You can configure local user groups by using the command line interface.
About this task
To configure a local user group from the command line, you enter user group configuration mode,
specifying the name of the user group that you want to configure, and enter the required user group
configuration commands. You define the local users in a separate procedure, see Configuring local user groups by using the command line
Note: If you use messaging users and groups on the appliance for authentication records in an HA
queue manager, you must set up the same messaging users and groups on all appliances in the HA
group. The users and groups are not automatically replicated between the appliances.
Procedure
-
Connect to the IBM® MQ Appliance as described in
Command line access. Log in as an administrative user.
-
Type
config to enter global configuration mode.
-
Type the following command to configure a local user group:
usergroup name
Where
name identifies
the user group that you want to configure. If you are creating a new user group,
name can contain up to 128 characters. The following characters are valid:
- a through z
- A through Z
- 0 through 9
- Underscore (_)
- Dash (-)
- Period (.) (note that a name that comprises a single period, or including two periods together,
is not permitted)
-
Set the access policy for the user group:
access-policy statement
Where
statement defines the access policy that applies to users who belong to this
group. A policy statement takes the form:
address/domain/resource?[Name=name]&Access=permission [&field=value]
- address
-
An IP address or host alias for a local interface (Ethernet or VLAN) on the appliance. The
special value * matches all appliance addresses.
- domain
- Enter * to match all domains.
- resource
-
The resource type to which this policy applies. The special value * matches all resource
types.
Name=name- Optionally Identifies by name an instance of the specified resource type. You can use a PCRE;
for example,
foo.* to specify all resources that start with
foo.
Access=permission- The permission string assigns permissions. The string is cumulative and connected by plus (+)
signs. For example, the string
a+d+x+r+w represents add, delete, execute, read, and
write permissions.
field=value- Optional: the field token must be one of the additional fields that can be added to the string.
The corresponding value can be a PCRE.
-
After you configure the user group, enter exit to save the configuration
and exit, or type
cancel to exit without saving.