Database Security Administrator Role

The database security administrator role (DBSECADM) is required to create and maintain label-based access control security objects.

DBSECADM is a powerful server-level role that has the following responsibilities for all databases running on the HCL® OneDB® installation:

• Create, drop, alter, and rename security label components
• Create, drop, and rename security policies
• Create, drop, and rename security labels
• Attach security policies to tables and detach security policies
• Grant security labels to users and revoke security labels
• Grant and revoke exemptions from security policies
• Grant and revoke the SETSESSIONAUTH privilege