Adding a Role Administrator to an Existing Standalone Role

Add a new role administrator to an existing user-extended role.

Prerequisites
Database Version Role Administrator Privileges
SAP Sybase IQ 15.3 and 15.4 Not supported.
SAP Sybase IQ 16.0 You must have one of:
  • Administrative rights over the role being managed
  • MANAGE ROLES system privilege if the role being granted has a global role administrator
Task
  1. In the Perspective Resources view, select the resource, and select Resource > Administration Console.
  2. In the left pane, expand IQ Servers > Security > Role-Based, and then select Standalone Roles.
  3. Select a role from the right pane and do one of:
    • Click the arrow to the right of the name and select Manage Grantees, or
    • From the Administration Console menu bar, select Resource > Manage Grantees.
      Warning!  When adding a grantee which is also a role, be sure you select the correct menu option. Each option has different inheritance outcomes. To review the differences, see Security Implications of the Managing Grantees and Managing Roles Options.
    A list of users or roles currently granted to the role appears. Any user or role with Administrative only or Administrative and role in the Grant Option column is a role administrator.
  4. Click Grant.
  5. Select one or more users or roles. Only roles to which you have administrative rights appear on the list.
    Tip: Use Shift-click or Control-click to select multiple users or roles.
  6. Click OK to grant membership.
    The selected users or roles appear with Role only rights (no administrative rights).
  7. For each new administrator added, click in the Grant Options column, click the arrow, and select:
    Grant Option Description
    Administrative only Grantee can grant and revoke the selected role to other users and roles, but cannot use its underlying system privileges.
    Administrative and role Grantee can grant and revoke the selected role to other users and roles and use its underlying system privileges.
  8. Do one of:
    • Click OK to update any changes to the database and exit the properties view.
    • Click Apply to update any changes to the database, but remain in the properties view.
    • Click Cancel to cancel any changes not updated to the database and exit the properties view.
Parent topic: Manage Standalone Role Administrators
Related tasks
Removing a Role Administrator from a Standalone Role
Modifying a Standalone Role Administrator's Administrative Rights
Authenticating a Login Account for a Managed Resource