If connection security is active, you must define profiles in the MQCONN class and permit the necessary groups or user IDs access to those profiles, so that they can connect to WebSphere MQ subsystems.
To enable a connection to be made, you must grant users READ access to the appropriate profile.
A connection profile qualified with a queue manager name controls access to a specific queue manager and users given access to this profile can connect to that queue manager.
For example, a user with access to QM_nwb_magd820.BATCH can Batch connect to queue manager QM_nwb_magd820.