A list of the system privileges and object permissions
required to complete the various
role-based user-extended role tasks.
Creating a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
Creating a role requires both the MANAGE ANY USER and MANAGE ROLES system
privileges. Granting a role during user-extended role creation
requires one of:
- Administrative rights over the role being granted (role
administrator).
- MANAGE ROLES system privilege if the role being granted has a
global role administrator.
Granting a system privilege during user-extended role creation
requires administrative rights over the system privilege being
granted.
|
Deleting a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
Requires
MANAGE ANY USER system privilege. |
Converting a User-Extended Role to a Role-Based User
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
Requires administrative rights over the role being converted. |
Adding and Removing Grantees to and from a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
Requires one of:- Administrative rights over the role (role administrator).
- MANAGE ROLES system privilege if the role has a global role administrator.
|
Changing Administrative Rights of a Grantee of a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
Requires one of:- Administrative rights over the role (role administrator).
- MANAGE ROLES system privilege if the role has a global role administrator.
|
Adding and Removing Underlying Roles to and from a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
To enable the Manage Roles option requires one of:- Administrative rights over the role (role administrator).
- MANAGE ROLES system privilege if the role has a global role administrator.
To then add an underlying system role requires MANAGE ROLES
system privilege.
To then add an underlying user-defined or
compatibility role requires one of: - Administrative rights over the underlying role (role
administrator).
- MANAGE ROLES system privilege if the underlying role has a
global role administrator.
|
Changing Administrative Rights on an Underlying Role of a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
To enable the Manage Roles option requires one of:- Administrative rights over the role (role administrator).
- MANAGE ROLES system privilege if the role has a global role administrator.
To then add an underlying system role requires MANAGE ROLES
system privilege.
To then add an underlying user-defined or
compatibility role requires one of: - Administrative rights over the underlying role (role
administrator).
- MANAGE ROLES system privilege if the underlying role has a
global role administrator.
|
Adding and Removing System Privileges to and from a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
Requires administrative rights over the system privilege. Administrative rights on the
role is not required. |
Changing Administrative Rights on a System Privileges Granted to a User-Extended Role
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
Requires administrative rights over the system privilege. Administrative rights on the
role is not required. |
Viewing or Modifying User-Extended Role Options
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not Supported. |
| SAP Sybase IQ
16.0 |
View user-extended role options only – None required.Modify
user-extended role options – Depending on the option being modified,
requires one of these: - SET ANY PUBLIC OPTION system privilege.
- SET ANY SECURITY OPTION system privilege.
- SET ANY SYSTEM OPTION system privilege.
|
Managing Role Administrators of a User-Extended Role
| Database Version |
Role Administrator Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
Requires one of:- Administrative rights over the role being managed.
- MANAGE ROLES system privilege if the role being granted has a
global role administrator.
|
Adding the Global Role Administrator to a User-Extended Role
| Database Version |
Global Role Administrator Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
Requires administrative rights over the role being managed. |
Removing the Global Role Administrator from a User-Extended Role
| Database Version |
Global Role Administrator Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
Requires one of:- Administrative rights over the role being managed.
- MANAGE ROLES system privilege.
|
Generating User-Extended Role DDL Commands
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not supported. |
| SAP Sybase IQ
16.0 |
None required. |
Viewing or Modifying User-Extended Role Properties
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not Supported. |
| SAP Sybase IQ
16.0 |
View any user-extended role property page – None required.
Modify a password – Requires CHANGE PASSWORD system privilege.
Modify a login policy, or refresh LDAP DN – Requires MANAGE ANY USER system privilege.
Modify a user-extended role comment – Requires one of: - MANAGE ROLES system privilege.
- Administrative rights over the role begin commented.
For privileges relating to user-extended role permissions, see:
|
Changing a User-Extended Role Password
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not Supported. |
| SAP Sybase IQ
16.0 |
Requires CHANGE PASSWORD system privilege. |
Forcing a User-Extended Role Password Change
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not Supported. |
| SAP Sybase IQ
16.0 |
Requires MANAGE ANY USER system privilege. |
Unlocking a User-Extended Role Account
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not Supported. |
| SAP Sybase IQ
16.0 |
Requires MANAGE ANY USER system privilege. |
Changing a User-Extended Role Login Policy
| Database Version |
Role-Based User-Extended Role Privileges |
|---|
| SAP Sybase IQ 15.3 and 15.4 |
Not Supported. |
| SAP Sybase IQ
16.0 |
Requires MANAGE ANY USER system privilege. |