| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Websphere MQ admin rights |
« View previous topic :: View next topic » |
| Author |
Message
|
| pintrader |
 Posted: Wed Mar 05, 2014 6:19 am Post subject: Websphere MQ admin rights |
 |
|
Disciple
Joined: 22 Jan 2014
Posts: 164
|
Hi
does the websphere mq administrator need to have Domain admin rights when in a domain environment (ie Active Directory , domain controllers etc) ? what are the things that would break if the mq administrator doesn't have domain admin rights?
thanks |
|
| Back to top |
|
 |
| PeterPotkay |
| Posted: Wed Mar 05, 2014 6:29 am Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
You can do 100% of your MQ Admin duties without being a Domain Admin.
If no one in your company is a Domain Admin and they want you to do that work as well, that is a seperate topic unrelated to the requirements of the IBM Websphere MQ software.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| JosephGramig |
| Posted: Wed Mar 05, 2014 6:49 am Post subject: |
|
|
Grand Master
Joined: 09 Feb 2006
Posts: 1244
Location: Gold Coast of Florida, USA
|
| As the Info Center documents, any ID in the local mqm group is a WMQ Administrator for all Qmgrs on this node. If you want the Qmgr to recognize Domain IDs and groups, then you should run the Qmgr with a Domain (service) ID. Read the Info Center about creating and running Qmgrs in a Windows Domain. There are specific differences about that environment. |
|
| Back to top |
|
|
| pintrader |
| Posted: Wed Mar 05, 2014 4:45 pm Post subject: |
|
|
Disciple
Joined: 22 Jan 2014
Posts: 164
|
| PeterPotkay wrote: |
You can do 100% of your MQ Admin duties without being a Domain Admin.
If no one in your company is a Domain Admin and they want you to do that work as well, that is a seperate topic unrelated to the requirements of the IBM Websphere MQ software. |
how about different components of websphere, eg telemetry, JAAS, AMS, MQFT etc etc ? do some of these products ever needed to read/write to system directories which a normal user won't be able to access? eg c:\windows, c:\windows\system32 etc..?
thanks |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Thu Mar 06, 2014 3:32 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| pintrader wrote: |
| PeterPotkay wrote: |
You can do 100% of your MQ Admin duties without being a Domain Admin.
If no one in your company is a Domain Admin and they want you to do that work as well, that is a seperate topic unrelated to the requirements of the IBM Websphere MQ software. |
how about different components of websphere, eg telemetry, JAAS, AMS, MQFT etc etc ? do some of these products ever needed to read/write to system directories which a normal user won't be able to access? eg c:\windows, c:\windows\system32 etc..?
thanks |
That's why the mqm admins should also be members of the local administrators group... 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
