sharing group.

  GroupName

  The name of the group to be denied access.

Parent topic: Granting required access to resources