User Types and Required Privileges | Teradata VantageCloud Lake - User Types and Minimum Required Privileges - Teradata Vantage

Teradata® VantageCloud Lake
Deployment
VantageCloud
Edition
Lake
Product
Teradata Vantage
Published
January 2023
ft:locale
en-US
ft:lastEdition
2024-12-11
dita:mapPath
phg1621910019905.ditamap
dita:ditavalPath
pny1626732985837.ditaval
dita:id
phg1621910019905

The following table describes the minimal privileges required by the three basic user types.

User Type Privilege Requirements
General Database end-users who typically read data and run macros in a read-only Views database.
Assign the following privileges on a read-only Views database to all General users:
  • EXECUTE
  • SELECT

The read-only Views database must have privileges on the Tables_Database, as shown in Working with Table Access Privileges for Views.
Update Privileged database users who update data typically require the following privileges:
Privileges required on a read-only Views database:
  • EXECUTE
  • SELECT
  • CREATE VIEW and DROP VIEW
  • CREATE MACRO and DROP MACRO
Privileges required on an updatable Views database:
  • EXECUTE
  • SELECT
  • INSERT, UPDATE, and DELETE
  • EXECUTE PROCEDURE
  • EXECUTE FUNCTION
  • CREATE VIEW and DROP VIEW
  • CREATE MACRO and DROP MACRO
Additional recommended privileges on an updatable Views database for database programmers:
  • SHOW
  • ALTER, CREATE, and DROP FUNCTION
  • CREATE TRIGGER and DROP TRIGGER

To provide update capability on views, you must grant the updatable Views database SELECT, INSERT, UPDATE, DELETE WITH GRANT OPTION privileges on the referenced tables in the Tables_Database, as shown in Working with Table Access Privileges for Views.
Batch Data movers, who typically perform batch-level functions, such as:
  • Batch data load, update, and export operations.
  • Data backup, archive, and restore operations, including creating and deleting staging tables.
Batch users must have the following privileges on the Tables_Database:
  • SELECT
  • INSERT, UPDATE, DELETE
  • DUMP and RESTORE
  • CHECKPOINT
  • CREATE TABLE and DROP TABLE
Assistant Administrators Assistant administrators who share administrative duties may require the privileges granted to DBADMIN, or a subset of those privileges. Use the procedure in Setting Up the Database Administrator User to create assistant administrators and grant the needed privileges.
Database Programmers Database programmers may require administrator-level privileges within the development database to be able to create and test database objects. Administrators can then deploy the objects to the production database.