SYSIBM.SYSSCHEMAAUTH table

The SYSIBM.SYSSCHEMAAUTH table contains one or more rows for each user that is granted a privilege on a particular schema in the database.

Column name Data type Description Use
GRANTOR
VARCHAR(128)
NOT NULL
Authorization ID of the user who granted the privileges or SYSADM. G
GRANTEE
VARCHAR(128)
NOT NULL
Authorization ID of the user or group who holds the privileges. Can also be PUBLIC for a grant to PUBLIC. G
SCHEMANAME
VARCHAR(128)
NOT NULL
Name of the schema or '*' for all schemas. G
AUTHHOWGOT
CHAR(1)
NOT NULL
Authorization level of the user from whom the privileges were received. This authorization level is not necessarily the highest authorization level of the grantor.
This field is also used to indicate that the privilege was held on all schemas by the grantor.
1
Grantor had privilege on all schemas at time of grant
Start of changeEEnd of change
Start of changeSECADMEnd of change
Start of changeGEnd of change
Start of changeACCESSCTRLEnd of change
L
SYSCTRL
S
SYSADM
G
CREATEINAUTH
CHAR(1)
NOT NULL
Indicates whether grantee holds CREATEIN privilege on the schema:
blank
Privilege is not held
G
Privilege is held with the GRANT option
Y
Privilege is held without the GRANT option
G
ALTERINAUTH
CHAR(1)
NOT NULL
Indicates whether grantee holds ALTERIN privilege on the schema:
blank
Privilege is not held
G
Privilege is held with the GRANT option
Y
Privilege is held without the GRANT option
G
DROPINAUTH
CHAR(1)
NOT NULL
Indicates whether grantee holds DROPIN privilege on the schema:
blank
Privilege is not held
G
Privilege is held with the GRANT option
Y
Privilege is held without the GRANT option
G
GRANTEDTS
TIMESTAMP
NOT NULL
Time when the GRANT statement was executed. G
IBMREQD
CHAR(1)
NOT NULL
A value of Y indicates that the row came from the basic machine-readable material (MRM) tape. For all other values, see Release dependency indicators.

The value in this field is not a reliable indicator of release dependencies.

G
GRANTEETYPE
CHAR(1)
NOT NULL WITH
DEFAULT
Indicates the type of grantee:
blank
Authorization ID
L
Role
G
GRANTORTYPE
CHAR(1)
NOT NULL WITH
DEFAULT
Indicates the type of grantor:
blank
Authorization ID
L
Role
G