We were trying to define an MQ Queue to RACF and getting an unhelpful message.
RDEF MQQUEUE CDLL.COLINQ WARNING OWNER(MAXY)UACC(NONE)
ICH10103I NOT AUTHORIZED TO DEFINE MQPA.COLINTQ_PRMSG.
the message description is
ICH10103I NOT AUTHORIZED TO DEFINE profile-name
Explanation: You do not have sufficient authority to define the indicated profile to RACF.
This was strange because the userid had access to the resource as we could see using the TSO LISTUSER command
TSO LU MAXY
CLASS AUTHORIZATIONS=MQQUEUE MQPROC MQNLIST MQADMIN MQCMDS MQCONN
GMQADMIN GMQQUEUE GMQPROC GMQNLIST MXTOPIC GMXTOPIC
GMXPROC MXPROC GMXNLIST MXNLIST GMXQUEUE MXQUEUE
What was even stranger was the following worked!
RDEF MQQUEUE AAAA.COLINQ WARNING OWNER(MAXY )UACC(NONE)
Using the command
tso rlist MQQUEUE CDLL
showed us there was an existing profile
MQQUEUE CDLL.** (G) owned by a different userid.
FWe fixed it by finding someone with special authority to run the command.
If we find a better way of doing it I'll update this blog.
Note: We had to use the TSO command PROFILE MSGID to get the message number produced.