Click here to view and discuss this page in DocCommentXchange. In the future, you will be sent there automatically.

SQL Anywhere 11.0.1 » SQL Remote » SQL Remote Replication Design » SQL Remote replication design and set up » User permissions

 

Grant REMOTE DBA authority

A user name with REMOTE DBA authority has full DBA authority on the database only when connecting from SQL Remote. With REMOTE DBA authority, SQL Remote has full access to the database and can make changes specified in the messages. Only users with REMOTE DBA or DBA authority can run SQL Remote.

As a special authority, REMOTE DBA, has the following properties:

  • No distinct permissions when not connected from SQL Remote   A user that is granted REMOTE DBA authority has no extra privileges on any connection apart from SQL Remote. Therefore, even if the user name and password for a REMOTE DBA user are widely distributed, there are no security issues. As long as the user name has no permissions beyond CONNECT granted on the database, no one can use this user name to access data in the database.

  • Full DBA permission from SQL Remote   When connecting from SQL Remote, a user with REMOTE DBA authority has full DBA permission on the database.

When to grant REMOTE DBA authority

It is recommended that when you are creating users on the consolidated database that you grant REMOTE DBA authority the publisher of the consolidated database and to each remote user. When a remote database is extracted by the Extraction utility (dbxtract) or the Extract Database Wizard, the remote user becomes the publisher of the remote database, and is granted PUBLISH permission and REMOTE DBA authority.

This recommendation simplifies the administration of users. Each remote user only needs one user name to connect to the database, whether from the SQL Remote (which provides the user with full DBA authority) or from any other client application (in which case the REMOTE DBA authority grants the user no extra permissions).

To grant REMOTE DBA authority (Sybase Central)
  1. Connect to the database as a user with DBA authority.

  2. In the left pane, select either the Users & Groups folder or the SQL Remote Users folder.

  3. Right-click the user and choose Properties.

  4. Click the Authorities tab and select the Remote DBA option.

  5. Click Apply and then click OK.

To grant REMOTE DBA authority (SQL)
  1. Connect to the database as a user with DBA authority.

  2. Execute a GRANT REMOTE DBA statement to grant REMOTE DBA authority to a user.

    For example:

    GRANT REMOTE DBA TO dbremote
    IDENTIFIED BY dbremote;
See also

Revoke REMOTE DBA authority