# Creating Secure Destinations

By default, all authenticated EMS users have permissions to perform any action on any topic or queue.

You can set the `secure` property on a topic or queue and then use the `grant topic` or `grant queue` command to specify which users and/or groups are allowed to perform which actions on the destination.

The `secure` property requires that you enable the `authorization` property on the EMS server.

For example, to create a secure queue, named `myQueue`, to which only users "joe" and "eric" can send messages and "sally" can receive messages, in the EMS Administration Tool, enter:

       set server authorization=enabled
       create queue myQueue secure
       grant queue myQueue joe send
       grant queue myQueue eric send
       grant queue myQueue sally receive

See Authentication and Permissions for more information.

Copyright © Cloud Software Group, Inc. All rights reserved.