Why are "chg" Permissions Required by the MQ Monitor Agent?

Document ID : KB000095850
Last Modified Date : 17/05/2018
Show Technical Document Details
Introduction:
The permissions required to monitor an MQ instance with MQ Monitor are documented here:
https://docops.ca.com/ca-apm/10-7/en/implementing-agents/ibm-websphere-mq/configure-mq-agent/#ConfigureMQAgent-SetSecurityRequirementstoMonitoranMQobject
Question:
Why is "chg" permission required by MQ Monitor?
Environment:
Any MQ Monitor version 9.5.3 or higher.
Answer:
The "'chg" permissions is required to obtain enqueue and dequeue metrics reported under the Recommended monitoring level: 
https://docops.ca.com/ca-apm/10-7/en/implementing-agents/ibm-websphere-mq/metrics-reference

This permission is needed as MQ Monitor makes use of the 'Reset Queue Statistics' command to calculate these metrics. More information on this command here: https://www.ibm.com/support/knowledgecenter/en/SSFKSJ_9.0.0/com.ibm.mq.ref.adm.doc/q088300_.htm