What Are DB2 Authorities and Privileges?

Native DB2 Security › What Are DB2 Authorities and Privileges?

What Are DB2 Authorities and Privileges?

A privilege allows a specific function, sometimes restricted to a specific object. An authority is a set of privileges that often cover a set of objects.

Privileges and authorities can be obtained implicitly or explicitly:

Implicitly—Determine when one of the following is created:
- Collection
- Database
- Distinct Type
- Function
- JAR File
- Package
- Plan
- Role
- Sequence
- Storage Group
- Stored Procedure
- Synonym
- Table
- Table Space
- Trusted context
- View
Explicitly—Determined GRANT and REVOKE statements.

Privileges

To provide a wide range of control, there are many privileges. Privileges can be easily divided according to the following objects or categories:

Category	Includes

Buffer pool	USE
Collection	CREATEIN	PACKADM
Database	CREATETAB CREATETS DBADM DBCTRL DBMAINT	DISPLAYDB DROP IMAGCOPY LOAD RECOVERDB	REORG REPAIR STARTDB STATS STOPDB
Distinct Type	USAGE
Function	EXECUTE
JAR File	USAGE
Package	BIND COPY	EXECUTE ALL
Plan	BIND	EXECUTE
Role	Roles have no explicit privileges. They can only be owned.
Schema	ALTERIN	CREATEIN	DROPIN
Sequence	USAGE	ALTER
Storage group	USE
Stored Procedure	EXECUTE
System	ACCESSCTRL ARCHIVE BINDADD BINDAGENT BSDS CREATEALIAS CREATEDBA CREATEDBC CREATE_SECURE_OBJECT	CREATESG CREATETMTAB DATAACCESS DEBUGESES DISPLAY EXPLAIN MONITOR1 MONITOR2 RECOVER	SQLADM STOPALL STOSPACE SYSADM SYSCTRL SYSOPR System DBADM TRACE
Table	ALTER DELETE INDEX	INSERT REFERENCES SELECT	UPDATE TRIGGER ALL
Table space	USE
Trusted context	Trusted context have no explicit privilege. They can only be owned

For more details about each of the privileges, see the IBM DB2 Administration Guide.

Authorities

The DB2 authorities form a hierarchy in which the privileges of each authority include the privileges of all authorities below it in the hierarchy. The list includes the following authorities:

Install SYSADM
Install SECADM
SYSADM
SYSCTRL
System DBADM
DBADM
DBCTRL
DBMAINT
PACKADM
Install SYSOPR
SYSOPR
SQLADM
ACCESSCTRL
DATAACCESS
EXPLAIN

The following illustration shows the hierarchy of DB2 authorities.