Explicit database privileges
You can explicitly grant privileges on databases.
Db2 supports the following database privileges:
| Database privilege | Operations allowed on a named database |
|---|---|
| CREATETAB | The CREATE TABLE statement, to create tables in the database. |
| CREATETS | The CREATE TABLESPACE statement, to create table spaces in the database |
| DISPLAYDB | The DISPLAY DATABASE command, to display the database status |
| DROP | The DROP and ALTER DATABASE statements, to drop or alter the database |
| IMAGCOPY | The QUIESCE, COPY, and MERGECOPY utilities, to prepare for, make, and merge copies of table spaces in the database; the MODIFY RECOVERY utility, to remove records of copies |
| LOAD | The LOAD utility, to load tables in the database |
| RECOVERDB | The RECOVER, REBUILD INDEX, and REPORT utilities, to recover objects in the database and report their recovery status |
| REORG | The REORG utility, to reorganize objects in the database |
| REPAIR | The REPAIR and DIAGNOSE utilities (except REPAIR DBD and DIAGNOSE WAIT) to generate diagnostic information about, and repair data in, objects in the database |
| STARTDB | The START DATABASE command, to start the database |
| STATS | The RUNSTATS, CHECK, LOAD, REBUILD INDEX, REORG INDEX, and REORG TABLESPACE, and MODIFY STATISTICS utilities, to gather statistics, check indexes and referential constraints for objects in the database, and delete unwanted statistics history records from the corresponding catalog tables |
| STOPDB | The STOP DATABASE command, to stop the database |
Database privileges that are granted on DSNDB04 apply to all implicitly created databases. For example, if you have the DBADM authority on DSNDB04, you can select data from any table in any implicitly created database. If you have the STOPDB privilege on DSNDB04, you can stop any implicitly created database. However, you cannot grant the same authorities or privileges to others on any implicitly created database.
