SQL Maestro Group / Products / MaxDB / MaxDB Maestro / Documentation

MaxDB Maestro online Help

Using roles can simplify security administration in databases with a large number of users or with a complex security system.

A MaxDB role is a group of privileges that can be granted to database users, user groups, or to other roles.

While privileges apply at all times, roles are initially inactive, which means that the privileges they contain do not apply. You can activate roles for individual database sessions. Every user to whom roles have been assigned can also define which of the roles should be active in each database session. The user can change this definition after opening a database session.

New roles are created within Create Role Wizard. In order to run the wizard you should either

•	select the Object \| Create Database Object... main menu item;

•	select the Role icon in the Create Database Object dialog

•	select the Roles list or any object from that list in the explorer tree;

•	select the Create New Role... item from the popup menu

•	open the database in Database Editor and the Roles tab there;

•	press the Insert key or select the Create New Role... item from the popup menu (alternatively, you may use the corresponding link of the Navigation Bar).

To create a new role with the same properties as one of the existing roles has:

•	select the Object \| Duplicate Database Object... main menu item;

•	follow the instructions of Duplicate Object Wizard.

Roles can be edited within Role Editor. In order to run the editor you should either

•	select the role for editing in the explorer tree (type the first letters of the role name for quick search);

•	select the Edit Role ... item from the popup menu

•	open the database in Database Editor and the Roles tab there;

•	select the role to edit;

•	press the Enter key or select the Edit Role item from the popup menu (alternatively, you may use the corresponding link of the Navigation Bar).

You can change the name of the role using the Rename Role dialog. To open the dialog you should either

•	select the role to rename in the explorer tree;

•	select the Rename Role item from the popup menu

•	open the database in Database Editor and the Roles tab there;

•	select the role to rename;

•	select the Rename Role item from the popup menu (alternatively, you may use the corresponding link of the Navigation Bar).

To drop a role (note that you can drop database roles only):

•	select the role to drop in the explorer tree;

•	select the Drop Role item from the popup menu

•	open the database in Database Editor and the Roles tab there;

•	select the role to drop;

•	press the Delete key or select the Drop Role item from the popup menu (alternatively, you may use the corresponding link of the Navigation Bar)

and confirm dropping in the dialog window.