Profiles for checking connections from Batch or TSO take the form:
qmgr-name.BATCH
where qmgr-name is the queue manager name. If it fails to find the profile, the connection request fails.
For connection requests through Batch or TSO, you must permit the job or TSO user ID to access the connection profile. For example, the following security definition allows Batch and TSO users in the ALLUSER group to connect to the queue manager QM_nwb_magd820:
##################################### # MQCONN QM_nwb_magd820.BATCH auths # ##################################### dn: CN=QM_nwb_magd820.BATCH,CN=MQCONN,CN=Enterprise Server Resources,CN=Micro Focus,DC=local changetype: delete dn: CN=QM_nwb_magd820.BATCH,CN=MQCONN,CN=Enterprise Server Resources,CN=Micro Focus,DC=local changetype: add objectClass: microfocus-MFDS-Resource microfocus-MFDS-Resource-Class: MQCONN microfocus-MFDS-Resource-ACE: allow:ALLUSER group:read microfocus-MFDS-Resource-ACE: deny:*:execute microfocus-MFDS-UID: mfuid description: Enable security on MQCONN subsystem BATCH for QMGR QM_nwb_magd820