Creating a Standalone Role

Add a new standalone role to the database.

Prerequisites

Database Version	Role-Based Standalone Role Privileges
SAP Sybase IQ 15.3 and 15.4	Not supported.
SAP Sybase IQ 16.0	Creating a role requires MANAGE ROLES system privilege. Granting a role during standalone role creation requires one of: Administrative rights over the role being granted (role administrator). MANAGE ROLES system privilege if the role being granted has a global role administrator. Granting a system privilege during standalone creation requires administrative rights over the system privilege being granted.

Database Version

Role-Based Standalone Role Privileges

SAP Sybase IQ 15.3 and 15.4

Not supported.

SAP Sybase IQ 16.0

Creating a role requires MANAGE ROLES system privilege.

Granting a role during standalone role creation requires one of:

Administrative rights over the role being granted (role administrator).
MANAGE ROLES system privilege if the role being granted has a global role administrator.

Granting a system privilege during standalone creation requires administrative rights over the system privilege being granted.

The SAP Sybase IQ resource is authenticated and running.
The selected resource supports role-based security

Task

In the Perspective Resources view, select the resource and select Resource > Administration Console.
In the left pane, select IQ Servers > Security > Role-Based > Standalone Roles.
Click the arrow next to Standalone Roles and select New.
The Create Standalone Role Wizard appears.

On the Welcome page, specify

Option	Description
Select a resource on which the user will be created.	Select a resource from the list. Note: If the selected resource does not support role-based security, an error message appears.
What do you want to name the new user?	Enter a unique user ID.

Click Next.
On the Administrators page, select one or more administrators.

Note: It is strongly recommended that you do not select any role administrators when creating a new role; add them once the creation process is complete. If at least one role administrator is specified during creation, global role administrators will be unable to manage the role because the MANAGE ROLES system privilege is not automatically granted to the role.
If an administrator is selected, indicate whether the administrator is to be granted membership in the role along with administrative rights (Administrative and role) or administrative rights only (default).

Note: Only one privilege level can be defined for all selected administrators when specified during the create process. However, the privilege level can be later modified. See Manage Standalone Role Administrators.
Click Next.

On the Roles page, highlight a role to be granted. Click in the Grant Option column, click the arrow, and select the administrative rights to be granted.

Grant Option	Description
Role only	(default) Grantee can use the underlying system privileges of the role only.
Administrative only	Grantee can grant and revoke the selected role to other users and roles, but cannot use its underlying system privileges.
Administrative and role	Grantee can grant and revoke the selected role to other users and roles and use its underlying system privileges.

When you grant a role to a user, user-extended role, or standalone role, unless otherwise noted, any underlying system privileges of the role being granted are automatically inherited by the user, user-extended role, or standalone role.

Repeat step 9 to grant additional roles.
Click Next.

On the System Privileges page, highlight a system privilege to be granted. Click in the Grant Option column, click the arrow, and select the administrative rights to be granted.

Grant Option	Description
Privilege only	(default) Grantees can perform authorized tasks requiring the selected privilege, but cannot grant the system privilege to other users and roles.
Administrative only	Grantees can grant and revoke the selected system privilege to other users and roles, but cannot perform authorized tasks requiring the selected system privilege.
Administrative and privilege	Grantees can grant and revoke the selected system privilege to other users and roles and can perform authorized tasks requiring the selected system privilege.

Repeat step 12 to grant additional privileges.
(Optional) On the Comment page, enter a comment for this user.
Click Finish.