Configuring access to execute queries

When configuring a Teradata Member Source in ESA, the following grants must be given to the user that will be connecting to the database. This is required in order to retrieve policy users and groups.

The following is a list of privilege rights that are required for the access configuration:

• Select access to DBC.DBASE
• Select access to DBC.ROLEINFO
• Select access to DBC.RoleMembers

The privilege rights must be granted in the member source configuration on the ESA when you are defining a database user with the roles.

There are three basic types of queries performed in Teradata:

• Retrieving the database users

  SELECT DBASE.DatabaseNameI FROM DBC.DBASE DBASE WHERE DBASE.ROWTYPE = 'U' ORDER BY 1;
  

  For more information about fetching the users, refer to Additional References for Teradata.

• Retrieving the database roles/groups

  SELECT RoleName,UPPER(GRANTEE) FROM DBC.RoleMembers ORDER BY RoleName;
  

• Retrieving the database users that are members of a role/group

  SELECT UPPER(GRANTEE) FROM DBC.RoleMembers ORDER BY GRANTEE;