Granting authorities on multiple objects
A user must have the correct authorities to perform operations on objects; for example, to browse the messages on a queue. We can grant the same set of authorities to multiple objects on a queue manager by using generic profiles.
About this task
To grant a user or group the same set of authorities on multiple objects, complete the following steps.
Procedure
- In the Navigator view, on the queue manager that hosts the objects, right-click the folder that contains the objects, then click Object Authorities > Manage Authority Records.... The Manage Authority Records dialog opens.
- We can use an existing generic profile or create a new generic profile:
- If there is an existing generic profile that matches the objects, expand the Generic Profiles folder, click the generic profile, then click New > User Authority... or New > Group Authority.... The Add Authorities dialog opens.
- If there is no existing generic profile that matches the objects, right-click the Generic Profiles folder, then clickNew > User Authority Using New Profile... or New > Group Authority Using New Profile.... The Add Using Generic Profile dialog opens.
- Enter the name of the user or group..
- Type a name for the profile using wildcard characters. The name of the profile must match the names of all of the objects to which we want the profile to apply.
- Select the check boxes for the authorities that we want to grant on the objects, then click OK.
Results
An authority record for the user or group is added to the table and the authorities that you granted are shown.
If the user or group already has some authorities for the object, select the existing authority record and edit it. If you add a new authority record for a user or group that already has an authority record on the object, we are prompted to confirm that we want to overwrite the existing authority record.
Parent topic: Manage object authorities with an authorization service
Related concepts
- Generic and specific profiles
- Users and groups (entities) in the authorization service
- Authorities we can set on IBM MQ objects
Related tasks
Related reference