Granting Multiple Privileges with a Single Keyword | VantageCloud Lake - Granting Multiple Privileges with a Single Keyword - Teradata Vantage

Teradata® VantageCloud Lake
Deployment
VantageCloud
Edition
Lake
Product
Teradata Vantage
Published
January 2023
Language
English (United States)
Last Update
2024-04-03
dita:mapPath
phg1621910019905.ditamap
dita:ditavalPath
pny1626732985837.ditaval
dita:id
phg1621910019905

Teradata has a special category of keywords that you can use to grant multiple privileges. For example, the following GRANT request grants both the CREATE DATABASE and DROP DATABASE privileges to user_name using the keyword DATABASE:

GRANT DATABASE on user_name;

The following table lists keywords in this category and the privileges conferred when granted on a user or database:

Keyword Privileges Conferred
ALL All implicit and explicit object privileges owned by the grantor WITH GRANT OPTION that pertain to the type of object specified, and only those privileges, are granted on the specified database object.
AUTHORIZATION
  • CREATE AUTHORIZATION
  • DROP AUTHORIZATION
CHECKPOINT
  • Ability to run the CHECKPOINT SQL statement.
  • Ability to run the HUT CHECKPOINT command.
DATABASE
  • CREATE DATABASE
  • DROP DATABASE
DROP
  • If the ON clause specifies FUNCTION, then the privilege granted is DROP FUNCTION.
  • If the ON clause specifies PROCEDURE, then the privilege granted is DROP PROCEDURE.
EXECUTE
  • If the ON clause specifies FUNCTION, the privilege granted is EXECUTE FUNCTION.
  • If the ON clause specifies PROCEDURE, the privilege granted is EXECUTE PROCEDURE.
  • If the ON specifies nothing, the privilege granted is EXECUTE MACRO.
FUNCTION
  • CREATE FUNCTION
  • DROP FUNCTION
GLOP
  • CREATE GLOP
  • DROP GLOP
INDEX
  • CREATE INDEX
  • DROP INDEX
MACRO
  • CREATE MACRO
  • DROP MACRO
MAP
  • CREATE MAP
  • DROP MAP
PROCEDURE
  • CREATE PROCEDURE
  • DROP PROCEDURE
PROFILE
  • CREATE PROFILE
  • DROP PROFILE
RESTORE ability to run the following HUT commands on the specified object:
  • DELETE JOURNAL
  • ROLLBACK
  • ROLLFORWARD
ROLE
  • CREATE ROLE
  • DROP ROLE
SHOW the ability to run the following SQL statements only:
  • HELP database_object
  • SHOW database_object
STATISTICS
  • COLLECT STATISTICS
  • DROP STATISTICS
TABLE
  • CREATE TABLE
  • DROP TABLE
TRIGGER
  • CREATE TRIGGER
  • DROP TRIGGER
USER
  • CREATE USER
  • DROP USER
VIEW
  • CREATE VIEW
  • DROP VIEW