Authority to administer IBM MQ on z/OS

This collection of topics describes various aspects of the authority we need to administer IBM MQ for z/OS .

  • Authority checks on z/OS
    IBM MQ for z/OS uses the System Authorization Facility (SAF) to route requests for authority checks to an external security manager (ESM) such as the z/OS Security Server Resource Access Control Facility ( RACF ). IBM MQ does no authority checks of its own.
  • Command security and command resource security on z/OS
    Command security relates to the authority to issue a command; command resource authority relates to the authority to perform an operation on a resource. Both are implemented y using RACF classes.
  • MQSC commands and the system command input queue on z/OS
    Use this topic to understand how the command server processes MQSC commands directed to the system command input queue on z/OS.
  • Access to the queue manager data sets on z/OS
    IBM MQ for z/OS administrators need authority to access the queue manager data sets. Use this topic to understand which data sets need RACF protection.

Parent topic: Authority to administer IBM MQ