IBM Cloud Docs
Managing users and groups

Managing users and groups

The Users and groups view displays all of your database user accounts and groups.

Users

Creating users

  1. Go to Users and groups > Users.

  2. Click Create user.

  3. In the General settings section, select the following:

    1. Authentication type

    2. Username
      The name must begin with a letter or an underscore. The name cannot contain embedded spaces. It must be unique within the system. It can have 128 characters.

    3. Password
      The password must have 15 characters, 1 upper case letter, 1 lower case letter, 1 special character, and a number.

    4. Resource group

    5. Account expiration date
      Specify whether the user account never expires or select an expiration date.

    6. Password expiration date
      Specify whether the password of the user account never expires or select an expiration date.

  4. Optionally, you can add the user account to any available groups by ticking the box next to the name of the group.

    If you want a user to have the necessary privileges to do scaling, pause and resume operations, and backup and restore, you must add the user to the ADMINISTRATORS group.

Information about users

The table lists group-related values and their definitions.
Value Description
Username Specifies the database user name.
Resource group Specifies the database group to which the user belongs and which controls the workload settings such as GRA and resource percentages.
Owner Specifies the owner of the user account.
Tables Specifies the number of tables that are owned by the user account.
Password expiration Specifies when a user password expires.
Created on Specifies when the user was created.
Authentication type Specifies the authentication type.

User actions

In the users list view, there is an overflow menu that lists the actions that can be taken on the user.

The table lists user actions and their definitions.
Value Description
Assign owner Set the owner of the user account.
Change password Change the password for the system user.
Account expiration Set a date that the system user account will be valid until.
Password expiration Set a number of days until the password for the user account expires.
Rename Change the username of the user account.
Admin privileges View and grant admin privileges.
Object privileges View and grant object privileges.
Remove Delete the user account from the system.

Granting admin privileges to users

User privileges dictate what actions can be taken by a particular user account. When new users are created, they have no privileges, so in most cases privileges need to be added.

  1. Go to Users and groups > Users.

  2. Select the user for which you want to grant admin privileges and select Admin privileges from the overflow menu.
    In this view, you can see different admin privileges, which are already granted or that can be granted to the selected user.
    Granting these privileges allows the user to do the actions that the privileges correspond to. Granting privileges on global database and global schema unlocks all the privileges to the user equivalent to an admin.

  3. Click Edit.

  4. Update, grant, or revoke object privileges by putting ticks in corresponding boxes.

  5. Click Save.

Granting object privileges to users

User privileges dictate what actions can be taken by a particular user account. When new users are created, they have no privileges, so in most cases privileges need to be added.

  1. Go to Users and groups > Users.

  2. Select the user for which you want to grant object privileges and select Object privileges from the overflow menu.

  3. Select a database.
    You can choose between the Global database and a specific database. Global means that the privileges are related to generic object types such as views, tables, databases, groups.
    If you choose Global, the privilege is assigned globally across the system. If the user account is given Create table privileges, this user can create a table in any database.

  4. Select a schema.
    If you selected Global for the database in step 3, skip this step.

  5. Click Edit.

  6. Update, grant, or revoke object privileges by putting ticks in corresponding boxes.

  7. Click Save.

Removing users

  1. Go to Users and groups > Users.
  2. Select the user that you want to remove and select Remove from the overflow menu.
    In the confirmation pop up, click Remove to remove the user or Cancel to cancel this action.

Groups

Creating groups

  1. Go to Users and groups > Groups.

  2. Click Create group.

  3. In the General settings section, select the following:

    1. Name
    2. Password expiration date
  4. Specify resource allocation settings.

  5. Specify session settings.

  6. Add users.
    In the Include users section, specify which users to add to the group when it's created.

  7. Click Create.

Information about groups

The table lists group-related values and their definitions.
Value Description
Name Specifies the name of the group.
Owner Specifies the database user who owns the group.
Default priority Specifies the workload management control that specifies the default priority for queries that are run by the users in this group.
Max priority Specifies the workload management control that specifies the maximum priority that a user in the group can assign to sessions or queries.
Password expiration Specifies when a group password expires.
Created on Specifies when the group was created.

Groups actions

In the Groups list view, there is an overflow menu that lists the actions that can be taken on each group.

The table lists group-related actions and their definitions.
Value Description
Password expiration Set the time in days after which the password expires for the members of a group.
Assign owner Set the owner of the group.
Manage users Add or remove users from the group.
Rename Change the group name.
Admin privileges View and grant admin privileges.
Object privileges View and grant object privileges.
Remove Delete the group from the system.

Granting admin privileges to groups

Group privileges dictate what actions can be taken by users who are a part of the group.

  1. Go to Users and groups > Groups.

  2. Select the group for which you want to grant admin privileges and select Admin privileges from the overflow menu.
    In this view, you can see different admin privileges, which are already granted or that can be granted to the selected group.
    Granting these privileges allows the users that belong to the group to do the actions that the privileges correspond to. Granting privileges on global database and global schema unlocks all the privileges to the user equivalent to an admin.

  3. Click Edit.

  4. Update, grant, or revoke object privileges by putting ticks in corresponding boxes.

  5. Click Save.

Granting object privileges to groups

Group privileges dictate what actions can be taken by users who are a part of the group.

  1. Go to Users and groups > Groups.

  2. Select the group for which you want to grant object privileges and select Object privileges from the overflow menu.

  3. Select a database.
    You can choose between the Global database and a specific database. Global means that the privileges are related to generic object types such as views, tables, databases, groups.
    If you choose Global, the privilege is assigned globally across the system.

  4. Select a schema.
    If you selected Global for the database in step 3, skip this step.

  5. Click Edit.

  6. Update, grant, or revoke object privileges by putting ticks in corresponding boxes.

  7. Click Save.

Comparing groups

  1. Go to Users and groups > Groups.
  2. Click Workload management.
  3. Click Compare groups.
  4. Select the groups you want to compare.
  5. Select the time within which you want to compare the chosen groups.
    You can see the results on the Comparison graph.

Removing groups

  1. Go to Users and groups > Groups.
  2. Select the group that you want to remove and select Remove from the overflow menu.
    In the confirmation pop up, click Remove to remove the group or Cancel to cancel this action.