PostgreSQL database privileges

Draft comment:
This topic only applies to BAW, and is located in the BAW repository. Last updated on 2025-01-20 10:38
Set database privileges to determine the authority that you must have to create or access your data store tables for PostgreSQL databases.

PostgreSQL manages database access permissions by using roles. A role can consist of a database user or a group of database users, depending on your role configuration.

When you create database schemas using the typical installation or database scripts that are generated using the BPMConfig command-line utility, your role ID must have the authority to create tables. When the tables are created, you must have the authority to select, insert, update, and delete information in the tables.

The minimum privileges that are required for a user ID to create objects in the database include:
  • Sufficient privilege to create relational tables and indexes.
  • ALTER, DELETE, INSERT, REFERENCES, SELECT, UPDATE and CREATE OR REPLACE PROCEDURE privileges on the created tables
The minimum privileges that are required for a user ID to access objects in the database include:
  • SELECT, INSERT, UPDATE, and DELETE privileges on the tables.
  • EXECUTE ON PROCEDURE privilege on stored procedures.
The following table describes more PostgreSQL database privileges for IBM® Business Automation Workflow components. The installation privileges are the privileges that are required to install and configure the product. The runtime privileges are the database privileges that are required to run the product.
Table 1. Detailed PostgreSQL database privileges
Component Installation and upgrade privileges Runtime privileges
Process Server
Note: Only the Process Server component applies to Workflow on containers.
CREATE TABLE, ALTER TABLE, CREATE SCHEMA, SELECT, INSERT, UPDATE TABLE, DROP TABLE, CREATE INDEX, CREATE UNIQUE INDEX, CREATE OR REPLACE PROCEDURE, REFERENCES CREATE, SELECT, UPDATE, DELETE, INSERT, CREATE PROCEDURE, DROP TABLE
Performance Data Warehouse CREATE TABLE, CREATE SCHEMA, ALTER TABLE, SELECT, INSERT, UPDATE TABLE, DROP TABLE, CREATE INDEX, CREATE UNIQUE INDEX, REFERENCES CREATE, SELECT, UPDATE, DELETE, INSERT, DROP TABLE
Content CREATE TABLE, CREATE INDEX, INSERT, CREATE SCHEMA, CREATE TABLESPACE, ALTER TABLE, SELECT, INSERT, UPDATE TABLE, DROP TABLE, TEMP, REFERENCES CREATE, SELECT, UPDATE, DELETE, INSERT, DROP TABLE
BPM document store   CREATE, SELECT, UPDATE, DELETE, INSERT, DROP TABLE