Topic
  • 8 replies
  • Latest Post - ‏2013-02-14T09:07:53Z by nivanov1
Turbo
Turbo
5 Posts

Pinned topic Can I use DB2 without admin privileges?

‏2013-02-04T01:36:47Z |
Is it possible to use DB2 without administrator privileges?
In my current environment, we can ask PC administrators who have administrator privileges to install software but we can't use administrator privileges by our selves. In such circumstances, is it practical to use DB2?
We want to create database, tables and so on without asking PC administrators to do so.

If it is possible, how can we make it possible?
Updated on 2013-02-14T09:07:53Z at 2013-02-14T09:07:53Z by nivanov1
  • nivanov1
    nivanov1
    53 Posts

    Re: Can I use DB2 without admin privileges?

    ‏2013-02-04T15:21:27Z  
    Yes it is of course possible. Ask your system admins to enable Windows extended security option during the DB2 installation and add your user ID to the local group DB2ADMNS, which won't change your Windows permissions but will let you administer the DB2 instance and its databases.
  • Turbo
    Turbo
    5 Posts

    Re: Can I use DB2 without admin privileges?

    ‏2013-02-05T02:23:20Z  
    • nivanov1
    • ‏2013-02-04T15:21:27Z
    Yes it is of course possible. Ask your system admins to enable Windows extended security option during the DB2 installation and add your user ID to the local group DB2ADMNS, which won't change your Windows permissions but will let you administer the DB2 instance and its databases.
    Thanks an advice!!

    I re-installed and create DB2ADMNS user group and add my id to the group.
    But when I connect to sample through Data Studio, I can't see any options such as viewing tables or creating ones.
    Do I need to do something to Data Studio too?
  • nivanov1
    nivanov1
    53 Posts

    Re: Can I use DB2 without admin privileges?

    ‏2013-02-07T14:52:43Z  
    • Turbo
    • ‏2013-02-05T02:23:20Z
    Thanks an advice!!

    I re-installed and create DB2ADMNS user group and add my id to the group.
    But when I connect to sample through Data Studio, I can't see any options such as viewing tables or creating ones.
    Do I need to do something to Data Studio too?
    If you created the sample database while logged in with your ID, you should have all necessary privileges to use it. If it is the administrator that created it, he or she should grant you the privileges. You can also try dropping the sample database and creating a new one using your ID.
  • Turbo
    Turbo
    5 Posts

    Re: Can I use DB2 without admin privileges?

    ‏2013-02-12T08:04:55Z  
    • nivanov1
    • ‏2013-02-07T14:52:43Z
    If you created the sample database while logged in with your ID, you should have all necessary privileges to use it. If it is the administrator that created it, he or she should grant you the privileges. You can also try dropping the sample database and creating a new one using your ID.
    Thanks for your comment.
    I could drop sample db but I can't create it from the DB2 first step UI.
    I got SQL1092N error.

    My ID is included DB2ADMNS group but windows administrator privileges are removed now.
    My ID is not local id but it is domain id. Do I need windows admin privileges if the ID is domain id?

    Thanks,
  • nivanov1
    nivanov1
    53 Posts

    Re: Can I use DB2 without admin privileges?

    ‏2013-02-12T18:04:19Z  
    • Turbo
    • ‏2013-02-12T08:04:55Z
    Thanks for your comment.
    I could drop sample db but I can't create it from the DB2 first step UI.
    I got SQL1092N error.

    My ID is included DB2ADMNS group but windows administrator privileges are removed now.
    My ID is not local id but it is domain id. Do I need windows admin privileges if the ID is domain id?

    Thanks,
    Did you set DB2_GRP_LOOKUP as explained below?

    http://pic.dhe.ibm.com/infocenter/db2luw/v10r1/topic/com.ibm.db2.luw.admin.sec.doc/doc/c0055077.html
  • nivanov1
    nivanov1
    53 Posts

    Re: Can I use DB2 without admin privileges?

    ‏2013-02-12T18:05:32Z  
    • nivanov1
    • ‏2013-02-12T18:04:19Z
    Did you set DB2_GRP_LOOKUP as explained below?

    http://pic.dhe.ibm.com/infocenter/db2luw/v10r1/topic/com.ibm.db2.luw.admin.sec.doc/doc/c0055077.html
    The above must be set at the system level, not the user level, and the DB2 service restarted to pick up the change.
  • Turbo
    Turbo
    5 Posts

    Re: Can I use DB2 without admin privileges?

    ‏2013-02-13T05:59:01Z  
    • nivanov1
    • ‏2013-02-12T18:05:32Z
    The above must be set at the system level, not the user level, and the DB2 service restarted to pick up the change.
    Thanks for your quick response!!

    I issued the command below when I had Windows Admin privileges.

    db2set DB2_GRP_LOOKUP=LOCAL,TOKENLOCAL
    db2 update dbm cfg using SYSADM_GROUP=DB2ADMNS
    db2 update dbm cfg using SYCTRL_GROUP=DB2ADMNS
    db2 update dbm cfg using SYSMAINT_GROUP=DB2ADMNS
    db2 update dbm cfg using SYSMON_GROUP=DB2ADMNS

    >The above must be set at the system level, not the user level, and the DB2 service restarted to pick up the change.

    How can I make sure it is at the system level?
    I opened the command window for admin, then issued the command without connecting any database.
    Then, I restarted the computer.
    Should I do something else between?
  • nivanov1
    nivanov1
    53 Posts

    Re: Can I use DB2 without admin privileges?

    ‏2013-02-14T09:07:53Z  
    • Turbo
    • ‏2013-02-13T05:59:01Z
    Thanks for your quick response!!

    I issued the command below when I had Windows Admin privileges.

    db2set DB2_GRP_LOOKUP=LOCAL,TOKENLOCAL
    db2 update dbm cfg using SYSADM_GROUP=DB2ADMNS
    db2 update dbm cfg using SYCTRL_GROUP=DB2ADMNS
    db2 update dbm cfg using SYSMAINT_GROUP=DB2ADMNS
    db2 update dbm cfg using SYSMON_GROUP=DB2ADMNS

    >The above must be set at the system level, not the user level, and the DB2 service restarted to pick up the change.

    How can I make sure it is at the system level?
    I opened the command window for admin, then issued the command without connecting any database.
    Then, I restarted the computer.
    Should I do something else between?
    > Then, I restarted the computer.
    > Should I do something else between?

    Don't think so. Try "db2set -all" to verify that the setting is in effect.