Granting Users the Permissions to Run Related Stored Procedures

Since most authorities are inherited through group membership, users can inherit the authority and also the execute permissions for IQ procedures from a group.

Prerequisites

The following steps require DBA or PERMS ADMIN and USER ADMIN authority. The statement CREATE USER USERADMIN_GRP requires USER ADMIN authority.

To grant a user user1, USER ADMIN authority and permissions to execute procedures related to user administration:

Task

Create a group USER ADMIN_GRP

CREATE USER USERADMIN_GRP
GRANT GROUP TO USERADMIN_GRP

Grant USER ADMIN authority to USERADMIN_GRP.
```
GRANT USER ADMIN TO USERADMIN_GRP
```

Grant EXECUTE permission on Sybase IQ stored procedures for user administration to USERADMIN_GRP.

GRANT EXECUTE on sp_iqaddlogin 
to USERADMIN_GRP
GRANT EXECUTE on sp_iqcopyloginpolicy 
to USERADMIN_GRP
GRANT EXECUTE on sp_iqdroplogin 
to USERADMIN_GRP
GRANT EXECUTE on sp_iqmodifyadmin 
to USERADMIN_GRP
GRANT EXECUTE on sp_iqmodifylogin 
to USERADMIN_GRP

Grant membership in group USERADMIN_GRP to user1. The user user1 inherits the USER ADMIN authority and the ability to execute the assigned IQ procedures through membership in USERADMIN_GRP group.
```
GRANT MEMBERSHIP IN GROUP USERADMIN_GRP TO user1
```