Authority to administer IBM MQ on z/OS
This collection of topics describes various aspects of the authority we need to administer IBM MQ for z/OS .
- Authority checks on z/OS
IBM MQ for z/OS uses the System Authorization Facility (SAF) to route requests for authority checks to an external security manager (ESM) such as the z/OS Security Server Resource Access Control Facility ( RACF ). IBM MQ does no authority checks of its own. - Command security and command resource security on z/OS
Command security relates to the authority to issue a command; command resource authority relates to the authority to perform an operation on a resource. Both are implemented y using RACF classes. - MQSC commands and the system command input queue on z/OS
Use this topic to understand how the command server processes MQSC commands directed to the system command input queue on z/OS. - Access to the queue manager data sets on z/OS
IBM MQ for z/OS administrators need authority to access the queue manager data sets. Use this topic to understand which data sets need RACF protection.
Parent topic: Authority to administer IBM MQ