Previous Topic: GRANT Administration Privilege ParametersNext Topic: GRANT Administration Privilege More Information

Syntax for Securing Global Resources › GRANT Administration Privilege › GRANT Administration Privilege Usage

GRANT Administration Privilege Usage

Ultimate Authority to Grant and Revoke

SYSADMIN controls access to all resources. A user with SYSADMIN privilege can grant and revoke any privilege on any resource in the domain.

Caution in Granting SYSADMIN

A user to whom you grant SYSADMIN privilege can administer the security system. If you grant SYSADMIN to PUBLIC, any user can administer the security system.

Note: If resource type SYSA is unsecured in the SRTT, any user can administer the security system.

You can decentralize security administration by granting DCADMIN and DBADMIN privileges to users.

Note: For more information about the DCADMIN and DBADMIN administration privileges, see the following sections:

Granting SYSADMIN to the Security Administrator

The following GRANT statement gives SYSADMIN privilege to group secadmin:

grant sysadmin
  to secadmin;