Managing user roles and privileges
IBM® Db2® Data Management Console uses roles to control user access to the product, and uses connection profile privileges to control user access to the connection profiles it manages.
- The Administrator and User roles control who can log in to IBM Db2 Data Management Console and the actions the user can perform within the console.
- The Connection Profile Owner and Connection Profile privileges define whether a specific console user can manage or access the specific connection profiles.
- Access to target databases
- A user ID with the User role can be assigned one of the following connection profile
privileges for each specific database:
- Connection profile owner: The user who creates a connection profile is automatically granted the connection profile owner privilege. The user can use the connection profile, and can also edit or delete the connection profile for a database. In addition, the administrator can assign connection profile owner or user privilege for the connection profile to other user IDs.
- Connection profile user: The user can use the connection profile (for example, run the SQL script on the target database) for which they have the connection profile user privilege.
Note: To enable all the users to have the privileges of all the connection profiles, go to
<dmc_home>/Config/dswebserver_override.properties and set the property
dsweb.default.profileuser.role=true.