Alternate user authority

When an application opens an object or subscribes to a topic, the application can supply a user ID on the MQOPEN, MQPUT1, or MQSUB call. It can ask the queue manager to use this user ID for authority checks instead of the one associated with the application.

The application succeeds in opening the object only if both the following conditions are met:

• The user ID associated with the application has the authority to supply a different user ID for authority checks. The application is said to have alternate user authority.
• The user ID supplied by the application has the authority to open the object for the types of operation requested, or to subscribe to the topic.

Parent topic: Authorization for applications to use IBM MQ