The authorization service component supplied with the WebSphere MQ products is called the Object Authority Manager (OAM). By default, the OAM is active and works with the control commands dspmqaut (display authority), dspmqmaut (display object authority), dmpmqaut (dump object authority), grtmqmaut (grant object authority), rvkmqmaut (revoke object authority), and setmqaut (set and reset authority).
The syntax of these commands and how to use them are described in Chapter 17, The control commands.
The OAM works with the entity of a principal or group. These entities vary from platform to platform.
When an MQI request is made or a command is issued, the OAM checks the authorization of the entity associated with the operation to see whether it can:
The authorization service enables you to augment or replace the authority checking provided for queue managers by writing your own authorization service component.
The authorization service stanzas in the queue manager configuration file qm.ini (or Registry on Windows systems), define the authorization service to the queue manager. See Configuring services and components for information about the types of stanza.