Permanent Proxy Users - Teradata Vantage

Teradata® VantageCloud Lake

Deployment
VantageCloud
Edition
Lake
Product
Teradata Vantage
Published
January 2023
ft:locale
en-US
ft:lastEdition
2024-12-11
dita:mapPath
phg1621910019905.ditamap
dita:ditavalPath
pny1626732985837.ditaval
dita:id
phg1621910019905

A permanent proxy user is an existing permanent user who is defined to Vantage. A GRANT CONNECT THROUGH request validates that a permanent proxy user who is specified in that request exists in Vantage. The anticipated use of permanent proxy users is for intranet-type middle tier applications that, for example, may display employee pay stubs or information about available vacation time.

Vantage assigns the name of the permanent proxy user as the creator of any objects created while the proxy connection is in effect.

You cannot have duplicate application and permanent proxy user names for the same trusted user. For example, consider the following GRANT CONNECT THROUGH requests submitted in the order indicated:

GRANT CONNECT THROUGH crm TO PERMANENT mary WITHOUT ROLE;
GRANT CONNECT THROUGH crm TO mary WITH ROLE hr_role;

The second request returns a duplicate proxy user name error because the permanent proxy user named mary already exists as granted through trusted user crm.

The roles that can be set for a permanent proxy user in a proxy connection are different depending on the WITH ROLES clause in the GRANT CONNECT THROUGH request, as listed in the following table.

GRANT CONNECT THROUGH Request Result
WITH ROLE
  • All role names you specify are active in the proxy connection by default.

    The roles in the WITH ROLE clause need not be granted directly to the user. The GRANT CONNECT THROUGH request grants this privilege by default.

  • Specified roles are the only roles that can be set for the proxy connection.
  • Setting the current role to NONE or NULL in the proxy connection is not permitted.
  • Privileges for the proxy connection are those for its active roles and PUBLIC.
WITHOUT ROLE
  • Default role for the proxy connection is the default role defined for the permanent user.
  • Roles that can be set for the proxy connection are restricted to those granted to the user.

    Role in the proxy connection can also be set to NONE or NULL.

  • Privileges for the proxy connection are those granted to the permanent user, its active roles, and PUBLIC.