DATAACCESS administrative authority

The DATAACCESS authority allows you to access and update data in user tables, views, and materialized query tables in a Db2 subsystem. It also allows you to execute plans, packages, functions, and procedures.

Only an authorization ID or a role with the SECADM authority can grant or revoke the DATAACCESS authority. With the DATAACCESS authority, you have implicit SELECT access on all catalog tables and implicit INSERT, DELETE, and UPDATE privileges on updatable catalog tables (except SYSIBM.SYSAUDITPOLICIES).

The following tables summarizes any included authorities, and privileges held and grantable to others, by the DATACCESS administrative authority.

Table 1. Included authorities and grantable privileges for DATAACCESS authority
Included authorities None
Additional grantable privileges System privileges:
DEBUGSESSION
Privileges on all user tables, views, and MQTs:
DELETE  INSERT  SELECT  UPDATE
Privileges on all plans, packages, and routines:
EXECUTE
Privileges on all user databases:
LOAD  RECOVERDB  REORG  REPAIR
Privileges on all JARs:
USAGE
Privileges on all sequences:
USAGE
Privileges on all distinct types:
USAGE
Privileges on all catalog tables:
SELECT
Privileges on updatable catalog tables (except SYSIBM.SYSAUDITPOLICIES):
DELETE  INSERT  UPDATE