I try implement IBM MQ ActiveGate Plugin
I have question about permissions.
In doc says that the user must have at least the following permissions:
For what objects do you need to give these permissions?
Must we have permissions of for each queue ?
Solved! Go to Solution.
The user needs those permissions for queues, channels, listener and queue managers.
I don't believe you need to specify it for each individual queue. You can apply it to all queues of the queue manager using wildcards.
You need these permissions because the plugin runs these PCF commands:
MQCMD_RESET_Q_STATS (if you collect Enqueue and Dequeue counts, you will also need the CHG permission on queues)
+put is required because it puts messages in command and audit queues when running those PCF commands.
You're correct, the SYSTEM.ADMIN.COMMAND.QUEUE needs put permission and also the SYSTEM audit queues.
+dsp permissions to all objects (queue manager, queues, channels, listeners, namelists)
+put permissions to the queues I mentioned above.
+chg to queues you want to get enqueue/dequeue rate.
+ctrl if you want to ping a queue manager to get whether it is responsive.
With the above, make sure you can connect, inquire all objects.
Hope this helps,