When you upgrade an IQ database earlier than 16.0, each group is converted to an equivalent user-extended role of the same name. Members of the original group are automatically granted the new role and all of its underlying system privileges. Authorities and object-level permissions granted to the original group are converted to equivalent compatibility roles and system privileges and are granted to the user-extended role.
If an authority was inheritable, grantees of the new user-extended role inherit the underlying system privileges of the equivalent compatibility role. If the authority was not inheritable, the grantees of the user-extended role do not inherit the underlying system privileges of the equivalent compatibility role. If the legacy group had a password, only the extended user of the user-extended role inherits the underlying system privileges of the compatibility role that is not inheritable.
System groups become system roles with the same name.
| Group/System Role | Description |
|---|---|
| dbo | This role owns many system stored procedures, views, and tables. |
| diagnostics | This role owns the diagnostic tables and views, and can perform operations on them. |
| PUBLIC | This role has SELECT permission on the system tables. Any new user ID is automatically granted the PUBLIC role. |
| ra_systabgroup | This role allows users to perform replication server functionality. |
| SYS | This role owns the system tables and views (IQ catalog) for the database, and can perform operations on them. |
| SYS_SPATIAL_ADMIN_ROLE | This role allows users to create, alter, or drop spatial objects. |