AuthID
Usage
Use this parameter to specify a different user ID (or secondary authorization ID) that High-speed Apply Engine uses to bind plans and packages. High-speed Apply Engine runs under this authority only for bind-related activities; for all other processing, High-speed Apply Engine runs under the authority of the user ID that runs High-speed Apply Engine.
This parameter is part of one method of granting authorizations and privileges related to plans, packages, and collections. For more information about this and other methods, see Db2-authorizations-for-plans-packages-and-collections.
Specify an authorization ID that has either SYSADM authority or SYSCTRL authority. Be aware of the following points about the AuthID parameter:
- Specify either a primary or secondary authorization ID. Ensure that you specify a valid TSO logon ID, not a group ID. If this parameter is not a valid TSO logon ID, security software can issue warning messages or prevent required processing.
- If you specify this parameter, High-speed Apply Engine does not perform any other processing (such as dynamic SQL) at the same time as it binds static SQL. High-speed Apply Engine overrides the value of the Synchronous parameter if necessary, issues message BMC0198 and ensures that no other processing occurs during bind actions.
- Use this parameter to avoid granting privileges over plans, packages, and collections to the user ID that runs High-speed Apply Engine. With this method, you can restrict the privileges to bind plans, bind packages, or update collections to a single or limited number of authorization IDs (possibly secondary authorization IDs).
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*