Granting authority to put messages to a model queue
Grant the authority to put messages to a model queue or set of model queues, to each group of users with a business need for it.
About this task
Model queues are used to create dynamic queues. We must therefore grant authority to both the model and dynamic queues. To grant these authorities, use the appropriate commands for the operating system. On the following platforms, we can also use the SET AUTHREC command:
- IBM i
- Linux
- UNIX
- Windows
Note: On IBM MQ Appliance we can use only the SET AUTHREC command.
Procedure
- For UNIX, Linux, and Windows systems, issue the following commands:
setmqaut -m QMgrName -n ModelQueueName -t queue -g GroupName +put setmqaut -m QMgrName -n ObjectProfile -t queue -g GroupName +put- For IBM i, issue the following commands:
GRTMQMAUT OBJ(' ModelQueueName ') OBJTYPE(*Q) USER(GroupName) AUT(*PUT) MQMNAME(' QMgrName ') GRTMQMAUT OBJ(' ObjectProfile ') OBJTYPE(*Q) USER(GroupName) AUT(*PUT) MQMNAME(' QMgrName ')- For z/OS, issue the following commands:
RDEFINE MQQUEUE QMgrName. ModelQueueName UACC(NONE) PERMIT QMgrName. ModelQueueName CLASS(MQQUEUE) ID(GroupName) ACCESS(UPDATE) RDEFINE MQQUEUE QMgrName. ObjectProfile UACC(NONE) PERMIT QMgrName. ObjectProfile CLASS(MQQUEUE) ID(GroupName) ACCESS(UPDATE)The variable names have the following meanings:
- QMgrName
- The name of the queue manager. On z/OS, this value can also be the name of a queue sharing group.
- ModelQueueName
- The name of the model queue on which dynamic queues are based.
- ObjectProfile
- The name of the dynamic queue or generic profile for which to change authorizations.
- GroupName
- The name of the group to be granted access.
Parent topic: Granting required access to resources