SYSROLEGRANTS consolidated view

The SYSROLEGRANTS system view stores information about role membership and type of membership, just like the SYSROLEGRANT system view does. However, SYSROLEGRANTS includes role names and grantee names (not just IDs). The underlying system tables for this view are ISYSROLEGRANT and ISYSUSER.

Column name	Data type	Description
grant_id	UNSIGNED INT	ID used to identify each GRANT statement.
role_id	UNSIGNED INT	ID of the role being granted, as per ISYSUSER.
role_name	CHAR(128)	The name of the role.
grantee	UNISIGNED INT	ID of the user being granted the role, as per ISYSUSER.
grantee_name	CHAR(128)	The name of the grantee.
grant_type	TINYINT	Describes type of grant using 3 bits. The first bit from the right is whether privilege has been granted. The second digit is whether administration rights have been given. The third digit is whether system privileges are inheritable. 001 Privilege granted, with no inheritance, and no administration rights. Applicable only for legacy non-inheritable authorities except DBA and REMOTE DBA. 101 Privilege granted, with inheritance, but no administration rights. 110 Only administration rights have been granted. 111 Privilege granted, with inheritance, and with administration rights.
grant_scope	TINYINT	Used by SET USER and CHANGE PASSWORD to set the scope of the grant. Values can be one or more of the following: 1 ANY 2 User list 4 Role list
grantor	CHAR(128)	The name of the grantor.

Constraints on underlying system table

PRIMARY KEY (grant_id)

FOREIGN KEY (role_id) REFERENCES SYS.ISYSUSER (user_id)

FOREIGN KEY (grantee) REFERENCES SYS.ISYSUSER (user_id)

INDEX (role_id, grantee, grant_scope)

Discuss this page in DocCommentXchange.