IBM® MQ Console: Working with queue manager authority records - LTS only

You can control the access that users and groups have to queue managers by specifying an authority record for that user or group.

About this task

You can fine-tune the access that a messaging user or group of messaging users has to a particular queue manager by using authority records. There are two types of authority records: the authority records that control general authorities and create authority records that control which users and groups can create objects for the queue manager.

• To view the authority records for a queue manager:
  1. Ensure that the queue manager is running, and select it in the queue manager list.
  2. Select Configure from the menu .
  3. Ensure the Security tab is selected.
  4. Select Authority records from the navigation panel. The view shows the authority records in two panes, enabling you to work with general authority records and with create authority records.
• To add a general authority record:
  1. Click the add button in the authority records list view.
  2. Choose whether you are adding an authority record for a user or a group.
  3. Specify the name of the user or group you are adding an authority record for (the authority record takes this as its name)
  4. Select the authorities that you want to grant (see -- for more information about authorities)
  5. Click Create.
• To add a create authority record:
  1. Click the add button in the create authority records list view.
  2. Choose whether you are adding an authority record for a user or a group.
  3. Specify the name of the user or group you are adding an authority record for (the authority record takes this as its name)
  4. Select the types of object that you are granting the authority to create.
  5. Click Create.
• To delete an authority record:
  1. Open the menu for the authority record that you want to delete, and select Delete.
  2. Confirm that you want to delete the authentication information object by clicking Delete. The object is deleted.
• To view and edit the properties of an authority record:
  1. Open the menu for the authority record that you want to delete, and select Edit.
  2. Change the settings as required and click Save to save your changes.