User permissions

SQL Remote uses a consistent system to manage the users who have permissions on remote and consolidated databases.

Users of databases involved in SQL Remote replication are identified by one or more of the following permissions:

  • PUBLISH   Every database in a SQL Remote system publishes information. Therefore, every database must have a publisher. To create a publisher, grant one user PUBLISH permission. The publisher user must be unique throughout the SQL Remote system. When sending data, the publisher represents the database. For example, when a database sends a message, its publisher user name is included with the message. When a database receives a message, it can identify the database that sent the message by the publisher name in the message.

  • REMOTE   A database, such as a consolidated database, that sends messages to other databases must specify which remote databases it sends messages to. To specify these remote databases on the consolidated database, grant REMOTE permission to the publishers of the remote databases. REMOTE permission identifies databases that receive messages from the current database.

  • CONSOLIDATE   Each remote database must specify the consolidated database that it receives messages from. To specify a consolidated database on the remote database, grant CONSOLIDATE permission to the publisher of the consolidated database. A remote database can only receive messages from one consolidated database. CONSOLIDATE permission identifies the database that sends messages to the current database.

Information about these permissions is held in the SQL Remote system tables, and these permissions are independent of other database authorities and permissions.

Extraction utility (dbxtract) sets permissions automatically

By default, the Extraction utility (dbxtract) and the Extract Database Wizard grant the appropriate PUBLISH and CONSOLIDATE permissions to users in the remote databases.


Single-tiered hierarchy
Multi-tiered hierarchy
PUBLISH permission
REMOTE permission
CONSOLIDATE permission
Grant REMOTE DBA authority