Create Database privilege at an instance for user/group

[jatinder.saundh]

Hi,

How do I give create database privielege to a specific user/group at a
particular db2 instance ?
I read about various authorities like SYSCTRL etc. but I am interested
in giving only Create database privilege.

I also came across GRANT <system privilege statement and it seems I
can execute following statement to achieve what I want,
GRANT CREATEDBA to <authorization-name>

I have few queries about above statement,
1. Is it possible to have a group-name as authorization-name? and if
yes then does all the users of the group get the createdba privilege
after executing above statement?
2. when I open db2 CLP, and try to execute above statement, a error is
shown that "A database connection does not exist". isn't this privilege
independent of database? why should I connect to database to execute
this statement.
Regards,
Jatinder

[Tomas]

Jatinder,

Depends on your platform. On LUW you can't do that, CREATE DATABASE
requires a minimum of SYSCTRL, which as you note gives other
privileges, too. CREATEDBA is z/OS specific, as I understand it, and
it's been a long, long time since I worked with that so I can't help
you there.

In DB2 for LUW, you certainly can grant privileges to a group.

/T
ja*************@gmail.com wrote:

Hi,

How do I give create database privielege to a specific user/group at a
particular db2 instance ?
I read about various authorities like SYSCTRL etc. but I am interested
in giving only Create database privilege.

I also came across GRANT <system privilege statement and it seems I
can execute following statement to achieve what I want,
GRANT CREATEDBA to <authorization-name>

I have few queries about above statement,
1. Is it possible to have a group-name as authorization-name? and if
yes then does all the users of the group get the createdba privilege
after executing above statement?
2. when I open db2 CLP, and try to execute above statement, a error is
shown that "A database connection does not exist". isn't this privilege
independent of database? why should I connect to database to execute
this statement.
Regards,
Jatinder