Examples: Inserting Role Objects into a Roles Container - Advanced SQL Engine - Teradata Database

Security Administration

Product
Advanced SQL Engine
Teradata Database
Release Number
17.05
17.00
Published
September 2020
Language
English (United States)
Last Update
2021-01-23
dita:mapPath
ied1556235912841.ditamap
dita:ditavalPath
lze1555437562152.ditaval
dita:id
B035-1100
lifecycle
previous
Product Category
Teradata Vantageā„¢

Use the following syntax to create role objects that represent Teradata Vantage external roles and insert them into the appropriate roles container.

dn: cn=adminrole,ou=roles,ou=system1,ou=tdat,dc=domain,dc=com
objectClass: top
objectClass: groupOfNames
cn: adminrole
member:  group_dn 
-
cn=userrole,ou=roles,ou=system1,ou=tdat,dc=domain,dc=com
objectClass: top
objectClass: groupOfNames
cn: userrole
member:  group_dn 
-

where:

  • The cn for each role object must match the name of a Vantage external role.
  • At least one member attribute and associated value is required when the role object is created.
  • member_dn is either:
    • The dn of the roles container, if no individual role members are known
    • The dn of a directory group that you want to map to the role, for example:
      member: cn=administrators,ou=groups,dc=domain,dc=com