Teradata Connector | Configure a Foreign Server/Grant Privileges | QueryGrid - Configuring a Foreign Server and Granting Privileges for Teradata-to-TargetConnector Links - Teradata QueryGrid

QueryGridâ„¢ Installation and User Guide - 3.06

Deployment
VantageCloud
VantageCore
Edition
Enterprise
IntelliFlex
Lake
VMware
Product
Teradata QueryGrid
Release Number
3.06
Published
December 2024
ft:locale
en-US
ft:lastEdition
2024-12-07
dita:mapPath
ndp1726122159943.ditamap
dita:ditavalPath
ft:empty
dita:id
lxg1591800469257
lifecycle
latest
Product Category
Analytical Ecosystem
Before you begin the following procedure for a Teradata-to-Teradata connector whose Authentication Mechanism is set to Trusted, verify that a proxy user exists on the target Teradata system. The proxy user is used for authentication on the target system.
Complete the following steps on the initiator system. These apply after initial deployment and when creating remote servers or access, but not after upgrading versions.
  1. Log on as an Administrator, such as dbc, to the initiating Teradata system.
  2. Create an authorization object for the target server:
    CREATE AUTHORIZATION td_server_db.target_server_auth AS DEFINER TRUSTED USER 'proxyuser' PASSWORD 'password';
    An authorization object is created in the td_server_db database. Using the DEFINER clause makes the authorization available globally to all users.
  3. Grant the CREATE SERVER and EXECUTE FUNCTION privileges on the td_server_db database to the Administrator user, for example:
    GRANT CREATE SERVER ON td_server_db TO dbc;
    GRANT EXECUTE FUNCTION ON TD_SYSFNLIB TO dbc;
  4. Create the foreign server:
    CREATE FOREIGN SERVER target_server_name
    EXTERNAL SECURITY DEFINER TRUSTED target_server_auth
    USING
    LINK('linkname')
    VERSION ('version')
    DO IMPORT WITH TD_SYSFNLIB.QGInitiatorImport,
    DO EXPORT WITH TD_SYSFNLIB.QGInitiatorExport;

    For example, where sdll7100 is the initiating Teradata system, and sdll7151 is the target Teradata system:

    CREATE FOREIGN SERVER sdll7151_fs
    EXTERNAL SECURITY DEFINER TRUSTED target_server_auth
    USING
    LINK('sdll7100_sdll7151')
    VERSION('active')
    DO IMPORT WITH TD_SYSFNLIB.QGInitiatorImport,
    DO EXPORT WITH TD_SYSFNLIB.QGInitiatorExport;
  5. From database td_server_db, grant SELECT and INSERT privileges on the target server to initiating end users.
    GRANT SELECT ON td_server_db.target_server_name to initiating_end_user;
    GRANT INSERT ON td_server_db.target_server_name to initiating_end_user;

    For example:

    GRANT SELECT ON td_server_db.sdll7151_fs to sdll7100_user2;
    GRANT INSERT ON td_server_db.sdll7151_fs to sdll7100_user2;