| copyright | lastupdated | subcollection | keywords | ||
|---|---|---|---|---|---|
|
2021-09-28 |
mqcloud |
connect, access, client, queue, manager, IAM, permissions |
{:new_window: target="_blank"} {:shortdesc: .shortdesc} {:screen: .screen} {:codeblock: .codeblock} {:pre: .pre}
{: #mqoc_configure_app_qm_access}
To connect an application to a queue manager, it must have been granted permissions to access queue managers within your IBM MQ service instance. The application must connect to the queue manager using its Application username and the password must be the application's API key. {: shortdesc}
- Note: applications have access to connect to all queues and topics starting with DEV.*. They have permission to put / get messages and publish / subscribe to topics.
If you want to know more about IBM MQ users and applications before proceeding, you can find information here
{: #grant_mqoc_configure_app_qm_access}
If you are the administrator of your IBM Cloud Account, then you should have the necessary administrator privileges for your IBM MQ service instance.
If you do not have the necessary privileges, someone with the required privileges should follow these instructions to grant you access to queue managers within your IBM MQ service instance.
The required privileges to add new application credentials are configured in IAM and include:
- Administrator for the MQ service in the required resource group
- Administrator for the User Management service in account management services
- The account owner will need to set unrestricted visibility of the user list in the account
-
Log in to the IBM Cloud console to view the dashboard.
-
In the Resource summary panel click Services.
-
In the Offering filter box type
MQ. -
Locate and click on your IBM MQ service instance, found under the 'Services' heading.
-
Once in the {{site.data.keyword.mq_short}} service, click the Application credentials tab.
-
Click Add.
-
Enter a Name and Description that will help you identify the application.
-
A unique application username will be generated for you.
- Note: You can edit the text-box to change this to your preferred username. It must have a maximum of 12 characters and be lower case a-z or 0-9. It must also be unique within your IBM MQ service instance.
-
Click Add and Generate API key.
-
Click Show to display the API key to copy and save it for later, or click Download to store the API Key in a file.
-
Click Close.
For security reasons, the API key is only available to be copied or downloaded at the time of creation. If the API key is lost, you must create a new API key. {: important}
The application that was added will now have permissions to access queue managers within your IBM MQ service instance. You have now obtained the application username and API key for this application.
{: #next_mqoc_configure_app_qm_access}