Support for global groups (Windows)

The Db2® database system supports global groups.

To use global groups, you must include global groups inside a local group. When the Db2 database manager enumerates all the groups that a person is a member of, it also lists the local groups that the user is a member of indirectly (by the virtue of being in a global group that is itself a member of one or more local groups).

Global groups are used in two possible situations:

• Included inside a local group. Permission must be granted to this local group.
• Included on a domain controller. Permission must be granted to the global group.