Managing user roles and privileges

IBM® Db2® Data Management Console uses roles to control user access to the product, and uses connection profile privileges to control user access to the connection profiles it manages.

  • The Administrator and User roles control who can log in to IBM Db2 Data Management Console and the actions the user can perform within the console.
  • The Connection Profile Owner and Connection Profile privileges define whether a specific console user can manage or access the specific connection profiles.
The administrator can assign these privileges from the Users and privileges page.
Access to target databases
A user ID with the User role can be assigned one of the following connection profile privileges for each specific database:
  • Connection profile owner: The user who creates a connection profile is automatically granted the connection profile owner privilege. The user can use the connection profile, and can also edit or delete the connection profile for a database. In addition, the administrator can assign connection profile owner or user privilege for the connection profile to other user IDs.
  • Connection profile user: The user can use the connection profile (for example, run the SQL script on the target database) for which they have the connection profile user privilege.
Note: To enable all the users to have the privileges of all the connection profiles, go to <dmc_home>/Config/dswebserver_override.properties and set the property dsweb.default.profileuser.role=true.