16.10 - Assigning Security Constraints in a CREATE USER Statement - Teradata Database

Teradata Database Security Administration

Product
Teradata Database
Release Number
16.10
Release Date
June 2017
Content Type
Administration
Security
Publication ID
B035-1100-161K
Language
English (United States)

Use the CREATE USER statement to assign security constraints to a new user. For example:

CREATE USER
   Joe_Smith AS PERM = 1e6, PASSWORD=JoePassword,
   CONSTRAINT = Classification_Level (Secret, Unclassified DEFAULT),
   CONSTRAINT = Classification_Country (US, UK, GER);

where:

Syntax Element Description
Classification_Level (Secret, Unclassified DEFAULT) Names a hierarchical security CONSTRAINT object and assigns the applicable name:value pairs (levels) according to user needs. In this example the user has two classification levels:
  • The Unclassified level (default), allows the user to INSERT new rows without automatically classifying them as secret.
  • The user can also use SET SESSION CONSTRAINT to assume the Secret level, to read highly classified rows.
Classification_Country (US, UK, GER) Names a non-hierarchical security CONSTRAINT object and assigns the applicable name:value pairs (compartments) to the user. In this example the user is from the US, but also coordinates operations with the UK and Germany.
A new or changed security constraint assignment takes effect at the next user logon.