AD-ENT based role access in Teradata 14

Database
Enthusiast

AD-ENT based role access in Teradata 14

Could anyone please guide with the availability of AD-ENT based role access in Teradata 14 ?

Is there any key feature in this with V 14.10 ?

Can a user create the role based access on any DB or table .. or does the DBA only has the option to give access?

1 REPLY
Teradata Employee

Re: AD-ENT based role access in Teradata 14

Users which are authenticated via AD can also have roles mapped via AD. See the Security Administration manual.

http://www.info.teradata.com/HTMLPubs/DB_TTU_14_00/Database_Management/B035_1100_111A/title.088.2.ht...

There are no major changes related to this in TD14.10.

I don't understand your last question.

You must have CREATE ROLE permission to create a new role (normally given only to Security Admin or DBA).

You must have access WITH GRANT OPTION on an object to grant that access on that object to an existing role (generally creator, owner, or DBA).

You must be a member of a database role WITH ADMIN OPTION to grant that role to another database user.

Security for mapping directory users to EXTERNAL rolenames is controlled by the directory (not by Teradata).