Granting SYS_AUTH_VALIDATE

Grant to allow users to validate or check tables, materialized views, indexes or databases in the system store that are owned by any user.

Prerequisites

Administrative privilege over SYS_AUTH_VALIDATE_ROLE.

Task

You can grant this role with or without administrative rights. When granted with administrative rights, a user can manage (grant and revoke) the role, as well as use any of the underlying system privileges. When granted with administrative rights only, a user can manage the role, but not use its underlying system privileges. Finally, when granted with no administrative rights, a user can only use its underlying system privileges.

Note: For users migrating from SAP Sybase IQ 15.4 and earlier, the concept of inheritance of the underlying system privileges of this system role represents a change in behavior with SAP Sybase IQ 16.0 or later. For SAP Sybase IQ 15.4 and earlier behavior, use the WITH NO SYSTEM PRIVILEGE INHERITANCE clause.

The WITH ADMIN ONLY OPTION and WITH ADMIN OPTION clauses are invalid when using the WITH NO SYSTEM PRIVILEGE INHERITANCE. clause. The WITH NO ADMIN OPTION clause is valid, but not required, as it is semantically equivalent to the WITH NO SYSTEM PRIVILEGE INHERITANCE clause.

To grant the SYS_AUTH_VALIDATE_ROLE role, execute one of the following statements:

Administrative Option	Statement
With full administrative rights	GRANT ROLE SYS_AUTH_VALIDATE_ROLE TO `user_ID` WITH ADMIN OPTION
With administrative rights only	GRANT ROLE SYS_AUTH_VALIDATE_ROLE TO `user_ID` WITH ADMIN ONLY OPTION
With no administrative rights	GRANT ROLE SYS_AUTH_VALIDATE_ROLE TO `user_ID` WITH NO ADMIN OPTION
With no system privilege inheritance	GRANT ROLE SYS_AUTH_VALIDATE_ROLE TO `user_ID` WITH NO SYSTEM PRIVILEGE INHERITANCE

Example:

This example grants the SYS_AUTH_VALIDATE_ROLE to Mary and Joe, in two ways. Mary is granted administrative rights to the role and inherits the underlying system privileges of the role while Joe is granted neither.

GRANT ROLE SYS_AUTH_VALIDATE_ROLE TO Mary WITH ADMIN OPTION

GRANT ROLE SYS_AUTH_VALIDATE_ROLE TO Joe 
WITH NO SYSTEM PRIVILEGE INHERITANCE

Granting SYS_AUTH_VALIDATE_ROLE