access to the database manager and its database objects. Users can access 

only those objects for which they have the appropriate authorization, that is, the 

required privilege or authority.

Figure 6 1 illustrates the relationship between authorities and their span of 

control (database, database manager). 

Figure 6 1   Hierarchy of authorities

A user or group can have one or more of the following levels of authorization: 

Administrative authority (SYSADM or DBADM) gives full privileges for a set of 

objects. 

System authority (SYSCTRL or SYSMAINT) gives full privileges for managing 

the system, but does not allow access to the data. 

Load authority (LOAD) gives 

LOAD

 utility or 

AutoLoader

 utility privileges to load 

data into tables. 

Ownership privilege (also called CONTROL privilege in some cases) gives 

full privileges for a specific object. 

Individual privileges may be granted to allow a user to carry out specific 

functions on specific objects. 

142 

MySQL to DB2 UDB Conversion Guide