SQL Explorer and DB2 authority requirements
SQL Explorer uses IBM DB2 security to ensure that any access or updates to DB2 are appropriately authorized.
SQL Explorer uses the following authority:
- Execution of an SQL statement via the SQLX edit macro or the online ad-hoc Explain interface uses the DB2 authority of your TSO ID.
The Explain component uses the following authority:
- INSTALL SYSADM authority in the following situations:
- When running Explain jobs online while being connected to the Data Collector
- When running Explain jobs in batch mode from an APF-authorized library
- Authority of your TSO ID in the following situations:
- When running Explain jobs online without being connected to the Data Collector
- When running Explain jobs in batch mode from a library that is not APF-authorized
(PTFs BQU1326 and BQU1107 applied)
Dynamic Explain requests now use the ADMIN_EXPLAIN_MAINT IBM DB2 stored procedure. This stored procedure can create or update Explain tables to the correct format for the version of DB2 that you are running. It can also create the indexes recommended by IBM on the Explain tables.
Ensure that the ADMIN_EXPLAIN_MAINT stored procedure is installed correctly for successful Explains.
Installing the ADMIN_EXPLAIN_MAINT stored procedure
For DB2 Version 11 or later, use the following procedure to install the ADMIN_EXPLAIN_MAINT stored procedure:
- Create a JCL startup procedure for the IBM z/OS Workload Manager (WLM) environment, if you do not already have one.
- Set up the IBM stored procedure using the DSNTESR member from the DB2 DSNSAMP data set. Perform the following steps:
- Create the following global temporary tables:
- SYSIBM.EXPLAIN_MAINT_SUMMARY
- SYSIBM.EXPLAIN_MAINT_SQL
- SYSIBM.EXPLAIN_MAINT_TB_NOT_UPGRADED
- Define the SYSPROC.ADMIN_EXPLAIN_MAINT stored procedure by specifying your WLM environment and the COLLID for the DSN% packages.
- Issue a GRANT ALL to PUBLIC authority to the global temporary tables.
- Issue a GRANT EXECUTE to PUBLIC authority to the stored procedure.
- Remove the comments from the bind statement and run the bind for the DSNADMEM package, specify the DSNDBRM DB2 library, and perform the bind.
- Create the following global temporary tables:
- Activate the WLM environment.
- Start the stored procedure.
For more information, see the IBM DB2 for z/OS installation documentation.
For information about the authorities you require for Workload Advisor Explains, see Required authorities for Workload Advisor Explains and the Index Advisor feature v12_1_SPE3_1803