Database privileges

Use database privileges to determine the authority required to create or access your data store tables for each supported database management system.

The following table lists the database privileges that the user ID must have to access the data store.

Table 1. Database Privileges required
Database management system Minimum privilege required to use the data store tables Additional privilege required to create the data store tables
DB2® and DB2 Express The user ID must have SELECT, INSERT, UPDATE, and DELETE privileges on the tables. The user ID must have CREATETAB, CREATE PROCEDURE, and CREATE ANY SEQUENCE authority on the database, and USE privilege on the table space, as well as CREATEIN privilege on the schema.

The user ID also must have EXECUTE privileges on the ENCSUBJ, ENCGRAPH, ENCOBJ, CHKSTD, CRTST, UPDST, and DELST stored procedures.

DB2 for z/OS® The user ID must have SELECT, INSERT, UPDATE, and DELETE privileges on the tables. The user ID must have CREATETAB, CREATE PROCEDURE, and CREATE ANY SEQUENCE authority on the database and USE privilege on the table space, as well as CREATEIN privilege on the schema.

The user ID also must have EXECUTE privileges on the ENCSUBJ, ENCGRAPH, ENCOBJ, CHKSTD, CRTST, UPDST, and DELST stored procedures.

Oracle The user ID must have at least SESSION privilege to connect to the database. If the same user ID owns both the data store schema and the component that is connecting to the database, the user ID has sufficient privilege to manipulate the tables. Otherwise, the user ID must have SELECT, INSERT, UPDATE and DELETE object privileges on the tables that make up the data store, and the authority to create triggers. The user ID requires sufficient privilege to create relational tables and indexes in the data store schema. The database also requires a space quota in the default table space of the owner of that schema.

Additional privileges for the Service Integration Bus tables: SELECT, UPDATE, DELETE, INSERT, DROP ANY TABLE

The user ID also must have EXECUTE privileges on the ENCSUBJ, ENCGRAPH, ENCOBJ, CHKSTD, CRTST, UPDST, and DELST stored procedures.

SQL Server Configure the SQL Server for SQL Server and Windows authentication. This allows authentication to be based on an SQL server login ID and password. The user ID must be the owner of the tables. The user ID must have CREATE TABLE, CREATE PROCEDURE, and CREATE ANY SEQUENCE privileges.
Note: You must also refer to the Database privileges topic in the WebSphere® Application Server information center for details of the privileges required to access the Service Integration Bus database tables. In particular, these include TRUNCATE TABLE authority if you are using an Oracle or SQL Server database.