To create a table object or join index in a dbspace or to move a table object or join index to a new dbspace requires CREATE permission in the dbspace.
The CREATE permission in a dbspace can be granted/revoked to/from a user or a group. Any member in a group inherits CREATE permission from the group. By default, CREATE permission on IQ_SYSTEM_MAIN, IQ_SYSTEM_TEMP, and SYSTEM is granted to PUBLIC. For other IQ main dbspaces, the system administrator must explicitly grant CREATE permission on the dbspace to a group/user before they can create or move objects into that dbspace. For example, if a table is to be placed on a new IQ main dbspace, the user must have CREATE permission on that dbspace. Users must also have RESOURCE permission to create objects.