Authority to administer WebSphere MQ on UNIX and Windows systems

Authority to administer WebSphere MQ on UNIX and Windows systems

To be a WebSphere MQ administrator on UNIX and Windows systems, be a member of the mqm group. This group is created automatically when you install WebSphere MQ. To allow users to perform administration, add them to the mqm group. This includes the root user on UNIX systems.
All members of the mqm group have access to all WebSphere MQ resources on the system, including being able to administer any queue manager running on the system. This access can be revoked only by removing a user from the mqm group. On Windows systems, members of the Administrators group also have access to all WebSphere MQ resources.
Administrators can use control commands to administer WebSphere MQ. One of these control commands is setmqaut, which is used to grant authorities to other users to enable them to access WebSphere MQ resources.
Administrators can use the control command runmqsc to issue WebSphere MQ Script (MQSC) commands. When runmqsc is used in indirect mode to send MQSC commands to a remote queue manager, each MQSC command is encapsulated within an Escape PCF command. Administrators must have the required authorities for the MQSC commands to be processed by the remote queue manager.
The WebSphere MQ Explorer issues PCF commands to perform administration tasks. Administrators require no additional authorities to use the WebSphere MQ Explorer to administer a queue manager on the local system. When the WebSphere MQ Explorer is used to administer a queue manager on another system, administrators must have the required authorities for the PCF commands to be processed by the remote queue manager.
For more information about authority checks when PCF and MQSC commands are processed, see the following:

For PCF commands that operate on queue managers, queues, processes, namelists, and authentication information objects, see Authority to work with WebSphere MQ objects. Refer to this section for the equivalent MQSC commands encapsulated within Escape PCF commands.
For PCF commands that operate on channels, channel initiators, listeners, and clusters, see Channel security. Refer to this section for the equivalent MQSC commands encapsulated within Escape PCF commands.
For MQSC commands that are processed by the command server on WebSphere MQ for z/OS, see Command security and command resource security.

For more information about the authority we need to administer WebSphere MQ on UNIX and Windows systems, see the WebSphere MQ System Administration Guide.

Parent topic:
Authority to administer WebSphere MQ

sy10750_