By using this site, you agree to our updated Privacy Policy and our Terms of Use. Manage your Cookies Settings.
454,282 Members | 1,615 Online
Bytes IT Community
+ Ask a Question
Need help? Post your question and get tips & solutions from a community of 454,282 IT Pros & Developers. It's quick & easy.

Create Database privilege at an instance for user/group

P: n/a
Hi,

How do I give create database privielege to a specific user/group at a
particular db2 instance ?
I read about various authorities like SYSCTRL etc. but I am interested
in giving only Create database privilege.

I also came across GRANT <system privilege statement and it seems I
can execute following statement to achieve what I want,
GRANT CREATEDBA to <authorization-name>

I have few queries about above statement,
1. Is it possible to have a group-name as authorization-name? and if
yes then does all the users of the group get the createdba privilege
after executing above statement?
2. when I open db2 CLP, and try to execute above statement, a error is
shown that "A database connection does not exist". isn't this privilege
independent of database? why should I connect to database to execute
this statement.
Regards,
Jatinder

Aug 28 '06 #1
Share this Question
Share on Google+
1 Reply


P: n/a
Jatinder,

Depends on your platform. On LUW you can't do that, CREATE DATABASE
requires a minimum of SYSCTRL, which as you note gives other
privileges, too. CREATEDBA is z/OS specific, as I understand it, and
it's been a long, long time since I worked with that so I can't help
you there.

In DB2 for LUW, you certainly can grant privileges to a group.

/T
ja*************@gmail.com wrote:
Hi,

How do I give create database privielege to a specific user/group at a
particular db2 instance ?
I read about various authorities like SYSCTRL etc. but I am interested
in giving only Create database privilege.

I also came across GRANT <system privilege statement and it seems I
can execute following statement to achieve what I want,
GRANT CREATEDBA to <authorization-name>

I have few queries about above statement,
1. Is it possible to have a group-name as authorization-name? and if
yes then does all the users of the group get the createdba privilege
after executing above statement?
2. when I open db2 CLP, and try to execute above statement, a error is
shown that "A database connection does not exist". isn't this privilege
independent of database? why should I connect to database to execute
this statement.
Regards,
Jatinder
Aug 28 '06 #2

This discussion thread is closed

Replies have been disabled for this discussion.