Granting the Create authority
To create a new object on a queue manager, the user who performs the operation must have authority to create that type of object on the queue manager.
About this task
The authority can be granted to the group to which the user belongs (in which case, all members of the group are granted the Create authority) or, on Windows queue managers only, to an individual user.
The user can have the authority to create any type of object on the queue manager or just to create specific types of objects; for example, channels, queues, and listeners only.
Note that the ability to create a queue indirectly grants full administrative rights. Do not grant Create authority to ordinary users or applications.
To grant the authority to a group or user to create objects on a queue manager, complete the following steps.
Procedure
- In the Navigator view, right-click the queue manager, then click Object Authorities > Manage Create Authorities... The Manage Create Authorities dialog opens.
- Windows queue managers only: if we are granting the authority to an individual user, click the Users tab.
- Click New... The Add Authorities dialog opens.
- Enter the name of the group or user, as appropriate.
- Select the check boxes for the objects for which we want to grant the Create authority, then click OK.
Results
An authority record for the group or user is added to the table and the Create authorities that you granted are shown.
If the group or user already has Create authorities for some of the objects on the queue manager, select the existing authority record and edit it. If you add a new authority record for a user or group that already has an authority record on the object, we are prompted to confirm that we want to overwrite the existing authority record.
Parent topic: Manage object authorities with an authorization service
Related concepts
Related tasks
- Granting authorities on a queue manager
- Granting authorities on a specific object
- Granting authorities on multiple objects