Granting Multiple Privileges With a Single Keyword | Teradata Vantage - Granting Multiple Privileges With a Single Keyword - Advanced SQL Engine - Teradata Database

SQL Data Control Language
Product
Advanced SQL Engine
Teradata Database
Release Number
17.10
Published
July 2021
Language
English (United States)
Last Update
2021-07-27
dita:mapPath
sqd1591723147563.ditamap
dita:ditavalPath
sqd1591723147563.ditaval
dita:id
B035-1149
lifecycle
previous
Product Category
Teradata® Vantage™ NewSQLEngine

Teradata has a special category of keywords that you can use to grant multiple privileges. For example, the following GRANT request grants both the CREATE DATABASE and DROP DATABASE privileges to user_name using the keyword DATABASE:

GRANT DATABASE on  user_name;

The following table lists this class of keywords and indicates the multiple privileges that they confer when they are granted on a user or database:

Keyword Privileges Conferred
ALL all implicit and explicit object privileges owned by the grantor WITH GRANT OPTION that pertain to the type of object specified, and only those privileges, are granted on the specified database object.
AUTHORIZATION
  • CREATE AUTHORIZATION
  • DROP AUTHORIZATION
CHECKPOINT
  • ability to execute the CHECKPOINT SQL statement.
  • ability to execute the HUT CHECKPOINT command.
DATABASE
  • CREATE DATABASE
  • DROP DATABASE
DROP
  • If the ON clause specifies FUNCTION, then the privilege granted is DROP FUNCTION.
  • If the ON clause specifies PROCEDURE, then the privilege granted is DROP PROCEDURE.
EXECUTE
  • If the ON clause specifies FUNCTION, then the privilege granted is EXECUTE FUNCTION.
  • If the ON clause specifies PROCEDURE, then the privilege granted is EXECUTE PROCEDURE.
  • If the ON specifies nothing, then the privilege granted is EXECUTE MACRO.
FUNCTION
  • CREATE FUNCTION
  • DROP FUNCTION
GLOP
  • CREATE GLOP
  • DROP GLOP
INDEX
  • CREATE INDEX
  • DROP INDEX
MACRO
  • CREATE MACRO
  • DROP MACRO
MAP
  • CREATE MAP
  • DROP MAP
PROCEDURE
  • CREATE PROCEDURE
  • DROP PROCEDURE
PROFILE
  • CREATE PROFILE
  • DROP PROFILE
RESTORE ability to execute the following HUT commands on the specified object:
  • DELETE JOURNAL
  • ROLLBACK
  • ROLLFORWARD
ROLE
  • CREATE ROLE
  • DROP ROLE
SHOW the ability to execute the following SQL statements only:
  • HELP database_object
  • SHOW database_object
STATISTICS
  • COLLECT STATISTICS
  • DROP STATISTICS
TABLE
  • CREATE TABLE
  • DROP TABLE
TRIGGER
  • CREATE TRIGGER
  • DROP TRIGGER
USER
  • CREATE USER
  • DROP USER
VIEW
  • CREATE VIEW
  • DROP VIEW