Set up IBM MQ for z/OS data set security

There are many types of IBM MQ user. Use RACF® to control their access to system data sets.

The possible users of IBM MQ data sets include the following entities:

  • The queue manager itself.
  • The channel initiator
  • IBM MQ administrators, who need to create IBM MQ data sets, run utility programs, and similar tasks.
  • Application programmers who need to use the IBM MQ-supplied copybooks, include data sets, macros, and similar resources.
  • Applications involving one or more of:

    • Batch jobs
    • TSO users
    • CICS® regions
    • IMS regions
  • Data sets CSQOUTX and CSQSNAP
  • Dynamic queues SYSTEM.CSQXCMD.*

For all these potential users, protect the IBM MQ data sets with RACF.

You must also control access to all your 'CSQINP' data sets.