Authorizations for generic operations

all Use all operations applicable to the object.
alladm Use all administration operations applicable to the object.
allmqi Use all MQI calls applicable to the object.
none No authority. Use this to create profiles without authority.

Return codes

0 Successful operation
36 Invalid arguments supplied
40 Queue manager not available
49 Queue manager stopping
69 Storage not available
71 Unexpected error
72 Queue manager name error
133 Unknown object name
145 Unexpected object name
146 Object name missing
147 Object type missing
148 Invalid object type
149 Entity name missing
150 Authorization specification missing
151 Invalid authorization specification

Examples

  1. This example shows a command that specifies that the object on which authorizations are being given is the queue orange.queue on queue manager saturn.queue.manager. If the queue does not exist, the command fails.
    setmqaut -m saturn.queue.manager -n orange.queue -t queue
             -g tango +inq +alladm
    The authorizations are given to user group tango and the associated authorization list specifies that user group tango can:
    • Issue MQINQ calls
    • Perform all administration operations on that object
  2. In this example, the authorization list specifies that user group foxy:
    • Cannot issue any calls from the MQI to the specified queue
    • Can perform all administration operations on the specified queue
    If the queue does not exist, the command fails.
    setmqaut -m saturn.queue.manager -n orange.queue -t queue
             -g foxy -allmqi +alladm
  3. This example gives user1 full access to all queues with names beginning a.b on queue manager qmgr1. The profile is persistent, and will apply to any object with a name that matches the profile name.
    setmqaut -m qmgr1 -n a.b.* -t q -p user1 +all        
  4. This example deletes the specified profile.
    setmqaut -m qmgr1 -n a.b.* -t q -p user1 -remove        
  5. This example creates a profile with no authority.
    setmqaut -m qmgr1 -n a.b.* -t q -p user1 +none        

Related commands

dmpmqaut Dump authority
dspmqaut Display authority