Granting SYS_AUTH_DBA

Grant to allow users to perform all authorized tasks.

Prerequisites

Administrative privilege over SYS_AUTH_DBA_ROLE role.

Task

This role indirectly grants all compatibility roles, as well as some system roles to a user. It is the union of the underlying system privileges of each of these roles that makes the SYS_AUTH_DBA_ROLE role the "super" role.

You can grant this role with or without administrative rights. When granted with administrative rights, a user can manage (grant and revoke) the role, as well as use any of the underlying system privileges. When granted with administrative rights only, a user can manage the role, but not use its underlying system privileges. Finally, when granted with no administrative rights, a user can only use its underlying system privileges.

Note: If you are migrating from SAP Sybase IQ 15.4 or earlier, the concept of inheritance of the underlying system privileges of this system role represents a change in behavior with SAP Sybase IQ 16.0 or later. For SAP Sybase IQ 15.4 and earlier behavior, use the WITH NO SYSTEM PRIVILEGE INHERITANCE clause.

The WITH ADMIN ONLY OPTION clauses is invalid when using the WITH NO SYSTEM PRIVILEGE INHERITANCE. clause. The WITH NO ADMIN OPTION clause is valid, but not required, as it is semantically equivalent to the WITH NO SYSTEM PRIVILEGE INHERITANCE clause.

To grant the SYS_AUTH_DBA_ROLE role, execute one of these statements:

Administrative Option	Statement
With full administrative rights	GRANT ROLE SYS_AUTH_DBA_ROLE TO `grantee [,...]` WITH ADMIN OPTION
With administrative rights only	GRANT ROLE SYS_AUTH_DBA_ROLE TO `grantee [,...]` WITH ADMIN ONLY OPTION
With no administrative rights	GRANT ROLE SYS_AUTH_DBA_ROLE TO `grantee [,...]` WITH NO ADMIN OPTION
With full administrative rights, but no system privilege inheritance	GRANT ROLE SYS_AUTH_REMOTE_DBA_ROLE TO `user_ID` WITH ADMIN OPTION WITH NO SYSTEM PRIVILEGE INHERITANCE

Granting SYS_AUTH_DBA_ROLE