Changing Administrative Rights on an Underlying Role of a Standalone Role

Changes a member's (grantee's) ability to manage an underlying role of a standalone role.

Prerequisites

Database Version	Role-Based Standalone Role Privileges
SAP Sybase IQ 15.3 and 15.4	Not supported.
SAP Sybase IQ 16.0	Enable the Manage Roles option – you must have one of: Administrative rights over the role (role administrator) MANAGE ROLES system privilege if the role has a global role administrator Add an underlying system role – you must have the MANAGE ROLES system privilege. Add an underlying user-defined or compatibility role – you must have one of: Administrative rights over the underlying role (role administrator) MANAGE ROLES system privilege if the underlying role has a global role administrator

Database Version

Role-Based Standalone Role Privileges

SAP Sybase IQ 15.3 and 15.4

Not supported.

SAP Sybase IQ 16.0

Enable the Manage Roles option – you must have one of:

Add an underlying system role – you must have the MANAGE ROLES system privilege.

Add an underlying user-defined or compatibility role – you must have one of:

Administrative rights over the underlying role (role administrator)
MANAGE ROLES system privilege if the underlying role has a global role administrator

Task

In the Perspective Resources view, select the resource, and select Resource > Administration Console.
In the left pane, expand IQ Servers > Security > Role-Based, and then select Standalone Roles.
Select a standalone role from the right pane and either:
- Click the arrow to the right of the name and select Manage Roles, or
- From the Administration Console menu bar, select Resource > Manage Roles.
A list of underlying roles currently granted to the standalone role appears.

Highlight a role to be modified. Click in the Grant Option column, click the arrow, and select the administrative rights to be granted.

Note: Administrative rights cannot be modified on underlying roles which are system roles.

Grant Option	Description
Role only	(default) Grantee can use the underlying system privileges of the role only.
Administrative only	Grantee can grant and revoke the selected role to other users and roles, but cannot use its underlying system privileges.
Administrative and role	Grantee can grant and revoke the selected role to other users and roles and use its underlying system privileges.

Do one of:
- Click OK to update any changes to the database and exit the properties view.
- Click Apply to update any changes to the database, but remain in the properties view.
- Click Cancel to cancel any changes not updated to the database and exit the properties view.