User roles
A role is a work-task classification, such as payroll or payroll manager. Each defined role has privileges on the local database object granted to the role. You use the CREATE ROLE statement to define a role.
After you create a role, use the GRANT statement to grant privileges to one or more users associated with the role name.
When a role is granted to a user, the role grantor or the role grantee (user) must use the SET ROLE statement to activate the role. Only then does the user have the privileges of the role.
Important: The scope of a role's privileges is the current
database only. When the SET ROLE statement is run, the role is set
in the current database only. As a security precaution, a user with
role privileges cannot access tables on a remote computer through
a view, trigger, or programmed procedure.
For more information about creating and using roles, see the HCL OneDB™ Guide to SQL: Syntax.