Required Permissions

Configure system accounts with the permissions required to support connector operations.

Permissions Management

Permissions are assigned to accounts and groups as Direct Permissions during account and entitlement aggregation. The connector supports the following permissions:

  • table

  • database

  • schema, index

  • view

  • package

  • method

  • tablespace

  • function

  • procedure

Procedure to Create Service User

Based on the operating system, perform the respective procedures in the section.

IBM DB2 Enterprise Server Permissions

For IBM DB2 Enterprise Server version 10.1 and 10.5:

The Administrator login must have the SYSADM (Authority) as the minimum privilege and must be able to perform the following operations on DB User and Roles:

  • Search

  • Create

  • Update

  • Delete

Note
To run the CREATE ROLE rolename and DROP ROLE rolename query in the following DB2 versions, the respective specified authorities are required: 10.1 and 10.5: SECADM, SYSCTRL, or SECADM authority

For IBM DB2 Enterprise Server version 11.1:

  1. Connect to the database with administrator user using command:

    db2 connect to <DATABASE>

  2. Grant the following Privileges:

    GRANT DBADM ON DATABASE TO USER <SERVICE_USER>; GRANT SECADM ON DATABASE TO USER <SERVICE_USER>; GRANT ACCESSCTRL ON DATABASE TO USER <SERVICE_USER>; GRANT DATAACCESS ON DATABASE TO USER <SERVICE_USER>;

  3. Grant the following Roles:

    GRANT SYSTS_ADM to <SERVICE_USER>;

  4. Create the source using the Service User as the user and specify the database.