Privileged users

A privileged user is one that has full administrative authorities for IBM® MQ.

In addition to the users listed in the following table, members of any group with +connect authority for queue managers, and +crt authority for queues are indirectly administrators. Similarly, any user that has +connect and +set authority on the queue manager, and +put authority on the command queue is an administrator.

You should not grant these privileges to ordinary users and applications.

Table 1. Privileged users by platform
Platform Privileged users
Windows systems
  • SYSTEM
  • Members of the mqm group
  • Members of the Administrators group
UNIX and Linux systems
  • Members of the mqm group
[IBMi]IBM i systems [IBMi]
  • The profiles qmqm and qmqmadm
  • All members of the qmqmadm group
  • Any user defined with the *ALLOBJ setting
z/OS® The user ID that the channel initiator, queue manager and advanced message security address spaces are running under.