[MQ 9.3.1 Oct 2022]

IBM® MQ Console: Working with queue manager authority records - CD only

You can control the access that users and groups have to queue managers by specifying an authority record for that user or group.

About this task

You can fine-tune the access that a messaging user or group of messaging users has to a particular queue manager by using authority records. There are two types of authority records: the queue manager access records that control general authorities and the permission to create records that control which users and groups can create objects for the queue manager.

Procedure

  • To view the authority records for a queue manager:
    1. Ensure that the queue manager is running, and select it in the queue manager list.
    2. Select View configuration from the menu Shows the menu icon.
    3. Ensure the Security tab is selected.
    4. Select Authority records from the navigation panel. The view shows the authority records in two panes, enabling you to work with general authority records and with create authority records.
  • To add a general authority record:
    1. Click the add button shows the add button in the Queue manager access list view.
    2. Choose whether you are adding an authority record for a user or a group.
    3. Specify the name of the user or group you are adding an authority record for (the authority record takes this as its name).
    4. Select the authorities that you want to grant.
    5. Click Create.
  • To add a create authority record:
    1. Click the add button shows the add button in the Permission to create list view.
    2. Choose whether you are adding an authority record for a user or a group.
    3. Specify the name of the user or group you are adding an authority record for (the authority record takes this as its name).
    4. Select the types of object that you are granting the authority to create.
    5. Click Create.
  • To delete an authority record:
    1. Select the authority record that you want to delete, and select Delete.
    2. Confirm that you want to delete the authentication information object by clicking Delete. The object is deleted.
  • To view and edit the properties of an authority record:
    1. Click the authority record that you want to view.
    2. Change the settings as required and click Save to save your changes.