Authority to administer IBM MQ on IBM i

To be an IBM MQ administrator on IBM i, we must be a member of the QMQMADM group. This group has properties similar to those of the mqm group on UNIX and Windows systems. In particular, the QMQMADM group is created when you install IBM MQ for IBM i, and members of the QMQMADM group have access to all IBM MQ resources on the system. You also have access to all IBM MQ resources if you have *ALLOBJ authority.

Administrators can use CL commands to administer IBM MQ. One of these commands is GRTMQMAUT, which is used to grant authorities to other users. Another command, STRMQMMQSC, enables an administrator to issue MQSC commands to a local queue manager.

Group 1

To issue a command in this category, a user must be a member of the QMQMADM group or have *ALLOBJ authority. GRTMQMAUT and STRMQMMQSC belong to this category, for example.

Group 2

To issue a command in this category, a user does not need to be a member of the QMQMADM group or have *ALLOBJ authority. Instead, two levels of authority are required:

• The user requires IBM i authority to use the command. This authority is granted by using the GRTOBJAUT command.
• The user requires IBM MQ authority to access any IBM MQ object associated with the command. This authority is granted by using the GRTMQMAUT command.

The following examples show commands in this group:

• CRTMQMQ, Create MQM Queue
• CHGMQMPRC, Change MQM Process
• DLTMQMNL, Delete MQM Namelist
• DSPMQMAUTI, Display MQM Authentication Information
• CRTMQMCHL, Create MQM channel

For more information about this group of commands, see Authorization for applications to use IBM MQ.

For a complete list of group 1 and group 2 commands, see Access authorities for IBM MQ objects on IBM i

For more information about the authority we need to administer IBM MQ on IBM i, see Administer IBM i .