The following OAM authorities can be used in situations where it's not possible to execute the usual 'setmqaut' command, such as the MQ appliance.
You must perform a search and replace of {userName} with your MQ Service user name.
** OAM Configuration for EVENTS and Activity Trace
SET AUTHREC +
PROFILE('SYSTEM.ADMIN.CHANNEL.EVENT') +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(BROWSE,DSP,GET,INQ)
*
SET AUTHREC +
PROFILE('SYSTEM.ADMIN.COMMAND.EVENT') +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(BROWSE,DSP,GET,INQ)
*
SET AUTHREC +
PROFILE('SYSTEM.ADMIN.CONFIG.EVENT') +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(BROWSE,DSP,GET,INQ)
*
SET AUTHREC +
PROFILE('SYSTEM.ADMIN.LOGGER.EVENT') +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(BROWSE,DSP,GET,INQ)
*
SET AUTHREC +
PROFILE('SYSTEM.ADMIN.PERFM.EVENT') +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(BROWSE,DSP,GET,INQ)
*
SET AUTHREC +
PROFILE('SYSTEM.ADMIN.PUBSUB.EVENT') +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(BROWSE,DSP,GET,INQ)
*
SET AUTHREC +
PROFILE('SYSTEM.ADMIN.QMGR.EVENT') +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(BROWSE,DSP,GET,INQ)
*
SET AUTHREC +
PROFILE('SYSTEM.ADMIN.STATISTICS.QUEUE') +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(BROWSE,DSP,GET,INQ)
*
SET AUTHREC +
PROFILE('SYSTEM.ADMIN.ACCOUNTING.QUEUE') +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(BROWSE,DSP,GET,INQ)
*
SET AUTHREC +
PROFILE('SYSTEM.ADMIN.TRACE.ACTIVITY.QUEUE') +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(BROWSE,DSP,GET,INQ)
*
SET AUTHREC +
PROFILE('SYSTEM.ADMIN.TRACE.ROUTE.QUEUE') +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(BROWSE,DSP,GET,INQ)
*
** OAM Configuration for Objects
SET AUTHREC +
PROFILE('SYSTEM.ADMIN.COMMAND.QUEUE') +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(DSP,PUT,INQ)
*
SET AUTHREC +
PROFILE('SYSTEM.DEFAULT.MODEL.QUEUE') +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(DSP,GET,INQ)
*
SET AUTHREC +
PROFILE('SYSTEM.MQEXPLORER.REPLY.MODEL') +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(DSP,GET,INQ)
*
SET AUTHREC +
GROUP('{userName}') +
OBJTYPE(QMGR) +
AUTHADD(CONNECT,INQ)
*
SET AUTHREC +
PROFILE(**) +
GROUP('{userName}') +
OBJTYPE(QUEUE) +
AUTHADD(DSP,INQ)
*
SET AUTHREC +
PROFILE(**) +
GROUP('{userName}') +
OBJTYPE(TOPIC) +
AUTHADD(DSP)
*
SET AUTHREC +
PROFILE(**) +
GROUP('{userName}') +
OBJTYPE(CHANNEL) +
AUTHADD(DSP)
*
SET AUTHREC +
PROFILE(**) +
GROUP('{userName}') +
OBJTYPE(AUTHINFO) +
AUTHADD(DSP)
*
SET AUTHREC +
PROFILE(**) +
GROUP('{userName}') +
OBJTYPE(CLNTCONN) +
AUTHADD(DSP)
*
SET AUTHREC +
PROFILE(**) +
GROUP('{userName}') +
OBJTYPE(COMMINFO) +
AUTHADD(DSP)
*
SET AUTHREC +
PROFILE(**) +
GROUP('{userName}') +
OBJTYPE(LISTENER) +
AUTHADD(DSP)
*
SET AUTHREC +
PROFILE(**) +
GROUP('{userName}') +
OBJTYPE(NAMELIST) +
AUTHADD(DSP)
*
SET AUTHREC +
PROFILE(**) +
GROUP('{userName}') +
OBJTYPE(PROCESS) +
AUTHADD(DSP)
*
SET AUTHREC +
PROFILE(**) +
GROUP('{userName}') +
OBJTYPE(SERVICE) +
AUTHADD(DSP)
OAM Configuration for Objects
The Lamaxu agent needs to be granted access to the following queue manager objects to enable it work.
setmqaut -m {qmgr} -t qmgr -p {User} +connect +dsp +inq
setmqaut -m {qmgr} -n SYSTEM.ADMIN.COMMAND.QUEUE -t queue -p {User} +put +dsp +inq
setmqaut -m {qmgr} -n SYSTEM.DEFAULT.MODEL.QUEUE -t queue -p {User} +get +dsp
setmqaut -m {qmgr} -n SYSTEM.MQEXPLORER.REPLY.MODEL -t queue –p {User} +get +dsp +inq
setmqaut -m {qmgr} -n "**" -t queue -p {User} +inq +dsp
setmqaut -m {qmgr} -n "**" -t topic -p {User} +dsp
setmqaut -m {qmgr} -n "**" -t channel -p {User} +dsp
setmqaut -m {qmgr} -n "**" -t authinfo -p {User} +dsp
setmqaut -m {qmgr} -n "**" -t clntconn -p {User} +dsp
setmqaut -m {qmgr} -n "**" -t comminfo -p {User} +dsp
setmqaut -m {qmgr} -n "**" -t listener -p {User} +dsp
setmqaut -m {qmgr} -n "**" -t namelist -p {User} +dsp
setmqaut -m {qmgr} -n "**" -t process -p {User} +dsp
setmqaut -m {qmgr} -n "**" -t service -p {User} +dspOAM Configuration for Events, Accounting and Statistics
The Lamaxu agent needs to be granted access to the following queue manager event queues to enable it work.
setmqaut -m {qmgr} -n SYSTEM.ADMIN.CHANNEL.EVENT -t queue -p {User} +get +dsp +inq +browse
setmqaut -m {qmgr} -n SYSTEM.ADMIN.COMMAND.EVENT -t queue -p {User} +get +dsp +inq +browse
setmqaut -m {qmgr} -n SYSTEM.ADMIN.CONFIG.EVENT -t queue -p {User} +get +dsp +inq +browse
setmqaut -m {qmgr} -n SYSTEM.ADMIN.LOGGER.EVENT -t queue -p {User} +get +dsp +inq +browse
setmqaut -m {qmgr} -n SYSTEM.ADMIN.PERFM.EVENT -t queue -p {User} +get +dsp +inq +browse
setmqaut -m {qmgr} -n SYSTEM.ADMIN.PUBSUB.EVENT -t queue -p {User} +get +dsp +inq +browse
setmqaut -m {qmgr} -n SYSTEM.ADMIN.QMGR.EVENT -t queue -p {User} +get +dsp +inq +browse
setmqaut -m {qmgr} -n SYSTEM.ADMIN.STATISTICS.QUEUE -t queue -p {User} +get +dsp +inq +browse
setmqaut -m {qmgr} -n SYSTEM.ADMIN.ACCOUNTING.QUEUE -t queue -p {User} +get +dsp +inq +browse
setmqaut -m {qmgr} -n SYSTEM.ADMIN.TRACE.ACTIVITY.QUEUE -t queue -p {User} +get +dsp +inq +browse
setmqaut -m {qmgr} -n SYSTEM.ADMIN.TRACE.ROUTE.QUEUE -t queue -p {User} +get +dsp +inq +browse