Row-Level Security | Teradata Vantage - About Row-Level Security - Advanced SQL Engine - Teradata Database

Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.05
17.00
Published
September 2020
Language
English (United States)
Last Update
2021-01-23
dita:mapPath
ied1556235912841.ditamap
dita:ditavalPath
lze1555437562152.ditaval
dita:id
B035-1100
lifecycle
previous
Product Category
Teradata Vantageā„¢

Access to Teradata Vantage objects is controlled primarily by object level user privileges. Object level privileges are discretionary, that is, object owners automatically have the right to grant access on any owned object to any other user.

In addition to object level privileges, you can use row level security (RLS) to control user access by table row and by SQL operation. RLS access rules are based on the comparison of the RLS access capabilities of each user and the RLS access requirements for each row.

Object owners do not have discretionary privileges to grant row access to other users. Only users with security constraint administrative privileges can manage row level access controls.

When multiple Vantage systems are managed by Unity, the same row level security constraints and access privileges should exist on all database systems.