These examples are based on a Linux system. Switch to the mqm user.

su - mqm

The setmqaut command is used to give or remove a user or groups permissions. In this example, user JohnDoe is given access to queue manager MANAGER01.

setmqaut -m MANAGER01 -t qmgr -p JohnDoe +connect +inq

In this example, group admins is given access to queue manager MANAGER01.

setmqaut -m MANAGER01 -t qmgr -g admins +connect +inq

If John Doe does not exist, the following should be returned.

AMQ7026E: A principal or group name was invalid.

The -n option can be used to add or remove permissions to a queue or topic. In this example, JohnDoe is given permission to QUEUE01. Notice this command is issued twice, once against "QUEUE01" and then again aginst "MANAGER01.QUEUE01.QUEUE". The second command ensures that the queue alias is updated as well.

setmqaut -m MANAGER01 -n QUEUE01 -t queue -p JohnDoe -all +put +get +browse +inq
setmqaut -m MANAGER01 -n MANAGER01.QUEUE01.QUEUE -t queue -p JohnDoe -all +put +get +browse +inq

The dspmqaut command can be used to display JohnDoe's permssions to MANAGER01 and QUEUE01.

Start the MQSC utility.

runmqsc MANAGER01

Refresh security.

REFRESH SECURITY(*)

Exit the MQSC utility.

end