Access to the queue manager data sets on z/OS

IBM MQ for z/OS administrators need authority to access the queue manager data sets. Use this topic to understand which data sets need RACF protection.

• The data sets referred to by CSQINP1, CSQINP2, and CSQINPT in the started task procedure of the queue manager.
• The queue manager's page sets, active log data sets, archive log data sets, and bootstrap data sets (BSDSs)
• The data sets referred to by CSQXLIB and CSQINPX in the channel initiator's started task procedure

We must protect the data sets so that no unauthorized user can start a queue manager or gain access to any queue manager data. To do this, use RACF data set protection.