I tried the suggestions made by John yesterday and it seems to be working so here are two ways to enable user to use federation in self-service mode. 1. Grant user a sysadmin privileges which comes with elevated privileges. User can even make changes to db2 configs. 2. Another option is to create the server definition in data server manager as sys admin user such as bigsql and create user mapping for each and every user, and then let user create the nicknames of tables they like. I was discussed with my boss and he doesn’t like either suggestion. First solution exposes a larger set of privileges than required, and another option increases the security risk and add additional overhead. May we request for an enhancement to create a low privileged role just for federation?
|Role Summary||Hadoop Administrator|
NOTICE TO EU RESIDENTS: per EU Data Protection Policy, if you wish to remove your personal information from the IBM ideas portal, please login to the ideas portal using your previously registered information then change your email to "email@example.com" and first name to "anonymous" and last name to "anonymous". This will ensure that IBM will not send any emails to you about all idea submissions