Neoview Database Administrator's Guide (R2.2)

3 Managing Roles, User IDs, and Linux Accounts
This chapter describes:
• “Understanding Roles and User IDs” (page 23)
• “Creating a New Role” (page 25)
• “Changing the Password and Expiration Date of a Role” (page 25)
• “Deleting a Role” (page 26)
• “Creating a New User ID” (page 27)
• “Changing the Password and Expiration Date of a User” (page 27)
• “Deleting a User ID” (page 28)
• “Viewing User Status” (page 29)
• “Managing Security Policies” (page 29)
• “Managing Linux Accounts” (page 30)
Understanding Roles and User IDs
Roles
Roles are vehicles for assigning data-access privileges to user IDs.
Table privileges are granted only to roles, not to individual user IDs. You grant access privileges for
each data table to one or more roles. When you create a user ID, it is based on a role, and the user ID
takes on the privileges of the role.
Roles and user ID names must be unique. Each role can have many user IDs assigned to it. Each user
ID can be assigned to one, and only one, role.
The Neoview platform can have a maximum of 255 roles.
What are
they?
Your Neoview platform is preconfigured with these roles:Initially
is the only role with the authority to create additional roles and user IDs.MGR
is the only role with the authority to create tables in the DB schema and have full
permissions on tables in this schema.
DBA
is the only role with the authority to create tables in the USR schema.USER
You can also assign any meaning to these roles to fit your database needs.
User IDs
To log on to the HP Neoview platform, users must use a unique user ID. Each user ID can be assigned
to one, and only one, role.
The Neoview platform can have a maximum of 100,000 user IDs. However, performance is affected
when your system has many user IDs, so add them with care.
What are
they?
Your Neoview platform is preconfigured with these user IDs:Initially
is assigned to the MGR role. The initial password is hp4BAdmn.
Use this user ID to log on to your system initially and to create all roles and user
IDs.
Create other manager user IDs based on the MGR role, database administrators
based on the DBA role, and all other users based on the USER role. After creating
all roles and user IDs, do not use this ID again. Use a manager role you have created
for manager tasks. For additional security, change this ID’s password.
ROLE.MGR
Understanding Roles and User IDs 23