Resources › MQADMIN Resource Class—Secure MQM Commands

MQADMIN Resource Class—Secure MQM Commands

Valid on z/OS.

Use MQADMIN to control access to other MQSERIES (MQM) commands.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) MQADMIN(csq1.)

Prefix length

Two to twenty‑six characters

Capacity of list

One to five MQSERIES resources or prefixes per command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) MQADMIN(csq1)
                 ACCESS(NONE)

Prefix length

Two to forty‑four characters per prefix

Full name

Two to forty‑six characters

Capacity of list

One to five resources or prefixes per TSS command

This keyword is used with:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, WHOOWNS, and WHOHAS
• The MQADMIN ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The MQADMIN ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• MQADMIN(OWN) authority

The administrator can:

• Use any of the following methods to control MQSERIES resources: Expiration, Facility, Time/Day, and Actions.
• Specify the accesses: NONE, ALTER, READ, UPDATE, CONTROL, and ALL.

MQSERIES resources support masking.

Examples: MQADMIN resource class

This example gives the Payroll Department (PAYDEPT) ownership of the MQADMIN resources:

TSS ADDTO(PAYDEPT) MQADMIN(CSQ1.)

This example removes ownership of these resources:

TSS REMOVE(PAYDEPT) MQADMIN(CSQ1.)

This example requires full MQSERIES checking of USRMARE:

TSS PERMIT(USRMARE) MQADMIN(CSQ1.RESLEVEL)
                    ACCESS(NONE)

This example revokes this PERMIT:

TSS REVOKE(USRMARE) MQADMIN(CSQ1.)