Object authority manager (OAM)

The authorization service component supplied with the WebSphere MQ products is called the Object Authority Manager (OAM). By default, the OAM is active and works with the control commands WRKMQMAUT (work with authority), WRKMQMAUTD (work with authority data), DSPMQMAUT (display object authority), GRTMQMAUT (grant object authority), RVKMQMAUT (revoke object authority), and RFRMQMAUT (refresh security).

The syntax of these commands and how to use them are described in the CL command help.

The OAM works with the entity of a principal or group.

When an MQI request is made or a command is issued, the OAM checks the authorization of the entity associated with the operation to see whether it can:

• Perform the requested operation.

• Access the specified queue manager resources.

The authorization service enables you to augment or replace the authority checking provided for queue managers by writing your own authorization service component.

 

Defining the service to the operating system

The authorization service stanzas in the queue manager configuration file

qm.ini define the authorization service to the queue manager. See Configuring services and components for information about the types of stanza.