Resources › MQADMIN Resource Class—Secure MQM Commands

MQADMIN Resource Class—Secure MQM Commands

Valid on z/OS.

Use MQADMIN to control access to other MQSERIES (MQM) commands.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) MQADMIN(csq1.)

Prefix length

Two to twenty‑six characters

Capacity of list

One to five MQSERIES resources or prefixes per command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) MQADMIN(csq1)
                 ACCESS(NONE)

Prefix length

Two to forty‑four characters per prefix

Full name

Two to sixty-two characters

Capacity of list

One to five resources or prefixes per TSS command

This keyword is used with:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, WHOOWNS, and WHOHAS
• The MQADMIN ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The MQADMIN ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• MQADMIN(OWN) authority

The administrator can:

• Use any of the following methods to control MQSERIES resources: Expiration, Facility, Time/Day, and Actions.
• Specify the accesses: NONE, ALTER, READ, UPDATE, CONTROL, and ALL.

Masking

MQSERIES resources support masking.

Examples: MQADMIN resource class

This example gives the Payroll Department (PAYDEPT) ownership of the MQADMIN resources:

TSS ADDTO(PAYDEPT) MQADMIN(CSQ1.)

This example removes ownership of these resources:

TSS REMOVE(PAYDEPT) MQADMIN(CSQ1.)

This example requires full MQSERIES checking of USRMARE:

TSS PERMIT(USRMARE) MQADMIN(CSQ1.RESLEVEL)
                    ACCESS(NONE)

This example revokes this PERMIT:

TSS REVOKE(USRMARE) MQADMIN(CSQ1.)