Managing user access to Db2 Data Gate

As an administrator or creator of a Db2 Data Gate instance, you can give other Cloud Pak for Data users access to the instance.

Before you begin

  • To give another user access to a Db2 Data Gate instance, you must be an administrator of that instance.
  • A user can only be given access to a Db2 Data Gate instance if the user exists on Cloud Pak for Data. To create a not yet existing Cloud Pak for Data user, you must be a Cloud Pak for Data administrator. Follow these steps:
    1. Click Cloud Pak for Data main menu icon to open the Cloud Pak for Data main menu.
    2. Select Administration > Access control. You see a list of the existing Cloud Pak for Data users.
    3. Click the Add users button above the list.
    4. Provide the details of the new user and click Add when finished.

About this task

A user with access to a Db2 Data Gate instance can have the following access privileges to the instance. The privileges are grouped in sets called roles.
Admin
An administrator of a Db2 Data Gate instance can:
  • View the details of the instance
  • Modify the instance (for example, make changes to the data source or add tables)
  • Manage access to the instance (give access to other users or change their roles with regard to the instance
  • Delete the instance
User
A Db2 Data Gate instance user can:
  • View the details of the instance
  • Modify the instance (for example, make changes to the data source or add tables)

A user cannot delete instances. Neither can an instance user give other users access to the instance or change their roles.

The privileges associated with these roles are entirely independent of the privileges associated with the basic roles on Cloud Pak for Data.

For example, a user with an administrator role on Cloud Pak for Data might only be allowed to carry out user tasks on the Db2 Data Gate instance.

On the contrary, a Cloud Pak for Data user might have administrative privileges on a Db2 Data Gate instance.

Procedure

To give a Cloud Pak for Data user access to a Db2 Data Gate instance or change a user's role with regard to the instance:

  1. Click Cloud Pak for Data main menu icon to open the Cloud Pak for Data main menu.
  2. Select Services > Instances.
    You see the Instances page. The Instances tab is in front. Your instances are listed in a table.
  3. Move your mouse pointer to the table row that represents the instance you want to work on. Move the mouse pointer to the very right of that row until a menu icon comes into view (Drop-down menu on instances table on My instances page.).
  4. Click the icon (Drop-down menu on instances table on My instances page.) and select Manage access.
  5. On the Access management page, you see the users with access to the instance listed in a table.
  6. Depending on what you want to do, follow one of the following procedures:
    • To give an additional user access to your instance:
      1. Click Add users.
      2. On the Grant access to users page, select one or more users by selecting the check boxes in front of the user names. The check boxes of users that already have access are grayed out. Selecting the check box on the table header, you can select all available users.

        If the list is long, you can search for a particular user by entering the user name or a part of it in the Find users and user groups field above the table.

      3. From the Choose a role drop-down menu that is available on each user row in the table, select the access privileges (role) of the user you want to add:
        • Admin
        • User

        For information about these roles, see the About this task section above.

      4. Click Add.
    • To change the access privileges (role) of a user with access to your instance:
      1. Locate the table row representing the user whose access privileges you want to change.
      2. The Service Role column shows the user's current role. Click the Drop-down icon icon next to that role to open the related menu.
      3. Select the new access privileges (role) of the user, that is, one of the following:
        • Admin
        • User

      For information about these roles, see the About this task section above.

    • To remove a user's access to your instance:
      1. On the Access management page, move your mouse pointer to the appropriate row in the list of users (table).
      2. Click the Remove icon (trash can) on the very right of that row.
      3. Confirm by clicking Remove in the Remove this user window.