Authorities and privileges for Data Warehouse Center tasks

Task

Authorities and privileges

Defining or changing a warehouse target table

You must belong to a warehouse group that has access to the warehouse target.

Defining or changing a warehouse source table

You must belong to a warehouse group that has access to the warehouse source.

Defining or changing a warehouse source view

You must belong to a warehouse group that has access to the warehouse source.

Defining or changing a warehouse source

Any warehouse user can define a warehouse source, but only warehouse users who belong to a warehouse group that has access to the warehouse source can change it.

Changing Data Warehouse Center properties

You must belong to a warehouse group that has administration privilege.

Defining or changing a step in a process

You must belong to a warehouse group that has access to the process.

Defining or changing a subject area

Any warehouse user can define or change a subject area.

Defining or changing a process

Any warehouse user can define a process, but only warehouse users who belong to a warehouse group that has access to the process can change it.

Defining or changing a table, view, or file in a process

You must belong to a warehouse group that has access to the process.

Defining or changing a warehouse target

Any warehouse user can define a warehouse target, but only warehouse users who belong to a warehouse group that has access to the warehouse target can change it.

Defining or changing a warehouse source file

You must belong to a warehouse group that has access to the warehouse source.

Defining or changing a warehouse target file

You must belong to a warehouse group that has access to the warehouse target.

Defining or changing a schema

Any warehouse user can define or change a schema.

Defining or changing tables in a schema

Any warehouse user can define a table in a schema, but only warehouse users who belong to a warehouse group that has access to the warehouse source or target that contains the tables can change the tables.

Defining or changing warehouse agents

Any warehouse user can define or change warehouse agents.

Defining or changing a program group

Any warehouse user can define or change a program group.

Defining or changing programs within a program group

You must belong to a warehouse group that has administration privilege.

Defining or changing warehouse groups

You must belong to a warehouse group that has administration privilege.

Defining or changing warehouse users

You must belong to a warehouse group that has administration privilege.

Importing metadata

You must belong to a warehouse group that has administration privilege.

Creating transformers in a warehouse target

Requires CREATE PROCEDURE authorization. The privileges held by the authorization ID of the statement must include at least one of the following authorities or privileges:

SYSADM or DBADM authority.

IMPLICIT_SCHEMA authority on the database, if the implicit or explicit schema name of the procedure does not exist.

CREATEIN privilege on the schema, if the schema name of the procedure refers to an existing schema.

To create a non-fenced transformer, the privileges held by the authorization ID must also include at least one of the following authorities or privileges:

CREATE_NOT_FENCED authority on the database.

SYSADM or DBADM authority.

To create a fenced transformer, no additional authorities or privileges are required.

Using transformers

Requires CREATE TABLE authorization. The privileges held by the authorization ID of the statement must include at least one of the following authorities or privileges:

SYSADM or DBADM authority.

CREATETAB authority on the database and one of:

IMPLICIT_SCHEMA authority on the database, if the implicit or explicit schema name of the table does not exist.

CREATEIN privilege on the schema, if the schema name of the table refers to an existing schema.

If a subtable is being defined, the authorization ID must be the same as the definer of the root table of the table hierarchy.

To define a foreign key, the privileges held by the authorization ID of the statement must include one of the following privileges on the parent table:

REFERENCES privilege on the table.

REFERENCES privilege on each column of the specified parent key.

CONTROL privilege on the table.

SYSADM or DBADM authority.

To define a summary table (using a fullselect), the privileges held by the authorization ID of the statement must include at least one of the following authorities or privileges on each table or view identified by the fullselect:

SELECT privilege on the table or view and ALTER privilege if REFRESH DEFERRED or REFRESH IMMEDIATE is specified.

CONTROL privilege on the table or view.

SYSADM or DBADM authority.

Task	Authorities and privileges
Defining or changing a warehouse target table	You must belong to a warehouse group that has access to the warehouse target.
Defining or changing a warehouse source table	You must belong to a warehouse group that has access to the warehouse source.
Defining or changing a warehouse source view	You must belong to a warehouse group that has access to the warehouse source.
Defining or changing a warehouse source	Any warehouse user can define a warehouse source, but only warehouse users who belong to a warehouse group that has access to the warehouse source can change it.
Changing Data Warehouse Center properties	You must belong to a warehouse group that has administration privilege.
Defining or changing a step in a process	You must belong to a warehouse group that has access to the process.
Defining or changing a subject area	Any warehouse user can define or change a subject area.
Defining or changing a process	Any warehouse user can define a process, but only warehouse users who belong to a warehouse group that has access to the process can change it.
Defining or changing a table, view, or file in a process	You must belong to a warehouse group that has access to the process.
Defining or changing a warehouse target	Any warehouse user can define a warehouse target, but only warehouse users who belong to a warehouse group that has access to the warehouse target can change it.
Defining or changing a warehouse source file	You must belong to a warehouse group that has access to the warehouse source.
Defining or changing a warehouse target file	You must belong to a warehouse group that has access to the warehouse target.
Defining or changing a schema	Any warehouse user can define or change a schema.
Defining or changing tables in a schema	Any warehouse user can define a table in a schema, but only warehouse users who belong to a warehouse group that has access to the warehouse source or target that contains the tables can change the tables.
Defining or changing warehouse agents	Any warehouse user can define or change warehouse agents.
Defining or changing a program group	Any warehouse user can define or change a program group.
Defining or changing programs within a program group	You must belong to a warehouse group that has administration privilege.
Defining or changing warehouse groups	You must belong to a warehouse group that has administration privilege.
Defining or changing warehouse users	You must belong to a warehouse group that has administration privilege.
Importing metadata	You must belong to a warehouse group that has administration privilege.
Creating transformers in a warehouse target	Requires CREATE PROCEDURE authorization. The privileges held by the authorization ID of the statement must include at least one of the following authorities or privileges: SYSADM or DBADM authority. IMPLICIT_SCHEMA authority on the database, if the implicit or explicit schema name of the procedure does not exist. CREATEIN privilege on the schema, if the schema name of the procedure refers to an existing schema. To create a non-fenced transformer, the privileges held by the authorization ID must also include at least one of the following authorities or privileges: CREATE_NOT_FENCED authority on the database. SYSADM or DBADM authority. To create a fenced transformer, no additional authorities or privileges are required.
Using transformers	Requires CREATE TABLE authorization. The privileges held by the authorization ID of the statement must include at least one of the following authorities or privileges: SYSADM or DBADM authority. CREATETAB authority on the database and one of: IMPLICIT_SCHEMA authority on the database, if the implicit or explicit schema name of the table does not exist. CREATEIN privilege on the schema, if the schema name of the table refers to an existing schema. If a subtable is being defined, the authorization ID must be the same as the definer of the root table of the table hierarchy. To define a foreign key, the privileges held by the authorization ID of the statement must include one of the following privileges on the parent table: REFERENCES privilege on the table. REFERENCES privilege on each column of the specified parent key. CONTROL privilege on the table. SYSADM or DBADM authority. To define a summary table (using a fullselect), the privileges held by the authorization ID of the statement must include at least one of the following authorities or privileges on each table or view identified by the fullselect: SELECT privilege on the table or view and ALTER privilege if REFRESH DEFERRED or REFRESH IMMEDIATE is specified. CONTROL privilege on the table or view. SYSADM or DBADM authority.