Choose the appropriate authorities

Under Choose the appropriate authorities to grant to the selected group, indicate which database authorities you want a group to have or to stop exercising. You can grant or revoke authorities to perform specific activities, or the authority to administer the entire database:

• Select one or more of the following check boxes if you want to grant authority to connect to the database, create certain objects, or register functions as not fenced. Deselect the check boxes to revoke these authorities.

  Connect database

  Grants the authority to access the database (CONNECT authority)

  Create tables

  Grants:

  • The authority to create tables in the database (the CREATETAB authority). With this authority, each member of a group can create tables in a schema that he or she owns. To enable the members to create tables in other schemas, you must also grant either of the following authorizations:

    • The authority to create tables in schemas that the user defines when he or she defines the tables (IMPLICIT_SCHEMA authority). If you want to grant this authority, select the Create schemas implicitly check box on the Database page.

    • The privilege to create tables in a specific existing schema (CREATEIN privilege). You can grant this privilege on the Schema page.

  • The CONTROL privilege on each table that the user creates in this database. All other table privileges automatically come with the CONTROL privilege. They are: SELECT, INSERT, UPDATE, DELETE, ALTER, INDEX, and REFERENCES. The user keeps all table privileges if the CREATETAB authority is revoked.

  Create packages

  Grants:

  • The authority to create packages in the database (BINDADD authority).

  • The CONTROL privilege on each package that the user creates in this database. The other two package privileges--BIND and EXECUTE--automatically come with CONTROL. The user keeps all package privileges if the BINDADD authority is revoked.

  Register functions to execute in database manager's process

  Grants the authority to register functions as not-fenced; that is, to allow them to run in the database manager's process (CREATE_NOT_FENCED authority). After the user registers a function as not-fenced, it continues to run in the database manager's process even if the CREATE_NOT_FENCED authority is revoked.

  Create schemas implicitly

  Grants the authority to create a schema for an object by specifying the schema's name in the definition of the object (IMPLICIT_SCHEMA authority)

• Select the Database administrator authority check box if you want to grant DBADM authority. This authority includes, but is not limited to:
  • Grant all the authorities listed above
  • Grant all privileges on all objects in the database
  • Give permission to grant these privileges to other users

  Deselect this check box if you want to revoke DBADM authority.

[ Top of Page | Table of Contents | Glossary | Index ]

[ DB2 List of Books | Search the DB2 Books ]