Schema authorities

Schema authorities are designed to allow an authorization ID to perform certain duties on a schema, i.e., schema administrator, schema access control manager, and schema data administrator. Schema authorities have been designed on the same principle as the database authorities but are different from them as their scope is limited only to the schema on which they are granted. Schema authorities are also different from privileges, which allow a certain action to be taken on a particular schema or schema object, such as a table or an index.

These are four schema authorities:

SCHEMAADM

Allows the authorization ID to act as the schema administrator.

Schema ACCESSCTRL

Allows the authorization ID to grant and revoke all privileges on objects defined in the schema. It also allows the authorization ID to grant and revoke all schema authorities and privileges except for schema ACCESSCTRL itself.

Schema DATAACCESS

Allows the authorization ID to access and manage data in a schema.

Schema LOAD

Allows the authorization ID to load data in to tables defined in the schema.

No schema authority can be granted to the special group PUBLIC directly or indirectly or be granted with grant option.