Summary of Db2 authorization requirements
Additional authorization considerations
- Although you can grant any of the listed Db2 authorizations or privileges to PUBLIC, many of them are normally not (for example, SYSADM, SYSCTRL, BINDADD, and PACKADM).
- The BindOwner value must be:
- A valid primary or secondary authorization ID of the user running High-speed Apply Engine
An authorization ID (with sufficient authority) that has granted BINDAGENT authority to the user running High-speed Apply Engine
- The AuthID value:
- Must be a valid TSO logon ID, not a group ID
- Does not have to be a valid secondary authorization ID of the user running High-speed Apply Engine
[Bind] parameter usage method | Db2 authorization | Granted to one of the listed IDs or to PUBLIC |
|---|---|---|
Default [Bind] parameters (if you do not specify any parameters in your configuration) | EXECUTE privilege for High-speed Apply Engine plan For example, APTBvvr |
|
EXECUTE privilege for restart table package For example, APTBvvr.APTREB2 | Primary authorization ID (user ID) | |
BINDADD authority | ||
PACKADM authority or CREATE IN privilege for collection | ||
SELECT, INSERT, UPDATE, and DELETE privileges on target tables | ||
Specify value for BindOwner (APOWNER) parameter | EXECUTE privilege for High-speed Apply Engine plan For example, APTBvvr |
|
EXECUTE privilege for restart table package For example, APTBvvr.APTREB2 | Authorization ID specified by BindOwner parameter | |
BINDADD authority | ||
PACKADM authority or CREATE IN privilege for collection | ||
SELECT, INSERT, UPDATE, and DELETE privileges on target tables | ||
Specify value for AuthID parameter | EXECUTE privilege for High-speed Apply Engine plan For example, APTBvvr |
|
EXECUTE privilege for restart table package For example, APTBvvr.APTREB2 | Primary authorization ID (user ID) | |
SYSADM or SYSCTRL authority | Authorization ID specified by AuthID parameter | |
SELECT, INSERT, UPDATE, and DELETE privileges on target tables | Primary authorization ID (user ID) | |
Specify value for AuthID and BindOwner (APOWNER) parameters | EXECUTE privilege for High-speed Apply Engine plan For example, APTBvvr |
|
EXECUTE privilege for restart table package For example, APTBvvr.APTREB2 | Authorization ID specified by BindOwner parameter | |
SYSADM or SYSCTRL authority | Authorization ID specified by AuthID parameter | |
SELECT, INSERT, UPDATE, and DELETE privileges on target tables | Authorization ID specified by BindOwner parameter |