Background documentationAuthorization Locate this document in the navigation structure

 

There are two types of user authorizations in the SAP MaxDB database system:

  • Authorizations of database users for accessing database objects using SQL statements

  • Authorizations of DBM operators for carrying out administration tasks such as backups

Authorizations for Database Users

Each database user belongs to a database user class. The user class primarily determines which actions the database user may carry out in the database using SQL statements.

Database User Classes

Database User Class

Properties

DBA

Database administrators

Users belonging to this class can:

  • Create RESOURCE and STANDARD database users

  • Create database objects

  • Grant all or part of the privileges for their database objects to other database users

RESOURCE

Users belonging to this class can:

  • Define data

  • Create database procedures

  • Grant privileges for their database objects to other database users

STANDARD

Users belonging to this class can:

  • Access data and database procedures for which they have been granted the necessary privileges

  • Define view tables, synonyms, and temporary tables

Authorizations for DBM Operators

DBM operators have a set of DBM server authorizations, which determine the administration tasks they can carry out.

DBM Server Permissions

Permission

Required for Logon to a Database with Database Studio

Name in Database Manager CLI

Accessing an SQL session

Yes

AccessSQL

Access to Utility sessions

-

AccessUtility

Executing backups

-

Backup

Accessing database files (reading only)

Yes

DBFileRead

Displaying status information

Yes

DBInfoRead

Starting the database

-

DBStart

Stopping the database

-

DBStop

Managing the event dispatcher

Yes

EvtDispMgm

Using the Loader program

-

ExecLoad

Installation management

-

InstallMgm

Loading the system tables

-

LoadSysTab

Accessing database parameters (reading and writing; only those commands for changing parameters may be executed whose changes are checked against the default parameter file cserv.pcf)

-

ParamCheckWrite

Accessing database parameters (reading and writing; all commands can be executed, even those for directly changing the parameter file without the changes being checked by the system)

-

ParamFull

Accessing database parameters (reading only)

Yes

ParamRead

Restoring databases

-

Recovery

Managing the scheduler

-

SchedulerMgm

Scheduling DBM commands

-

Scheduling

Managing the shared memory

-

SharedMemoryAdmin

Executing operating system commands

-

SystemCmd

Managing DBM operators

-

UserMgm

More Information

Database Administration, Managing Users

Database Administration in CCMS, User Data

Database Studio,

SQL Reference Manual, CREATE USER statement