Granting permissions and privileges to the sde user and ArcGIS user group in DB2 on z/OS

Permissions and database privileges must be granted to the sde user and the ArcGIS user group after the databases and UDFs are created.

Steps:

1. Log in to DB2 as an account with the SYSADM role to grant the necessary privileges to the ArcGIS user group you set up and the sde user. In these example GRANT statements, the group is named SDEUSERS.

   GRANT SELECT ON SYSIBM.SYSTABAUTH TO SDEUSERS;
   GRANT SELECT ON SYSIBM.SYSDBAUTH TO SDEUSERS;
   GRANT SELECT ON SYSIBM.SYSROUTINES TO SDEUSERS;
   GRANT SELECT ON SYSIBM.SYSTABCONST TO SDEUSERS;
   GRANT SELECT ON SYSIBM.SYSINDEXES TO SDEUSERS;
   GRANT SELECT ON SYSIBM.SYSKEYS TO SDEUSERS;
   GRANT SELECT ON SYSIBM.SYSCOLUMNS TO SDEUSERS;
   GRANT SELECT ON SYSIBM.SYSCHECKS TO SDEUSERS;
   GRANT SELECT ON SYSIBM.SYSSCHEMAAUTH TO SDEUSERS;
   GRANT SELECT ON SYSIBM.SYSTABLES TO SDEUSERS;
   GRANT SELECT ON SYSIBM.SYSSEQUENCES TO SDEUSERS;
   GRANT SELECT ON SYSIBM.SYSDUMMY1 TO SDEUSERS;
   

2. Grant the following additional privileges to the sde user:

   GRANT BINDADD TO SDE;
   GRANT CREATE ON COLLECTION SDE TO SDE;
   GRANT DBADM ON DATABASE <repository_database_name> TO
   SDE;
   GRANT DBADM ON DATABASE <user_data_database_name> TO SDE;
   

3. Grant the following permission to the PUBLIC role:

   GRANT EXECTUE ON PACKAGE SYSPROC.* TO PUBLIC;
   

4. The following statement is required if you use a storage group. In this example, the storage group is named ARCSDE.

   GRANT USE OF STOGROUP ARCSDE to SDE;
   

After these steps have been completed, you should proceed with the creation of the geodatabase. See Creating a geodatabase in DB2 on z/OS.