SYSCAT.SURROGATEAUTHIDS catalog view

Each row represents a user or a group that has been granted SETSESSIONUSER privilege on a user or PUBLIC.

Table 1. SYSCAT.SURROGATEAUTHIDS Catalog View
Column Name Data Type Nullable Description
GRANTOR VARCHAR (128)   Authorization ID that granted TRUSTEDID the ability to act as a surrogate. When the TRUSTEDID represents a trusted context object, this field represents the authorization ID that created or altered the trusted context object.
TRUSTEDID VARCHAR (128)   Identifier for the entity that is trusted to act as a surrogate.
TRUSTEDIDTYPE CHAR (1)  
  • C = Trusted context
  • G = Group
  • U = User
SURROGATEAUTHID VARCHAR (128)   Surrogate authorization ID that can be assumed by TRUSTEDID. 'PUBLIC' indicates that TRUSTEDID can assume any authorization ID.
SURROGATEAUTHIDTYPE CHAR (1)  
  • G = Group
  • U = User
AUTHENTICATE CHAR (1)  
  • N = No authentication is required
  • Y = Authentication token is required with the authorization ID to authenticate the user before the authorization ID can be assumed
  • Blank = TRUSTEDIDTYPE is not 'C'
CONTEXTROLE VARCHAR (128) Y A specific role to be assigned to the assumed authorization ID, which supercedes the default role, if any, that is defined for the trusted context. Null value when TRUSTEDIDTYPE is not 'C'.
GRANT_TIME TIMESTAMP   Time at which the grant was made .