Getting Started with DB2 Express-C

180 Getting Started with DB2 Express-C
Figure 10.5 - Database-level authorities and their functions
Note:
In DB2 9.7, to provide for better data privacy and governance compliance, the authorization
model has been updated to clearly separate the duties of the system administrator, the
database administrator, and the security administrator.
In general, the functional scope of several authorities has been reduced compared to
previous DB2 versions. For example, a SYSADM no longer has the rights to access data
from any database. A DBADM no longer has the rights to access data for the database he
administers. On the other hand, SECADM has gained more functionality such as the ability
to grant and revoke authorities and privileges to users, roles, and groups.
New authorities have also been created to allow for more granularity and control of your
system security. This also minimizes the risk of data exposure by not granting users more
than what they need to do their job.
The DB2 9.7.2 refresh also includes auditing improvements that allow for the replay of past
database activities. For example, if you need to analyze how a given request that
happened a few years back affected some tables, you can now use the database audit
information to obtain what you need for that analysis.
10.2.2.3 Enabling SYSADM and DBADM to work the same as versions of DB2 prior to
9.7