SQL statement authority changes

Table 5 lists statements that can be executed by users with new authorities as an alternative to DBA authority.

Table 5: Statements with new authorities

Statement

Alternate authority to DBA

Documentation

ALTER DBSPACE

SPACE ADMIN

Reference: Statements and Options

ALTER INDEX MOVE TO

SPACE ADMIN

Reference: Statements and Options

ALTER LOGIN POLICY

USER ADMIN

Reference: Statements and Options

ALTER MULTIPLEX RENAME

MULTIPLEX ADMIN

Using Sybase IQ Multiplex.

ALTER MULTIPLEX SERVER

MULTIPLEX ADMIN

Using Sybase IQ Multiplex.

ALTER TABLE MOVE TO

SPACE ADMIN

Reference: Statements and Options

ALTER USER

PERMS ADMIN to change another user’s password, USER ADMIN to set or reset login policy and to cause password expiration

Reference: Statements and Options

BACKUP

OPERATOR

Reference: Statements and Options

CHECKPOINT

OPERATOR

Reference: Statements and Options

COMMENT ON DBSPACE

SPACE ADMIN

Reference: Statements and Options

CREATE DBSPACE

SPACE ADMIN

Reference: Statements and Options

CREATE EXTERNLOGIN

USER ADMIN

Reference: Statements and Options

CREATE LOGIN POLICY

USER ADMIN

Reference: Statements and Options

CREATE MULTIPLEX SERVER

MULTIPLEX ADMIN

Using Sybase IQ Multiplex

CREATE USER

USER ADMIN

Reference: Statements and Options

DROP CONNECTION

OPERATOR

Reference: Statements and Options

DROP EXTERNLOGIN

USER ADMIN

Reference: Statements and Options

DROP LOGIN POLICY

USER ADMIN

Reference: Statements and Options

DROP MULTIPLEX SERVER

MULTIPLEX ADMIN

Using Sybase IQ Multiplex

DROP USER

USER ADMIN

Reference: Statements and Options

DROP DBSPACE

SPACE ADMIN

Reference: Statements and Options

GRANT MULTIPLEX ADMIN|OPERATOR|PERMS ADMIN|RESOURCE|SPACE ADMIN|USER ADMIN

PERMS ADMIN can grant all authorities except DBA and REMOTE DBA

Reference: Statements and Options

GRANT CONNECT

PERMS ADMIN to change an existing user’s password; USER ADMIN to create a new user

Reference: Statements and Options

GRANT CREATE ON

SPACE ADMIN

Reference: Statements and Options

GRANT EXECUTE ON

PERMS ADMIN

Reference: Statements and Options

GRANT GROUP

PERMS ADMIN

Reference: Statements and Options

GRANT INTEGRATED LOGIN

USER ADMIN

Reference: Statements and Options

GRANT KERBEROS LOGIN

USER ADMIN

Reference: Statements and Options

GRANT MEMBERSHIP

PERMS ADMIN

Reference: Statements and Options

GRANT SELECT|INSERT|UPDATE|DELETE|ALTER |REFERENCES

PERMS ADMIN

Reference: Statements and Options

RESTORE

SPACE ADMIN for read-only selective restore

Reference: Statements and Options

REVOKE MULTIPLEX ADMIN|OPERATOR|PERMS ADMIN|RESOURCE|SPACE ADMIN|USER ADMIN

PERMS ADMIN can revoke all authorities except DBA and REMOTE DBA

Reference: Statements and Options

REVOKE CONNECT

USER ADMIN

Reference: Statements and Options

REVOKE CREATE ON

SPACE ADMIN

Reference: Statements and Options

REVOKE EXECUTE ON

PERMS ADMIN

Reference: Statements and Options

REVOKE GROUP

PERMS ADMIN

Reference: Statements and Options

REVOKE INTEGRATED LOGIN

USER ADMIN

Reference: Statements and Options

REVOKE KERBEROS LOGIN

USER ADMIN

Reference: Statements and Options

REVOKE MEMBERSHIP

PERMS ADMIN

Reference: Statements and Options

REVOKE SELECT|INSERT|UPDATE|DELETE|ALTER |REFERENCES

PERMS ADMIN

Reference: Statements and Options