Changing a Grantee's Administrative Rights on a User-Extended Role

Change a member's (grantee's) ability to manage a user-extended role.

Prerequisites

Database Version	Role-Based User-Extended Role Privileges
SAP Sybase IQ 15.3 and 15.4	Not supported.
SAP Sybase IQ 16.0	Requires one of: Administrative rights over the role (role administrator). MANAGE ROLES system privilege if the role has a global role administrator.

Task

In the Perspective Resources view, select the resource and select Resource > Administration Console.
In the left pane, select IQ Servers > Security > Role-Based > User-Extended Roles.
Select a role from the right pane and either:
- Click the arrow to the right of the name and select Manage Grantees, or
- From the Administration Console menu bar, select Resource > Manage Grantees.
  Warning! When modifying the administrative rights of a grantee which is also a role, be sure you select the correct menu option. Each option has different inheritance outcomes. To review the differences, see Security Implications of the Managing Grantees and Managing Roles Options.
A list of users and roles currently granted to the role appears.

Highlight a user or role to be modified. Click in the Grant Option column, click the arrow, and select the administrative rights to be granted.

Grant Option	Description
Role only	(default) Grantee can use the underlying system privileges of the role only.
Administrative only	Grantee can grant and revoke the selected role to other users and roles, but cannot use its underlying system privileges.
Administrative and role	Grantee can grant and revoke the selected role to other users and roles and use its underlying system privileges.