I noticed that I (using a domain account) cannot create a new queue manager in WebSphere MQ when a domain group "domain mqm" is not a member of the local "mqm" group. When "domain mqm" is a member of the local "mqm" group, however, everything works fine.
I understand that is the case and it is documented somewhere. However, why is it the case?
What permissions does "domain mqm" have and why does its membership in the local "mqm" group affect what my account (a member of local "mqm" but not of domain "domain mqm") can do?
Maybe the question is phrased weird. I find MQ very confusing. Sorry.
