We need to execute SET AUTHREC PROFILE($cname) OBJTYPE(CHANNEL) GROUP(‘mq-user’) AUTHADD(…) so that the channels show up WMQ Explorer, it that correct? Current the access is prevented.
We need to execute SET AUTHREC PROFILE($cname) OBJTYPE(CHANNEL) GROUP(‘mq-user’) AUTHADD(…) so that the channels
Share
Yes. With the
AUTHRECprofiles defined in this and previous questions you have authorized the user to connect to the QMgr, put requests to the command queue and receive replies on a model queue. The command server needs to know what operations on other objects the group is authorized for. As an example, it won’t display or let members of the group control channels until you authorize them.A quick way to see what objects need to be authorized is the Role Based Authorities Wizard in WMQ Explorer. Right-click on the QMgr, select Object Authorities, then Add Role Based Authorities like so:
Next, select Group and put in the group name:
The wizard outputs
setmqautcommands which you can issue from the command line asmqm. There are equivalentAUTHRECcommands for these. Rather than convert them manually, I’d recommend running thesetmqautversions, then capturing the rule using thedmpmqcfgcommand.The actual commands created in the wizard using the settings above are: