The mon_role and additional access controls

Access to the monitoring tables is restricted to users with the mon_role. Only users who are granted this role can execute queries on the monitoring tables. You can grant or revoke select permissions on the monitoring tables from specific logins, roles, or groups to add additional access control to some (or all) of the monitoring tables. For information about acquiring roles, see Chapter 11, “Managing User Permissions,” in the System Administration Guide, Volume 1.

Some of the monitoring tables may contain sensitive information. For example, the monSysSQLText and monProcessSQLText tables contain all the SQL text that is sent to an Adaptive Server. This text may contain information such as updates to employee salary records. Administrators should consider adding additional access restrictions to these tables, such as limiting access to users with specific roles, to meet the security requirements of their systems.

NoteIf you are using monitoring tables in a clustered environment, the Workload and LogicalCluster monitoring tables do not require the mon_role.