IBM PureData System for Analytics, Version 7.1

Access model

Develop an access model for your IBM® Netezza® appliance. An access model is a profile of the users who require access to the Netezza system and the permissions or tasks that they need.

Typically, an access model begins modestly, with a few users or groups, but it often grows and evolves as new users are added to the system. The model defines the users, their roles, and the types of tasks that they perform, or the databases to which they require access.

Access models can vary widely for each company and environment. As a basic example, you can develop an access model that defines three initial groups of database users:

Administrators: Users who are responsible for managing various tasks and services. They might manage specific databases, manage user access, create databases, load data, or back up and restore databases.
General database users: Users who are allowed access to one or more databases for querying, and who might or might not have access to manage objects in the database. These users might also have lower priority for their work.
Power database users: Users who require access to critical databases and who might use more complex SQL queries than the general users. These users might require higher priority for their work. They might also have permissions for tasks such as creating database objects, running user-defined objects (UDXs), or loading data.

The access model serves as a template for the users and groups that you create, and also provides a map of access permission needs. By creating Netezza database groups to represent these roles or permission sets, you can easily assign users to the groups to inherit the various permissions, you can change all the users in a role by changing only the group permissions, and move users from one role to another by changing their groups, or by adding them to groups that control those permissions.