Show TOC

AuthorizationLocate this document in the navigation structure

Use

There are two types of user authorizations in the SAP MaxDB database system:

  • Authorizations for accessing database objects using SQL statements (database users, database system administrator)

  • Authorizations for carrying out administration tasks such as backups (DBM operators, database system administrator)

Authorizations for Accessing Database Objects using SQL Statements

Each database user belongs to a database user class. The user class primarily determines which actions the database user may carry out in the database using SQL statements. The database system administrator is a special database user of database user class SYSDBA (administrator).

Table 1: Database User Classes (User Mode)

Database User Class

Properties

DBA

Database administrators

Users belonging to this class can:

  • Create RESOURCE and STANDARD database users

  • Create database objects

  • Grant all or part of the privileges for their database objects to other database users

RESOURCE

Users belonging to this class can:

  • Define data

  • Create database procedures

  • Grant privileges for their database objects to other database users

STANDARD

Users belonging to this class can:

  • Access data and database procedures for which they have been granted the necessary privileges

  • Define view tables, synonyms, and temporary tables

Authorizations for Carrying out Administration Tasks

DBM operators have a set of DBM server permissions, which determine the administration tasks they can carry out. The database system administrator is a special DBM operator with all DBM server permissions.

Table 2: DBM Server Permissions

Permission

Required for Logon to a Database with Database Studio

Name in Database Manager CLI

Accessing an SQL session

Yes

AccessSQL

Access to Utility sessions

-

AccessUtility

Executing backups

-

Backup

Accessing database files (reading only)

Yes

DBFileRead

Displaying status information

Yes

DBInfoRead

Starting the database

-

DBStart

Stopping the database

-

DBStop

Managing the event dispatcher

Yes

EvtDispMgm

Using the Loader program

-

ExecLoad

Installation management

-

InstallMgm

Loading the system tables

-

LoadSysTab

Accessing database parameters (reading and writing; only those commands for changing parameters may be executed whose changes are checked against the default parameter file cserv.pcf)

-

ParamCheckWrite

Accessing database parameters (reading and writing; all commands can be executed, even those for directly changing the parameter file without the changes being checked by the system)

-

ParamFull

Accessing database parameters (reading only)

Yes

ParamRead

Restoring databases

-

Recovery

Managing the scheduler

-

SchedulerMgm

Scheduling DBM commands

-

Scheduling

Managing the shared memory

-

SharedMemoryAdmin

Executing operating system commands

-

SystemCmd

Managing DBM operators

-

UserMgm

More Information