Granting a Privilege to a Role

You can grant table-level and routine-level privileges to a role if you have the authority to grant these same privileges to login names or to PUBLIC. A role cannot hold database-level privileges.

In Dynamic Server, you can also grant type-level privileges to a role.

The syntax is more restricted for granting privileges to a role than to a user:

• You can specify the AS grantor clause only in Dynamic Server.

  In this way, whoever has the role can revoke these same privileges. For more information, see AS grantor Clause.

• You cannot include the WITH GRANT OPTION clause.

  A role cannot, in turn, grant the same access privileges to another user.

This example grants Insert privilege on the supplier table to the role payables:

GRANT INSERT ON supplier TO payables;

Anyone who has been granted the payables role, and who successfully activates it by issuing the SET ROLE statement, can now insert rows into supplier.