Granting full administrative access to some services

Grant full administrative access to some services on a queue manager, to each group of users with a business need for it.

About this task

To grant full administrative access to some services, use the appropriate commands for your operating system.

On the following platforms, you can also use the SET AUTHREC command:

• IBM® i
• Linux®
• UNIX
• Windows

Note: On IBM MQ Appliance you can use only the SET AUTHREC command.

• On UNIX, Linux, and Windows:

  setmqaut -m QMgrName -n ObjectProfile -t service -g GroupName +alladm
  

• On IBM i:

  GRTMQMAUT OBJ(' ObjectProfile ') OBJTYPE(*SVC) USER(GroupName) AUT(*ALLADM) MQMNAME(' QMgrName ')
  

• On z/OS®:

  RDEFINE MQADMIN QMgrName.SERVICE. ObjectProfile UACC(NONE)
  PERMIT QMgrName.SERVICE. ObjectProfile CLASS(MQADMIN) ID(GroupName) ACCESS(ALTER)
  

  The variable names have the following meanings:

  QMgrName

  The name of the queue manager.

  On z/OS, this value can also be the name of a queue sharing group.

  ObjectProfile

  The name of the object or generic profile for which to change authorizations.

  GroupName

  The name of the group to be granted access.