16.20 - GRANT ZONE - Teradata Vantage NewSQL Engine

Teradata Vantageā„¢ SQL Data Control Language

prodname
Teradata Database
Teradata Vantage NewSQL Engine
vrm_release
16.20
created_date
March 2019
category
Programming Reference
featnum
B035-1149-162K

Purpose

When using Teradata Secure Zones, grants access to a zone to users or roles that are not zone users.

GRANT ZONE does not automatically grant users access to database objects within the zone. A zone user must grant Discretionary Access Control privileges to zone guests before access is permitted.

Users and roles that are granted zone access using this syntax are called zone guests. Zone users must be created within the zone using the CREATE USER syntax.

Required Privileges

You must be the creator of the zone to use GRANT ZONE to create zone guests.

Restricted Privileges

Zone creators cannot use GRANT ZONE syntax to make themselves guests in a zone that they created.

Only zone users can grant privileges on database objects within the zone to zone guests, but zone users cannot grant privileges on zone objects to a zone guest using the WITH GRANT OPTION.

A zone guest cannot grant access to zone objects to other users.

Syntax

Syntax Elements

zone_name
the name of the zone. You can specify up to 25 names in a comma-separated list.
The zone must already exist.
user_name
role_name
the name of the user or the role. You can specify up to 25 names in a comma-separated list.
Zone guests can only be users or roles. The users or roles must already exist outside the zone.
You cannot make a user or a role in another zone into a zone guest.