GRANT ZONE Statement | SQL Data Control Language | Teradata Vantage - GRANT ZONE - Advanced SQL Engine - Teradata Database

SQL Data Control Language

Product
Advanced SQL Engine
Teradata Database
Release Number
17.10
Published
July 2021
Language
English (United States)
Last Update
2021-07-27
dita:mapPath
sqd1591723147563.ditamap
dita:ditavalPath
sqd1591723147563.ditaval
dita:id
B035-1149
lifecycle
previous
Product Category
Teradata® Vantage™ NewSQLEngine

When using Teradata Secure Zones, grants access to a zone to users or roles that are not zone users.

GRANT ZONE does not automatically grant users access to database objects within the zone. A zone user must grant Discretionary Access Control privileges to zone guests before access is permitted.

Users and roles that are granted zone access using this syntax are called zone guests. Zone users must be created within the zone using the CREATE USER syntax.

ANSI Compliance

This statement is a Teradata extension to the ANSI SQL:2011 standard.

Required Privileges

You must be the creator of the zone to use GRANT ZONE to create zone guests.

Restricted Privileges

Zone creators cannot use GRANT ZONE syntax to make themselves guests in a zone that they created.

Only zone users can grant privileges on database objects within the zone to zone guests, but zone users cannot grant privileges on zone objects to a zone guest using the WITH GRANT OPTION.

A zone guest cannot grant access to zone objects to other users.