Granting role-based authorities on a queue manager

A user must have the correct authorities to perform operations on objects; we can assign these authorities individually, but if a user needs either read-only access or full administrative access to all the objects hosted by a queue manager, this can be granted in a single action.

About this task

Note: This procedure grants the requested access in addition to whatever access the user or group currently has. If you grant read-only access to a user or group, that user or group does not lose any existing administrative authorities.

To grant a group or user either read-only access or full administrative access to all the objects hosted by a queue manager, complete the following steps.

Procedure

1. In the Navigator view, right-click the queue manager, then click Object Authorities > Add Role Based Authorities... The Add Role Based Authorities dialog opens.
2. Windows queue managers only: if we are granting the authority to an individual user, click User and enter the user name.
3. If we are granting the authority to a group, click Group and enter the group name.
4. Select the appropriate radio button to grant read only access or full administrative access.
5. To allow the user or group to browse messages on the queues hosted by the queue manager, select the Permit reading of messages on queues check box.
6. Equivalent commands to grant the requested authorities are displayed in the Command preview pane. We can copy one or more commands and paste them into a script or onto the command line.
7. Click OK.

Results

The requested authorities are granted to the user or group.

Note: On IBM i, you might also need to change access authorities to allow the user to issue the commands you have generated. Do this using the GRTOBJAUT command. Parent topic: Manage object authorities with an authorization service

Related concepts

• Users and groups (entities) in the authorization service

Related tasks

• Granting authorities on a specific object
• Granting authorities on multiple objects
• Granting the Create authority
• Granting the authority to connect to a queue manager