Authorities and privileges for configuring DB2 for z/OS subsystems for Visual Explain

You must have the authorities and privileges that are required to configure a subsystem.

If you have the SYSADM authority, you can configure a subsystem for Visual Explain. Otherwise, see the following table for detailed authorities and privileges that are required for each individual tasks of configuring a subsystem for Visual Explain.

Task Authorities or privileges required
Connect to a DB2® for z/OS subsystem All of the following authorities and privileges:
  • Underlying DB2 access authority
  • EXECUTE privilege on the following basic packages:
    • DSN5OADM
    • DSN5OEPJ (DB2 for z/OS® Version 8)
    • DSN5OEPK (DB2 for z/OS Versions 9 and 10)
    • DSN5ONPT
    • DSN5OPKG
Bind packages One of the following authorities and privileges:
  • SYSADM or DBADM authority
  • If the required packages do not exist, BINDADD and CREATEIN privileges on the schema
  • If the required packages exist, ALTERIN and BIND privileges on the schema
Free packages One of the following authorities and privileges:
  • Ownership of the packages
  • BINDAGENT privilege that is granted by the owner of the packages
  • SYSCTRL authority
  • SYSADM authority
  • PACKADM authority for the collection or for all collections
Browse subsystem parameters All of the following authorities and privileges:
  • EXECUTE privilege on the SYSPROC.DSNWZP stored procedure
  • At least MONITOR1 system privilege
Manage users One of the following privileges or authorities:
  • The privilege WITH GRANT OPTION on the required packages
  • Ownership of the packages
  • SYSADM authority
Create EXPLAIN tables For creating the database, one or more of the following privileges or authorities:
  • CREATEDBA privilege
  • CREATEDBC privilege
  • SYSADM or SYSCTRL authority
For creating the table space, one or more of the following privileges or authorities:
  • CREATETS privilege for the database
  • DBADM, DBCTRL, or DBMAINT authority for the database
  • SYSADM or SYSCTRL authority
For creating the tables, one or more of the following privileges or authorities:
  • CREATETAB privilege for the database
  • DBADM, DBCTRL, or DBMAINT authority for the database
  • SYSADM or SYSCTRL authority
Create aliases for existing EXPLAIN tables One of the following privileges or authorities:
  • The CREATEALIAS privilege
  • SYSADM or SYSCTRL authority
  • If the alias is for a table and the value of field DBADM CREATE AUTH on the installation panel DSNTIPP is YES, DBADM or DBCTRL authority on the database that contains the table

Feedback