WebSphere Message Brokers
File: an28160_
Writer: Bill Oppenheimer

Reference topic

This build: July 31, 2007 21:34:12

mqsicreateaclentry command - Windows

Syntax

Parameters

You must select:
  • -f, or
  • -g and -x, or -u and -x, and:
    • -b, or
    • -s, or
    • -r, or
    • -t, or
    • -p
ConfigmgrName
(Optional) The name of the Configuration Manager to which the access control lists are to be added.

The default name, if this parameter is not specified, is 'ConfigMgr'.

-n CfgParameterFilename
(Optional) This parameter specifies the name of a .configmgr file that describes the connection parameters to the Configuration Manager.
The file is in XML, using the .configmgr format that is saved by the workbench; for example:
<?xml version="1.0" encoding="UTF-8"?>
<configmgr crlNameList="" domainName="" host="winmvsd0" listenerPort="2206" 
queueManager="mq06" securityExit="" securityExitJar="" sslCipherSuite="NONE" 
sslDistinguishedNames="" sslKeyStore="" sslTrustStore="" svrconn="SYSTEM.BKR.CONFIG"/>
-f FileName
(Optional) File from which to import the configuration. The output of the mqsilistaclentry command, with output generated using the -f option, is the correct format.
-g GroupName
(Optional) Local group to which this entry refers. For this reason, the name must adhere to the standard platform convention for group names.

To add a domain group, grant authority to a local group and then add the domain group, or groups, that you want to authorize into that local group. Any members of those domain groups obtain the permissions of the local group indirectly.

-u UserName
(Optional) User name to which this entry refers, for example, TEST\ANOTHER.

-u and -g in this command refer to users and groups within the domain that the Configuration Manager uses for its security. This domain is, by default, the machine on which the Configuration Manager resides.

If you select -u, you must select either a or m

-m MachineName
(Optional) The name of the machine from which a specified user can connect. This option can not be used with -a.

If you select -u, you must select either a or m

-a
(Optional) This option signifies that the specified user name can be on any machine. This option can not be used with -m.

If you select -u, you must select either a or m

-x AccessLevel
(Optional) The required access level given for this group. This option can be any one of the following letters:
F
Full control
D
Deploy
E
Edit
V
View
-b Broker
(Optional) The object is a broker object, and its name is specified as a parameter.
-e ExeGroup
(Optional) The object is an execution group and its name is specified as a parameter of the form Broker\ExeGroup. You must specify the b flag if you specify this flag.
-s Subscription
(Optional) The object is a subscription object, and its name is specified as a parameter.
-r
(Optional) The object refers to the root topic.
-t
(Optional) The object refers to the main topology.
-p
(Optional) The object refers to the "allresources" resource type. The authority that the principal has for this object applies to all objects, including the mqsicreateaclentry, mqsideleteaclentry, and mqsilistaclentry commands themselves.
-w WaitTime
(Optional) The time in seconds that the command waits for a response from the Configuration Manager. If you do not supply a value, the command waits for 30 seconds.

Examples

mqsicreateaclentry CMGR01 -f c:\test\mylist 
mqsicreateaclentry CMGR01 -g GROUPA -x F -b MYBROKER
Notices | Trademarks | Downloads | Library | Support | Feedback

Copyright IBM Corporation 1999, 2007Copyright IBM Corporation 1999, 2007. All Rights Reserved.
This build: July 31, 2007 21:34:12

an28160_ This topic's URL is: