Roles?

[DB_2]

Hello,

Does DB2 have the concept of roles as in Oracle? I did not see any
relevant information on this topic in the documentation that came with
the database.

As used in Oracle, a role is simply a collection of privileges that
one can grant to individual users or groups of users to manage user
access. Roles can also require their own passwords for added
security.

[Mark A]

"DB_2" <de*******@yahoo.com> wrote in message
news:9b**************************@posting.google.c om...

Hello,

Does DB2 have the concept of roles as in Oracle? I did not see any
relevant information on this topic in the documentation that came with
the database.

As used in Oracle, a role is simply a collection of privileges that
one can grant to individual users or groups of users to manage user
access. Roles can also require their own passwords for added
security.

Did you download the PDF manuals from the IBM website? Look especially
Administration: Implementation.

Here are a few roles:

SYSADM
SYSCTRL
SYSMAINT
DBADM

[DB_2]

"Mark A" <no****@switchboard.net> wrote in message news:<WZ****************@news.uswest.net>...

Does DB2 have the concept of roles as in Oracle? I did not see any
relevant information on this topic in the documentation that came with
the database.

Did you download the PDF manuals from the IBM website? Look especially
Administration: Implementation.

Here are a few roles:

SYSADM
SYSCTRL
SYSMAINT
DBADM

Hello Mark,

Thanks for your response. I had already downloaded the manuals and
after your post, I went back to read them again. While I saw a
discussion on the roles that you mentioned, it seemed that these were
perhaps fixed roles, as the manuals did not show a way to create new,
custom roles. More confusingly, the 2nd SQL reference manual alluded
to operating system groups in a short blurb on granting privileges.

Essentially, what I was looking for was SQL statements or stored
procedures that would allow me to create custom roles. For example,
in Oracle, I could do this with "CREATE ROLE rolename IDENTIFIED BY
password".

Is there something similar in DB2?

[Mark A]

> Hello Mark,

Thanks for your response. I had already downloaded the manuals and
after your post, I went back to read them again. While I saw a
discussion on the roles that you mentioned, it seemed that these were
perhaps fixed roles, as the manuals did not show a way to create new,
custom roles. More confusingly, the 2nd SQL reference manual alluded
to operating system groups in a short blurb on granting privileges.

Essentially, what I was looking for was SQL statements or stored
procedures that would allow me to create custom roles. For example,
in Oracle, I could do this with "CREATE ROLE rolename IDENTIFIED BY
password".

Is there something similar in DB2?

You can create a group id in the OS, add individual user ids to the group,
and then GRANT DB2 authorization to that group (with the SQL GRANT
statement). The authentication is done by the OS.

I don't know if this provides the exact same functionality as Oracle has
with its roles, but I believe that the DB2 GRANT syntax is ANSI SQL
compliant..