Authorities you can set on IBM MQ objects

You can set authorities for users and groups accessing different IBM® MQ objects.

The following table lists the authorities that you can set for users and groups accessing different IBM MQ objects. Some authorities can be set against specific objects only; the table shows whether each authority is valid for each object.

Authority	Description	Queue manager	Remote queue manager	Queue	Process definitions	Namelist	Authentication information	Channel	Client-connection channel	Service	Listener
Alternate user ID	Use another user's ID to open queues and put messages on queues.	Yes	No	No	No	No	No	No	No	No	No
Browse	Browse messages on a queue.	No	No	Yes	No	No	No	No	No	No	No
Change	Change the attributes of the object.	Yes	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Clear	Clear the messages from the queue.	No	No	Yes	No	No	No	No	No	No	No
Connect	Allow the application to connect to the queue manager.	Yes	No	No	No	No	No	No	No	No	No
Create	Create objects of the specified type on the queue manager.	Yes	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Ctrl	Start, stop, and ping the channel.	No	No	No	No	No	No	Yes	No	Yes	Yes
Ctrlx	Reset or resolve the channel.	No	No	No	No	No	No	Yes	No	No	No
Delete	Delete the object.	Yes	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Display	Display the attributes or status of the object.	Yes	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Get	Get messages from the queue.	No	No	Yes	No	No	No	No	No	No	No
Put	Put messages on the queue.	No	Yes	Yes	No	No	No	No	No	No	No
Inquire	Display the attributes or status of the object.	Yes	No	Yes	Yes	Yes	Yes	No	No	No	No
Pass all context	Allow the application to pass all the context fields from the request message to a message that the application is putting on the queue.	No	Yes	Yes	No	No	No	No	No	No	No
Pass identity context	Allow the application to pass the identity context fields from the request message to the message that the application is putting on a queue.	No	Yes	Yes	No	No	No	No	No	No	No
Set	Set attributes on the queue.	Yes	No	Yes	Yes	No	No	No	No	No	No
Set all context	Allow the application to set the identity and origin context fields in a message.	Yes	Yes	Yes	No	No	No	No	No	No	No
Set identity context	Allow the application to set the identity context fields in a message, and allow the queue manager to generate the origin context.	Yes	Yes	Yes	No	No	No	No	No	No	No
System	Gives authority to principals or groups who are authorized to carry privileged operations on objects	Yes	No	No	No	No	No	No	No	No	No