The directory authenticates the directory user and then authorizes user privileges in the database according to these rules:
- The directory can only authorize privileges that are defined in the database.
- Directory users mapped to a Teradata Vantage user (including EXTUSER) inherit the database user privileges.
- If the directory user is mapped to database profiles or external roles, those privileges take precedence over any privileges inherited from mapping to a database user.