MQSeries.net :: View topic

rastoan · Posted: Mon Oct 20, 2008 8:26 am Post subject:

Hello All,

I am new to MQ core admin and designing new infrastructure applying MQ securities.
We are working on Solaris Sparc 10 with sparse root zones on MQ 6.0.2.2
In past, for administration task we had a user mq_adm in mqm group , which enabled support staff with a full rights as of mqm.
As per my knowledge, any user in mqm will have full authoritie for create,update and delete on MQ object/ also killing MQ UNIX processes.

We see a great threat on manual errors from human intervention in day-day tasks.
SO, my query is there anyway where we can perform administration using logged in users(..not in mqm group...) and then assign them list of tasks required for them.

Also, I came to know about MS0E -- can this help in my L!/L2/L3 topoogy framework design.

Regards,
AR
Restrictions/authorizations will follow basic support requirements for L1/L2/L3 groups.
Presently I am trying with OAM, but not sure if I can do this without having user in mqm group.

Also, for non-mqm group users, please also help me in discovering ways like sudo... for allowing these new admin users wo fire command and MQSC scripts but with limited access(which can be done by OAM)