Granting authority to access processes

Grant the authority to access a process or set of processes, to each group of users with a business need for it.

About this task

To grant the authority to access some processes, use the appropriate commands for the operating system. On the following platforms, we can also use the SET AUTHREC command:

• IBM i
• Linux
• UNIX
• Windows

Note: On IBM MQ Appliance we can use only the SET AUTHREC command.

Procedure

• For UNIX, Linux, and Windows systems, issue the following command:

  setmqaut -m QMgrName -n ObjectProfile -t process -g GroupName +all
  

• For IBM i, issue the following command:

  GRTMQMAUT OBJ(' ObjectProfile ') OBJTYPE(*PRC) USER(GroupName) AUT(*ALL) MQMNAME(' QMgrName ')
  

• For z/OS, issue the following commands:

  RDEFINE MQPROC QMgrName. ObjectProfile UACC(NONE)
  PERMIT QMgrName. ObjectProfile CLASS(MQPROC) ID(GroupName) ACCESS(READ)
  

  The variable names have the following meanings:

  QMgrName

  The name of the queue manager. On z/OS, this value can also be the name of a queue sharing group.

  ObjectProfile

  The name of the object or generic profile for which to change authorizations.

  GroupName

  The name of the group to be granted access.

Parent topic: Granting required access to resources