Archives of the TeradataForum

Message Posted: Thu, 09 Jul 2009 @ 16:36:33 GMT

	<Prev	Next>		<<First	<Prev	Next>	Last>>

We did it because we had several Teradata Manager Profiles and could assign a user to one or more of them. We used a stored procedure to grant the role and insert the row or rows as a single operation. A second or subsequent request for a user would remove the grants and profile assignments and insert the new ones.

The ALLUSERS flag is a Boolean indicator ('Y' or 'N') that appears on the DEFAULT profile assignment which would grant full authority to every user. We deleted this profile and created specific ones. Our policy was to not grant access by default but rather do explicit connection to roles and Teradata Manager profiles. Therefore, no access unless specifically requested and approved either through assignment to a Job Role or specific request.

John...

	<Prev	Next>		<<First	<Prev	Next>	Last>>