When you enable an object for AI query in the SQL Data Insights (SQL DI) UI, Db2 executes the DSNUTILU stored procedure to create a model table for the object. For the enablement to succeed, you must have the authorization to call the stored procedure and to access the source Db2 table or view that is associated with the object. Similarly, you must have the required permissions to perform other user tasks in the UI, such as running an AI query, retraining a model, and creating an object.
Note that your Db2 administrator can grant you and other users most of the required privileges for using SQL DI through the DSNTIAI4 step of the DSNTIJAI sample job. See Configuring Db2 for SQL DI and Configuring setup user ID for SQL DI for details.
Before you perform any of the following tasks, make sure that you have the required authorization:
Table 1. Required authorization for SQL DI tasks
| Task |
Required authorization |
Additional information |
| Creating or deleting a connection to Db2 |
- All privileges that can be granted in Step DSNTIAI4 of the DSNTIJAI sample job
|
|
| Adding an AI object |
- All privileges that can be granted in Step DSNTIAI4 of the DSNTIJAI sample job
|
|
| Removing an AI object |
- All privileges that can be granted in Step DSNTIAI4 of the DSNTIJAI sample job
- Privileges for dropping a table, table space, or index or specifically for dropping the vector table in Db2
|
|
| Enabling an object for AI query |
- All privileges that can be granted in Step DSNTIAI4 of the DSNTIJAI sample job
- SELECT privilege on the source Db2 table or view for the object that is being enabled for AI query
- Privileges for calling the Db2 DSNUTILU stored procedure
|
|
| Disabling an object for AI query |
- All privileges that can be granted in Step DSNTIAI4 of the DSNTIJAI sample job
- Privileges for dropping a table, table space, or index or specifically for dropping the vector table in Db2
|
|
| Running AI queries |
- SELECT privilege on the source Db2 table or view for the object
|
|
| Retraining an object model |
- All privileges that can be granted in Step DSNTIAI4 of the DSNTIJAI sample job
- SELECT privilege on the source Db2 table or view for the object whose model is being retrained
- ALTER TABLE privilege on the vector table for the object for adding a clone table
|
|
| Deploying a retrained model |
- All privileges that can be granted in Step DSNTIAI4 of the DSNTIJAI sample job
- INSERT and DELETE privileges on the vector table and the clone table for the object
|
|
| Viewing the details of an object model |
- All privileges that can be granted in Step DSNTIAI4 of the DSNTIJAI sample job
- SELECT privilege on the source Db2 table or view for the object
|
|
| Analyzing data |
- All privileges that can be granted in Step DSNTIAI4 of the DSNTIJAI sample job
- SELECT privilege on the source Db2 table or view for the object
|
|