DISPLAY AUTHREC
Use the MQSC command DISPLAY AUTHREC to display the authority records associated with a profile name.
Using MQSC commands
For information on how you use MQSC commands, see Performing local administration tasks using MQSC commands.
| IBM® i | UNIX and Linux® | Windows | z/OS® |
|---|---|---|---|
 |
|
|
Parameter descriptions
- PROFILE(profile-name)
- The name of the object or generic profile for which to display the authority records. If you omit this parameter, all authority records that satisfy the values of the other parameters are displayed.
- OBJTYPE
- The type of object referred to by the profile. Specify one of the following values:
- AUTHINFO
- Authentication information record
- CHANNEL
- Channel
- CLNTCONN
- Client connection channel
- COMMINFO
- Communication information object
- LISTENER
- Listener
- NAMELIST
- Namelist
- PROCESS
- Process
- QUEUE
- Queue
- QMGR
- Queue manager
- RQMNAME
- Remote queue manager
- SERVICE
- Service
- TOPIC
- Topic
- PRINCIPAL(principal-name)
- A principal name. This is the name of a user for whom to retrieve authorizations to the specified object. On IBM MQ for
Windows, the name of the principal can optionally include a domain name, specified in this format:
user@domain.This parameter cannot be specified with GROUP.
- GROUP(group-name)
- A group name. This is the name of the user group on which to make the inquiry. You can specify one name only and it must be the name of an existing user group.
For IBM MQ for Windows only, the group name can optionally include a domain name, specified in the following formats:
GroupName@domain domain\GroupNameThis parameter cannot be specified with PRINCIPAL.
- MATCH
- Specify this parameter to control the set of authority records that is displayed. Specify one of the following values:
- PROFILE
- Return only those authority records which match the specified profile, principal, and group names. This means that a profile of ABCD results in the profiles ABCD, ABC*, and AB* being returned (if ABC* and AB* have been defined as profiles). If the profile name is a generic profile, only authority records which exactly match the specified profile name are returned. If a principal is specified, no profiles are returned for any group in which the principal is a member; only the profiles defined for the specified principal or group.
This is the default value.
- MEMBERSHIP
- Return only those authority records which match the specified profile, and the entity field of which matches the specified principal and the profiles pertaining to any groups in which the principal is a member that contribute to the cumulative authority for the specified entity.
If this option is specified, the PROFILE and OBJTYPE parameters must also be specified. In addition, either the PRINCIPAL or GROUP parameter must also be supplied. If OBJTYPE(QMGR) is specified, the profile name is optional.
- EXACT
- Return only those authority records which exactly match the specified profile name and EntityName. No matching generic profiles are returned unless the profile name is, itself, a generic profile. If a principal is specified, no profiles are returned for any group in which the principal is a member; only the profile defined for the specified principal or group.
- SERVCOMP(service-component)
- The name of the authorization service for which information is to be displayed.
If you specify this parameter, it specifies the name of the authorization service to which the authorizations apply. If you omit this parameter, the inquiry is made to the registered authorization services in turn in accordance with the rules for chaining authorization services.
- ALL
- Specify this parameter to display all of the authorization information available for the entity and the specified profile.
Requested parameters
You can request the following information about the authorizations:
- AUTHLIST
- Specify this parameter to display the list of authorizations.
- ENTITY
- Specify this parameter to display the entity name.
- ENTTYPE
- Specify this parameter to display the entity type.