Authorizing access to the Db2ZAI user interface and features for target connections

Any user ID can log into the Db2ZAI user interface, but only IDs that have been granted the necessary privileges will be authorized to use the Db2ZAI functionality.

Before you begin

Note: An ID with Db2ZAI target catalog administrator (COYGPADM) privileges is required to grant the privileges in the following jobs: COYGPSQL, COYGPDCC, and COYGPSA.
Note: An ID with Db2ZAI system DBADM (or higher) privileges is required to grant the privileges in the following jobs: COYGPSQ2, COYGPDC2, and COYGPSA2.

About this task

For Target connections:
SQL optimization administrators

These users can issue the start, stop, and display ML commands, stop and start a Db2® trace, view SQL optimization-related content, view and modify SQL optimization settings, lock and unlock access path plans, include and exclude static packages and dynamic statements from scope, and modify the clean-up scheduler settings to clean up SQL optimization tables.

SQL optimization administrator privileges are granted by the COYGMUSR job on the metadata Db2 and the COYGPSQL and COYGPSQ2 jobs on the target Db2 system.

SQL optimization users (non-administrators)

These users can view all SQL optimization-related content, including the SQL optimization settings.

SQL optimization non-administrator privileges are granted by the COYGMUSR job on the metadata Db2 and the COYGPSQL job on the target Db2 system.

SQL optimization read-only users

These users can view all SQL optimization-related content, including SQL optimization settings, but they are not able to use or modify the SQL optimization features.

SQL optimization read-only privileges are granted by the COYGMURO job on the metadata Db2 system and the COYGPSQR job on the target Db2 system.

Distributed connection control administrators

These users can issue the start, stop, and display ML commands, stop and start Db2 traces, stop and start a Db2 profile, view all DCC-related content, modify DCC settings, create, modify, activate, and deactivate DCC training, and view and modify the clean-up scheduler for DCC tables.

Distributed connection control administrator privileges are granted by the COYGMUSR job on the metadata Db2 system and the COYGPDCC and COYGPDC2 jobs on the target Db2 system.

Distributed connection control users (non-administrators)

These users can view all DCC-related content, including DCC settings, and can create, modify and delete DCC training, and modify a DCC profile (but not activate or deactivate a profile).

Distributed connection control user privileges are granted by the COYGMUSR job on the metadata Db2 system and the COYGPDCC job on the target Db2 system.

Distributed connection control read-only users

These users can view all DCC-related content, including DCC settings, but they are not able to use or modify the DCC functions.

Distributed connection control read-only user privileges are granted by the COYGMURO job on the metadata Db2 system and the COYGPDCR job on the target Db2 system.

System assessment and Performance insights administrators

These users can issue the start, stop and display ML commands, and stop and start a Db2 trace, view SA-related and PI-related content, create new assessments, create and modify SA training, and schedule SA assessments. For target connections, these users can also .

System assessment and Performance insights administration privileges are granted by the COYGMUSR job on the metadata Db2 system.

System assessment and Performance insights administration privileges are granted by the COYGPSA and COYGPSA2 jobs on the target Db2 system.

System assessment and Performance insights users (non-administrators)

Non-administrator users for target connections can view all SA-related and PI-related content (including SA settings) and create new assessments. They cannot create or modify SA training or system assessment schedules.

System assessment and performance insights user privileges are granted by the COYGMUSR job on the metadata Db2 system and the COYGPSA job on the target Db2 system.

System assessment and Performance insights read-only users

Read-only users for target connections can view all SA-related and PI-related content (including SA settings), but they are not able to use or modify the SA functions.

System assessment and performance insights read-only user privileges are granted by the COYGMURO job on the metadata Db2 system and the COYGPSAR job on the target Db2 system.

For Imported data connections:
System assessment and Performance insights administrators

These users can view SA-related and PI-related content, create new assessments, create and modify SA training, and schedule SA assessments.

System assessment and Performance insights administration privileges are granted by the COYGMUSR job on the metadata Db2 system.

For imported data connections, System assessment and Performance insights administration privileges are granted by the COYGISA job on the not-connected target Db2 system.

See User types and roles for more information about the various Db2ZAI user types.

Procedure

To authorize user access to the Db2ZAI user interface features:

Run the following jobs to grant a user the privileges needed to access and modify Db2ZAI user interface features for target connections.

  • To grant access to the Db2ZAI SQL optimization feature, customize and run the following jobs:
    • For SQL optimization administrators, the privileges granted by COYGMUSR, COYGPSQL, and COYGPSQ2.
    • For regular users (non-administrators), the privileges granted by COYGMUSR and COYGPSQL.
    • (Optional) For read-only users, the privileges granted by COYGMURO and COYGPSQR.
  • To grant access to the Db2ZAI Distributed connection control feature (DCC), customize and run the following jobs:
    • For Distributed connection control administrators, the privileges granted by COYGMUSR, COYGPDCC, and COYGPDC2.
    • For regular users (non-administrators), the privileges granted by COYGMUSR and COYGPDCC.
    • (Optional) For read-only users, the privileges granted by COYGMURO and COYGPDCR.
  • To grant access to the Db2ZAI System assessment (SA) and Performance insights (PI) features, customize and run the following jobs:
    • For target connection System assessment administrators, the privileges granted by COYGMUSR, COYGPSA, and COYGPSA2.
    • For regular users (non-administrators), the privileges granted by COYGMUSR and COYGPSA.
    • (Optional) For read-only users, the privileges granted by COYGMURO and COYGPSAR.