A list of the system privileges and object permissions
required to complete the various
role-based user-extended role tasks.
Creating a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
Create a role – you must have both the MANAGE ANY USER and MANAGE ROLES
system privileges. Grant a role during user-extended
role creation – you must have one of:
- Administrative rights over the role being
granted (role administrator)
- MANAGE ROLES system privilege if the role being
granted has a global role administrator
Grant a system privilege during user-extended
role creation - You must have administrative rights over the system
privilege being granted.
|
Deleting a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
You
must have the MANAGE ANY USER system privilege. |
Converting a User-Extended Role to a Role-Based User
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
You must have administrative rights over the role being
converted. |
Adding and Removing Grantees to and from a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
You must have one of:- Administrative rights over the role (role
administrator)
- MANAGE ROLES system privilege if the role has a
global role administrator
|
Changing Administrative Rights of a Grantee of a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
You must have one of:- Administrative rights over the role (role
administrator)
- MANAGE ROLES system privilege if the role has a
global role administrator
|
Adding and Removing Underlying Roles to and from a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
Enable the Manage Roles option –
you must have one of:- Administrative rights over the role (role
administrator)
- MANAGE ROLES system privilege if the role has a
global role administrator
Add an underlying system role – you must have
the MANAGE ROLES system privilege.
Add an
underlying user-defined or compatibility role – you must have one of: - Administrative rights over the underlying
role (role administrator)
- MANAGE ROLES system privilege if the
underlying role has a global role administrator
|
Changing Administrative Rights on an Underlying Role of a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
Enable the Manage Roles option –
you must have one of:- Administrative rights over the role (role
administrator)
- MANAGE ROLES system privilege if the role has a
global role administrator
Add an underlying system role – you must have
the MANAGE ROLES system privilege.
Add an
underlying user-defined or compatibility role – you must have one of: - Administrative rights over the underlying
role (role administrator)
- MANAGE ROLES system privilege if the
underlying role has a global role administrator
|
Adding and Removing System Privileges to and from a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
You must have administrative rights over the system privilege.
Administrative rights on the role is not required. |
Changing Administrative Rights on a System Privileges Granted to a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
You must have administrative rights over the system privilege.
Administrative rights on the role is not required. |
Viewing or Modifying User-Extended Role Options
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not Supported. |
| SAP Sybase IQ
16.0 |
View user-extended role options only – none.Modify
user-extended role options – Depending on the option being modified,
you must have one of: - SET ANY PUBLIC OPTION system privilege
- SET ANY SECURITY OPTION system
privilege
- SET ANY SYSTEM OPTION system privilege
|
Managing Role Administrators of a User-Extended Role
| Database Version |
Role Administrator Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
You must have one of:- Administrative rights over the role being
managed
- MANAGE ROLES system privilege if the role being
granted has a global role administrator
|
Adding the Global Role Administrator to a User-Extended Role
| Database Version |
Global Role Administrator Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
You must have administrative rights over the role being
managed. |
Removing the Global Role Administrator from a User-Extended Role
| Database Version |
Global Role Administrator Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
You must have one of:- Administrative rights over the role being
managed
- MANAGE ROLES system privilege
|
Generating User-Extended Role DDL Commands
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
None. |
Viewing or Modifying User-Extended Role Properties
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not Supported. |
| SAP Sybase IQ
16.0 |
View any user-extended role property page – none.
Modify a password – you must have the CHANGE PASSWORD system
privilege.
Modify a login policy, or refresh LDAP DN – you must have the MANAGE ANY
USER system privilege.
Modify a user-extended role comment – you must have one of: - MANAGE ROLES system privilege
- Administrative rights over the role begin
commented
For privileges relating to user-extended role permissions, see:
|
Changing a User-Extended Role Password
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not Supported. |
| SAP Sybase IQ
16.0 |
You must have the CHANGE PASSWORD system privilege. |
Forcing a User-Extended Role Password Change
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not Supported. |
| SAP Sybase IQ
16.0 |
You must have the MANAGE ANY USER system privilege. |
Unlocking a User-Extended Role Account
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not Supported. |
| SAP Sybase IQ
16.0 |
You must have the MANAGE ANY USER system privilege. |
Changing a User-Extended Role Login Policy
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not Supported. |
| SAP Sybase IQ
16.0 |
You must have the MANAGE ANY USER system privilege. |