GRANT ROLE SYS_RUN_REPLICATION_ROLE 
TO grantee
[WITH NO SYSTEM PRIVILEGE INHERITANCE ]

SYS_RUN_REPLICATION_ROLE provides the following system privileges:

• MONITOR
• BACKUP DATABASE
• DROP CONNECTION
• SELECT ANY TABLE
• SET ANY SYSTEM OPTION
• SET ANY USER DEFINED OPTION

Users can also execute the following statement:

• SYNCHRONIZE PROFILE

In MobiLink, when the connection is made from the SQL Anywhere synchronization client (dbmlsync) utility, the SYS_RUN_REPLICATION_ROLE system role enables dbmlsync to have full access to the database. Any other connection using the same user ID is granted no special authority.

In SQL Remote, when the connection is made from the Message Agent, the SYS_RUN_REPLICATION_ROLE system role enables the Message Agent to have full access to the database to make any changes contained in the messages. Any other connection using the same user ID is granted no special authority.

When a connection is made to the database in any other way, the user cannot exercise any of the privileges associated with this role. For example, the user cannot use the SELECT ANY TABLE system privilege.

The SYS_RUN_REPLICATION_ROLE system role avoids having to grant full DBA authority to a user ID, thereby avoiding security problems associated with distributing DBA user IDs and passwords.

For example, a SQL Remote user ID with the SYS_RUN_REPLICATION_ROLE system role has no extra privileges on any connection apart from the Message Agent. Even if the user ID and password for this user is widely distributed, there is no security problem. As long as the user ID has no permissions beyond CONNECT granted on the database, no one can use this user ID to access data in the database.

You must have the SYS_REPLICATION_ADMIN_ROLE system role.

Automatic commit.

• Replication-related system roles
• REVOKE ROLE SYS_RUN_REPLICATION_ROLE statement [MobiLink] [SQL Remote]
• MobiLink: Synchronization initiation
• SQL Remote: SYS_RUN_REPLICATION_ROLE system role
• SQL Remote: Granting the SYS_RUN_REPLICATION_ROLE system role
• SQL Remote: Revoking the SYS_RUN_REPLICATION_ROLE system role
• SQL Remote: SQL Remote Message Agent (dbremote) modes
• SQL Remote: Security
• Privileges for dbmlsync
• GRANT ROLE SYS_REPLICATION_ADMIN_ROLE statement [MobiLink] [SQL Remote]

The following example grants the SYS_RUN_REPLICATION_ROLE system role to grantee Sam_Singer:

GRANT ROLE SYS_RUN_REPLICATION_ROLE
TO Sam_Singer;