| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| How to provide limited administration priviliges to someone |
« View previous topic :: View next topic » |
| Author |
Message
|
| Prithvi |
 Posted: Fri Jan 07, 2005 1:14 am Post subject: How to provide limited administration priviliges to someone |
 |
|
Apprentice
Joined: 20 Dec 2004
Posts: 34
|
Hi
Is there a way in which we can allow a customer to have privilege for doing some of the administration activities while we maintain the overall control of the environment. For example we have mqm user, which is like the super user having the highest level of privileges. Can a user be created to be a part of mqm group but this user has limited access to MQ Series and its functions????
The idea is provide a granular access. One case would be to prevent their team from running backup or recovery commands, or to stop the running of MQ Listener.
I think the "setmqaut" command could bw used here, though i am not too sure as to how to go about doing this!! I would appreciate any help regarding this issue
_________________
Prithvi |
|
| Back to top |
|
 |
| sjensen |
| Posted: Fri Jan 07, 2005 4:28 am Post subject: |
|
|
Centurion
Joined: 18 Dec 2003
Posts: 134
Location: London
|
|
| Back to top |
|
|
| Nigelg |
| Posted: Fri Jan 07, 2005 4:38 am Post subject: |
|
|
Grand Master
Joined: 02 Aug 2004
Posts: 1046
|
You cannot restrict users in the mqm group.
The setmqaut command is indeed the way to go. Read up on it in the Sys Admin manual.
BTW, I am a little surprised that an 'IBM Certified System Administrator Websphere MQ V5.3' does not already know this. |
|
| Back to top |
|
|
| csmith28 |
| Posted: Fri Jan 07, 2005 7:22 am Post subject: |
|
|
Grand Master
Joined: 15 Jul 2003
Posts: 1196
Location: Arizona
|
Nigel is correct.
You can not grant or deny MQ Administrative priviledges to users that are a member of the mqm group.
I recommend that you create a group for the sake of argument "mqmadm". Then use the setmqaut command to grant the priviledges you want to the mqmadm group.
Then add the users you want to have those priviledges to that group. Oh and make sure that non of those users are members of the mqm group.
| Nigelg wrote: |
| BTW, I am a little surprised that an 'IBM Certified System Administrator Websphere MQ V5.3' does not already know this. |
"Behold the Power of Certification!"
Funny, thats all I remember from the class. 
_________________
Yes, I am an agent of Satan but my duties are largely ceremonial. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
