DB2 Authorization Requirements

For DB2 for MVS, you need the following authority:

• The authority to grant update, select, insert, and delete privileges to other users for the control tables.

  If your primary authorization ID is ASN, this privilege is implied in the ownership of the above tables.

  If your primary authorization ID is not ASN, you must have, either:

  • SYSADM level authority, held privately or publicly
  • DBADM authority

• The authority to create tables either in the DB2 forms default database, DSNDB04, or in a DB2 database that you can optionally specify in the DPCNTL.SQL control table file. For this authority, you must have at least one of the following privileges:
  • SYSADM or SYSCTRL authority, held privately or publicly
  • DBADM authority for the DB2 database specified
  • DBADM authority for the DSNDB04 database
  • CREATETAB and CREATETS privileges on the DSNDB04 database
  • CREATETAB and CREATETS privileges on the DB2 database specified by the administrator in the DPCNR.SQL file

• The authority to access selected system catalog tables. For this authority, you must have at least one of the following privileges:
  • SYSADM or SYSCTRL authority, held privately or publicly
  • DBADM authority for the DSNDB06 database
  • SELECT privileges for the following catalog tables:
    • SYSIBM.SYSCOLUMNS
    • SYSIBM.SYSDATABASE
    • SYSIBM.SYSINDEXES
    • SYSIBM.SYSINDEXPART
    • SYSIBM.SYSKEYS
    • SYSIBM.SYSTABLES
    • SYSIBM.SYSTABLESPACE

• The authority to run Capture, which includes:
  • EXECUTE privilege on the Capture MVS program plan, ASNLPLAN
  • TRACE privilege
  • MONITOR1 and MONITOR2 privileges

For DB2 Universal Database, you need the following authority:

You must have DBADM or SYSADM authority which meets all requirements for defining a replication source.

[ Top of Page | Table of Contents | Glossary | Index ]

[ DB2 List of Books | Search the DB2 Books ]