Granting Multiple Privileges With a Single Keyword | Teradata Vantage - 17.05 - Granting Multiple Privileges With a Single Keyword - Teradata Database

Teradata Vantageā„¢ - SQL Data Control Language

prodname
Advanced SQL Engine
Teradata Database
vrm_release
17.00
17.05
created_date
June 2020
category
Programming Reference
featnum
B035-1149-170K

Teradata Database has a special category of keywords that you can use to grant multiple privileges. For example, the following GRANT request grants both the CREATE DATABASE and DROP DATABASE privileges to user_name using the keyword DATABASE:

GRANT DATABASE on  user_name;

The following table lists this class of keywords and indicates the multiple privileges that they confer when they are granted on a user or database:

Keyword Privileges Conferred
ALL all implicit and explicit object privileges owned by the grantor WITH GRANT OPTION that pertain to the type of object specified, and only those privileges, are granted on the specified database object.
AUTHORIZATION
  • CREATE AUTHORIZATION
  • DROP AUTHORIZATION
CHECKPOINT
  • ability to execute the CHECKPOINT SQL statement.
  • ability to execute the HUT CHECKPOINT command.
DATABASE
  • CREATE DATABASE
  • DROP DATABASE
DROP
  • If the ON clause specifies FUNCTION, then the privilege granted is DROP FUNCTION.
  • If the ON clause specifies PROCEDURE, then the privilege granted is DROP PROCEDURE.
EXECUTE
  • If the ON clause specifies FUNCTION, then the privilege granted is EXECUTE FUNCTION.
  • If the ON clause specifies PROCEDURE, then the privilege granted is EXECUTE PROCEDURE.
  • If the ON specifies nothing, then the privilege granted is EXECUTE MACRO.
FUNCTION
  • CREATE FUNCTION
  • DROP FUNCTION
GLOP
  • CREATE GLOP
  • DROP GLOP
INDEX
  • CREATE INDEX
  • DROP INDEX
MACRO
  • CREATE MACRO
  • DROP MACRO
MAP
  • CREATE MAP
  • DROP MAP
PROCEDURE
  • CREATE PROCEDURE
  • DROP PROCEDURE
PROFILE
  • CREATE PROFILE
  • DROP PROFILE
RESTORE ability to execute the following HUT commands on the specified object:
  • DELETE JOURNAL
  • ROLLBACK
  • ROLLFORWARD
ROLE
  • CREATE ROLE
  • DROP ROLE
SHOW the ability to execute the following SQL statements only:
  • HELP database_object
  • SHOW database_object
STATISTICS
  • COLLECT STATISTICS
  • DROP STATISTICS
TABLE
  • CREATE TABLE
  • DROP TABLE
TRIGGER
  • CREATE TRIGGER
  • DROP TRIGGER
USER
  • CREATE USER
  • DROP USER
VIEW
  • CREATE VIEW
  • DROP VIEW