Switching Roles During a Session | Teradata Vantage - 17.10 - Switching Roles During a Session - Advanced SQL Engine - Teradata Database

Teradata Vantage™ - Advanced SQL Engine Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.10
Published
July 2021
Language
English (United States)
Last Update
2022-02-15
dita:mapPath
ppz1593203596223.ditamap
dita:ditavalPath
wrg1590696035526.ditaval
dita:id
zuy1472246340572
Each permanent database user has a default role that is active for every user session. Users have access to other roles to which they have membership using the following requests:
  • SET ROLE role_name activates a specific role
  • SET ROLE ALL. activates all roles

Directory users, including auto provisioned directory users, can also use the SET ROLE role_name or SET ROLE ALL request to enable their mapped permanent user roles in addition to their external roles.

After changing the active role for a session, directory users can revert back to the initial set of directory-assigned roles by issuing a new request, SET ROLE EXTERNAL.

When a directory user has a large number of role mappings, the user can enhance performance by selecting a single role, using the SET ROLE role_name request, so the system does not have to authorize all the role privileges for the user.