There are two types of user authorizations in the SAP MaxDB database system:
Authorizations for accessing database objects using SQL statements (database users, database system administrator)
Authorizations for carrying out administration tasks such as backups (DBM operators, database system administrator)
Authorizations for Accessing Database Objects using SQL Statements
Each database user belongs to a database user class. The user class primarily determines which actions the database user may carry out in the database using SQL statements. The database system administrator is a special database user of database user class SYSDBA (administrator).
Database User Class |
Properties |
---|---|
DBA |
Database administrators Users belonging to this class can:
|
RESOURCE |
Users belonging to this class can:
|
STANDARD |
Users belonging to this class can:
|
Authorizations for Carrying out Administration Tasks
DBM operators have a set of DBM server permissions, which determine the administration tasks they can carry out. The database system administrator is a special DBM operator with all DBM server permissions.
Permission |
Required for Logon to a Database with Database Studio |
Name in Database Manager CLI |
---|---|---|
Accessing an SQL session |
Yes |
AccessSQL |
Access to Utility sessions |
- |
AccessUtility |
Executing backups |
- |
Backup |
Accessing database files (reading only) |
Yes |
DBFileRead |
Displaying status information |
Yes |
DBInfoRead |
Starting the database |
- |
DBStart |
Stopping the database |
- |
DBStop |
Managing the event dispatcher |
Yes |
EvtDispMgm |
Using the Loader program |
- |
ExecLoad |
Installation management |
- |
InstallMgm |
Loading the system tables |
- |
LoadSysTab |
Accessing database parameters (reading and writing; only those commands for changing parameters may be executed whose changes are checked against the default parameter file cserv.pcf) |
- |
ParamCheckWrite |
Accessing database parameters (reading and writing; all commands can be executed, even those for directly changing the parameter file without the changes being checked by the system) |
- |
ParamFull |
Accessing database parameters (reading only) |
Yes |
ParamRead |
Restoring databases |
- |
Recovery |
Managing the scheduler |
- |
SchedulerMgm |
Scheduling DBM commands |
- |
Scheduling |
Managing the shared memory |
- |
SharedMemoryAdmin |
Executing operating system commands |
- |
SystemCmd |
Managing DBM operators |
- |
UserMgm |
Database Administration, Managing Users
Database Administration in CCMS, User Data
Database Studio, Managing Users: Overview
Database Manager CLI, Managing Database Manager Operators
SQL Reference Manual, Authorization
SAP MaxDB Security Guide, User Administration and Authentication, Authorizations
SAP note 1542818