SQL Statements

Interactive SQL statements customize and modify the database.

• ALTER LDAP SERVER Statement
  Any changes to an LDAP server configuration object are applied on subsequent connections. Any connection already started when the change is applied does not immediately reflect the change.
• ALTER LOGIN POLICY Statement
  Changes existing login policies or configures logical server access.
• ALTER ROLE Statement
  Migrates a compatibility role to a user-defined system role, then automatically drops the compatibility role.
• ALTER USER Statement
  Changes user settings.
• CREATE LDAP SERVER Statement
  Creates a new LDAP server configuration object for LDAP user authentication. Parameters defined during the creation of an LDAP server configuration object are stored in the ISYSLDAPSERVER (system view SYSLDAPSERVER) system table.
• CREATE LOGIN POLICY Statement
  Creates a login policy in the database.
• CREATE ROLE Statement
  Creates a new role, extends an existing user to act as a role, or manages role administrators on a role.
• CREATE USER Statement
  Creates a user.
• DROP LDAP SERVER Statement
  Removes the named LDAP server configuration object from the SYSLDAPSERVER system view after verifying that the LDAP server configuration object is not in a READY or ACTIVE state.
• DROP LOGIN POLICY Statement
  Removes a login policy from the database.
• DROP ROLE Statement
  Removes a user-defined role from the database or converts a user-extended role to a regular user.
• DROP USER Statement
  Removes a user.
• GRANT CHANGE PASSWORD Statement
  Allows users to manage passwords for other users and administer the CHANGE PASSWORD system privilege.
• GRANT CONNECT Statement
  Grants CONNECT privilege to a user.
• GRANT CREATE Statement
  Grants CREATE privilege on a specified dbspace to the specified users and roles.
• GRANT EXECUTE Statement
  Grants EXECUTE privilege on a procedure or user-defined function.
• GRANT Object-Level Privilege Statement
  Grants database object-level privileges to a user or role.
• GRANT ROLE Statement
  Grants roles to users or other roles, with or without administrative rights.
• GRANT SET USER Statement
  Grants the ability for one user to impersonate another user and to administer the SET USER system privilege.
• GRANT System Privilege Statement
  Grants specific system privileges to users, with or without administrative rights.
• GRANT USAGE ON SEQUENCE Statement
  Grants USAGE privilege on a specified sequence.
• REVOKE CHANGE PASSWORD Statement
  Removes the ability of a user to manage passwords and administer the system privilege.
• REVOKE CONNECT Statement
  Removes a user from the database.
• REVOKE CREATE Statement
  Removes CREATE permissions on the specified dbspace from the specified user IDs.
• REVOKE EXECUTE Statement
  Removes EXECUTE permissions that were given using the GRANT statement.
• REVOKE Object-Level Privilege Statement
  Removes object-level privileges that were given using the GRANT statement.
• REVOKE ROLE Statement
  Removes a users membership in a role or his or her ability to administer the role.
• REVOKE SET USER Statement
  Removes the ability for one user to impersonate another user and to administer the SET USER system privilege.
• REVOKE System Privilege Statement
  Removes specific system privileges from specific users and the right to administer the privilege.
• REVOKE USAGE ON SEQUENCE Statement
  Removes USAGE privilege on a specified sequence.
• SET OPTION Statement
  Changes database options.
• SETUSER Statement
  Allows a user to temporarily assume the roles and system privileges of another user (also known as impersonation) to perform operations, provided they already have the minimum required privileges to perform the task to begin with.
• VALIDATE LDAP SERVER Statement
  Validates changes to the settings of existing LDAP server configuration objects before applying them.