Prepare Database Users and Privileges for Db2 z/OS

Learn about creating database users and assigning privileges for Oracle GoldenGate for Db2 z/OS.

Oracle GoldenGate requires a database user account. Create this account and assign privileges according to the following guidelines.

The following table shows the required system privileges for a dedicated Oracle GoldenGate user created in Db2 z/OS:

Assign the Db2 privileges listed in the following table to the Extract and Replicat dedicated database users. These are in addition to any permissions that Db2 ODBC requires. Except where noted, all Extract privileges apply to initial-load and log-based Extract processes, .

The authorities listed in the following table can be provided by granting either SYSCTRL or DBADM plus SQLADM authority to the user running the Oracle GoldenGate processes.

Table 4-1 Privileges Needed by Oracle GoldenGate for Db2 z/OS

User privilege	Extract	Stored Procedure	Replicat
`CONNECT` to the remote Db2 subsystem.	Yes	Yes	Yes
`MONITOR2` (This does not apply to initial-load Extract)	Y	-	N
`SELECT ON` the following `SYSIBM` tables: `SYSTABLES` `SYSCOLUMNS` `SYSTABLEPART` `SYSKEYS` `SYSINDEXES` `SYSCOLAUTH` `SYSDATABASE` `SYSFOREIGNKEYS` `SYSPARMS` `SYSRELS` `SYSROUTINES` `SYSSYNONYMS` `SYSTABAUTH` `SYSAUXRELS`	Y	-	Y
`SELECT` on source tables^Foot 1	Y	-	N
`INSERT`, `UPDATE`, `DELETE` on target tables	N	-	Y
`CREATE` `TABLE`^Foot 2	N	-	Y
`EXECUTE` on ODBC plan (default is DSNACLI)	Y	-	N
Privileges required by `SQLEXEC` procedures or queries that you will be using.^Foot 3	Y	-	N

^Footnote 1

SELECT on source tables required only if tables contain LOB columns, or for an initial-load Extract, if used.

^Footnote 2

Required if using ADD CHECKPOINTTABLE from the command line interface to use the database checkpoint feature.

^Footnote 3

SQLEXEC enables stored procedures and queries to be executed by an Oracle GoldenGate process.