Authorization IDs and roles

You can control access to Db2 objects by assigning privileges and authorities to an authorization ID or a role.

Authorization IDs
Every process that connects to or signs on to Db2 is represented by one or more Db2 short identifiers (IDs), which are called authorization IDs. Authorization IDs are assigned to a process by default procedures or by user-written exit routines.
Roles in a trusted context
A role is a database entity that groups one or more privileges together in a trusted context. System administrators can use roles to control access to enterprise objects in a way that parallels the structure of the enterprise.

Parent topic: Managing access through authorization IDs and roles