Providing DB2 authorization

If you want to use the static EXPLAIN feature, the authorization ID of the Application Performance Analyzer started task must have SELECT authority on the following DB2® tables:

• SYSIBM.SYSPLAN
• SYSIBM.SYSPACKAGE
• SYSIBM.SYSSTMT
• SYSIBM.SYSPACKSTMT
• authid.PLAN_TABLE, where authid is the owner of the package or plan that was bound with the EXPLAIN(YES) option.

If you want to use the dynamic EXPLAIN feature, the authorization ID of the Application Performance Analyzer started task must have SYSADM authority. You can use the following SQL statement to grant the SYSADM privilege to the authid of the started task:

GRANT SYSADM TO authid

If you do not grant SYSADM to the started task, then it must be authorized as follows:

• SELECT privilege on the catalog tables:
  • SYSIBM.SYSPLAN
  • SYSIBM.SYSPACKAGE
  • SYSIBM.SYSROUTINES
  • SYSIBM.SYSDBRM
  • SYSIBM.SYSPACKSTMT
  • SYSIBM.SYSSTMT
• SELECT and DELETE privileges on authid.PLAN_TABLE, where authid is the authorization ID assigned to the started task.
• EXPLAIN sqlstmt, where sqlstmt is any SQL statement that needs to be explained. The started task must have all authorization required by dynamic execution of the SQL statement.