Privileges determine what a user is authorized to do with the data and the database. Assign privileges based on the type of work the person does within the organization.
Users connecting to Teradata from ArcGIS require privileges on specific Teradata system tables and the user data they need to access. As a Teradata administrator, you create groups based on what users need to do in the database, grant privileges to the groups, and add the appropriate database users to each group.
Teradata grants SELECT privileges on system tables to PUBLIC by default. If you revoke those privileges, you must grant privileges to individual groups or users.
The following table lists three groups of users who will connect from ArcGIS and the minimum privileges they require to query, edit, or create data.
|Type of user||Required privileges||Purpose|
SELECT ON SYSSPATIAL.SPATIAL_REF_SYS
SELECT ON SYSSPATIAL.GEOMETRY_COLUMNS
SELECT ON DBC.TVM
Required to read ST_GEOMETRY metadata for spatial operations.
SELECT ON <table1>,<table2>, <tablen>
Allows data viewers to query data in specific tables.
UDTUSAGE ON SYSUDTLIB
Required to preview features.
Data editors require the same privileges as data viewers, plus these additional privileges.
INSERT, UPDATE, DELETE on other users' tables
Grant the editing operations you want editors to perform on specific tables.
Data creators require the same privileges as data viewers, plus these additional privileges.
INSERT ON SYSSPATIAL.SPATIAL_REF_SYS
UPDATE ON SYSSPATIAL.GEOMETRY_COLUMNS
EXECUTE FUNCTION ON SYSSPATIAL
EXECUTE PROCEDURE ON SYSSPATIAL
Required to update ST_GEOMETRY metadata when creating or updating spatial data.
Alternatively, you can grant SELECT, EXECUTE PROCEDURE, and EXECUTE FUNCTION on the sysspatial database to the user.
Required to create tables and feature classes in the database.
*You can edit data published to an ArcGIS Server feature service that has editing operations enabled.
Additional, optional privileges you may want to grant data creators include the following:
- CREATE VIEW and DROP VIEW
Grant these privileges if you want to allow the data creator to create views on tables. This might be needed if the data creator owns feature classes that contain a spatial column that is not named shape. To use the data with ArcGIS, a view must be created on the feature class that aliases the spatial column to a column named shape.
- CREATE TRIGGER and DROP TRIGGER
These privileges are required to create tessellation indexes, which use side tables that are updated via a trigger.
- CREATE INDEX
This is required for data creators to create attribute indexes on their tables.