17.20 - Query Logging - Analytics Database - Teradata Vantage

Teradata Vantage™ - Analytics Database Security Administration - 17.20

Deployment
VantageCloud
VantageCore
Edition
Enterprise
IntelliFlex
VMware
Product
Analytics Database
Teradata Vantage
Release Number
17.20
Published
June 2022
Language
English (United States)
Last Update
2023-03-07
dita:mapPath
hjo1628096075471.ditamap
dita:ditavalPath
qkf1628213546010.ditaval
dita:id
zuy1472246340572

Users with EXECUTE privilege on DBQLAccessMacro can begin and end query logging. The following table summarizes query logging in Teradata Secure Zones:

User and Privileges Logging Scope
Zone users with EXECUTE privilege on DBQLAccessMacro Can begin and end query logging on objects in their zone. They cannot begin and end query logging on objects outside of their zone.

When they use SHOW LOGGING, they can see only rules created by zone users.

They cannot end system-level logging rules created by users with system-level logging privileges.

The DBC user Can begin and end query logging on all objects on the system, regardless of zones. When they use SHOW LOGGING, they can see all rules.
Non-zone users (including zone guests) with the ZONE OVERRIDE privilege and with EXECUTE privilege on DBQLAccessMacro Can begin and end query logging on all objects on the system, regardless of zones.

When they use SHOW LOGGING, they can see all rules.

Non-zone users (excluding DBC) with DBQLAccessLog privilege but without ZONE OVERRIDE privilege Can begin and end query logging on objects that are not in a zone.

When they use SHOW LOGGING, they can see only rules created by non-zone users.