SYSDBAUTH catalog table

The SYSDBAUTH table records the privileges that are held by users over databases. The schema is SYSIBM.

Table 1. SYSIBM.SYSDBAUTH table column descriptions
Column name Data type Description Use
GRANTOR
VARCHAR(128)
NOT NULL
Authorization ID or role of the user who granted the privileges. Could also be PUBLIC. G
GRANTEE
VARCHAR(128)
NOT NULL
Application ID of the user who holds the privilege. Could also be PUBLIC for a grant to PUBLIC. G
NAME
VARCHAR(24)
NOT NULL
Database name. G
CHAR(12)
NOT NULL
Internal use only. I
DATEGRANTED
CHAR(6)
NOT NULL
Not used. N
TIMEGRANTED
CHAR(8)
NOT NULL
Not used. N
GRANTEETYPE
CHAR(1)
NOT NULL WITH
DEFAULT
Indicates the type of grantee:
blank
Authorization ID
L
Role
G
AUTHHOWGOT
CHAR(1)
NOT NULL
Authorization level of the user from whom the privileges were received. This authorization level is not necessarily the highest authorization level of the grantor.
blank
Not applicable
C
DBCTRL
D
DBADM
E
SECADM
G
ACCESSCTRL
L
SYSCTRL
M
DBMAINT
S
SYSADM
G
CREATETABAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE can create tables within the database:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
CREATETSAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE can create table spaces within the database:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
DBADMAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE has DBADM authority over the database:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
DBCTRLAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE has DBCTRL authority over the database:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
DBMAINTAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE has DBMAINT authority over the database:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
DISPLAYDBAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE can issue the DISPLAY command for the database:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
DROPAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE can issue the ALTER DATABASE and DROP DATABASE statement:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
IMAGCOPYAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE can use the COPY, MERGECOPY, MODIFY, and QUIESCE utilities on the database:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
LOADAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE can use the LOAD utility to load tables in the database:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
REORGAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE can use the REORG utility to reorganize table spaces and indexes in the database:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
RECOVERDBAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE can use the RECOVER and REPORT utilities on table spaces in the database:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
REPAIRAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE can use the DIAGNOSE and REPAIR utilities on table spaces and indexes in the database:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
STARTDBAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE can use the START command against the database:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
STATSAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE can use the CHECK and RUNSTATS utilities against the database:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
STOPAUTH
CHAR(1)
NOT NULL
Whether the GRANTEE can issue the STOP command against the database:
blank
Privilege is not held
G
Privilege held with the GRANT option
Y
Privilege is held without the GRANT option
G
IBMREQD
CHAR(1)
NOT NULL
A value of Y indicates that the row was provided with the Db2 product code. For all other values, see Release dependency indicators.

The value in this field is not a reliable indicator of release dependencies.

G
GRANTEDTS
TIMESTAMP
NOT NULL WITH
DEFAULT
Time when the GRANT statement was executed. G
GRANTORTYPE
CHAR(1)
NOT NULL WITH
DEFAULT
Indicates the type of grantor:
blank
Authorization ID
L
Role
G
Start of changeSYS_STARTEnd of change Start of change
TIMESTAMP(12)
NOT NULL
GENERATED ALWAYS
AS ROW BEGIN
End of change
Start of changeReserved for future IBM® use.The row-begin column of the SYSTEM_TIME period, for system-period data versioning.End of change Start of changeGEnd of change
Start of changeSYS_ENDEnd of change Start of change
TIMESTAMP(12)
NOT NULL
GENERATED ALWAYS
AS ROW END
End of change
Start of changeReserved for future IBM use.The row-end column of the SYSTEM_TIME period, for system-period data versioning.End of change Start of changeGEnd of change
Start of changeTRANS_STARTEnd of change Start of change
TIMESTAMP(12)
NOT NULL
GENERATED ALWAYS
AS TRANSACTION
START ID
End of change
Start of changeReserved for future IBM use. End of change Start of changeGEnd of change