Explicit Privileges | SQL Data Control Language | VantageCloud Lake - Explicit Privileges - Teradata Vantage

Teradata® VantageCloud Lake
Deployment
VantageCloud
Edition
Lake
Product
Teradata Vantage
Published
January 2023
Language
English (United States)
Last Update
2024-04-03
dita:mapPath
phg1621910019905.ditamap
dita:ditavalPath
pny1626732985837.ditaval
dita:id
phg1621910019905
Privilege Description
Automatic When a user creates a database object, Vantage automatically grants privileges to the following:
  • The creator of the object
  • A newly created user or database
GRANT You can GRANT privileges in the following ways:
  • Directly to a user or database
  • To a role, then GRANT membership in the role to one or more users
  • To an external role, then map the role to one or more groups of directory users
Inherited A user acquires the following privileges indirectly:
  • Privileges of PUBLIC, a role-like collection of default privileges.

    You can also grant or revoke privileges for PUBLIC.

  • Privileges granted to any roles of which the user is a member.

Directory users inherit the privileges of the database users and external roles to which they are mapped.
Assigned Security constraints define user access to table rows protected by a corresponding security constraint column.
You can assign the security constraints in a CONSTRAINT object to the following:
  • User, by specifying the CONSTRAINT object in either of the following:
    • CREATE USER or MODIFY USER statement
    • CREATE PROFILE or MODIFY PROFILE statement, and then assigning the profile to the user
    Constraint OVERRIDE privileges, which allow a user to bypass row level security protection, are granted using the GRANT OVERRIDE CONSTRAINT statement.
  • Table, by defining a constraint column that is named for the CONSTRAINT object in a CREATE TABLE or ALTER TABLE statement.