You are on page 1of 1214

PUBLIC

SAP IQ 16.0 SP 11
Document Version: 1.0 2015-12-21

SAP IQ Cockpit

Content

About SAP IQ Cockpit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

1.1

User Interface Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13

1.2

Sorting Columnar Data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

1.3

Keyboard Shortcuts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

1.4

Displaying the Versions of the SAP IQ Cockpit Components. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

1.5

Style and Syntax Conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

1.6

SAP IQ Cockpit Accessibility Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Get Started with SAP IQ Cockpit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

2.1

Start and Stop the SAP IQ Cockpit Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20


Starting and Stopping the SAP IQ Cockpit Server in Windows. . . . . . . . . . . . . . . . . . . . . . . . . . .21
Starting and Stopping the SAP IQ Cockpit Server in UNIX. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Configuring SAP IQ Cockpit Server as a Windows Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Configuring SAP IQ Cockpit Server as a UNIX Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
cockpit Command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

2.2

COCKPIT_MONITOR Script. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Executing the SAP IQ Cockpit Roles Script for a Role-Based. . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Executing the SAP IQ Cockpit Groups Script for an Authority-Based. . . . . . . . . . . . . . . . . . . . . . 31

2.3

SAP IQ Cockpit Console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32


Logging In to the SAP IQ Cockpit Console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
SAP IQ Utility Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

2.4

Logging Out of the SAP IQ Cockpit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

2.5

Registering and Authenticating an SAP IQ Cockpit Agent. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36


Viewing SAP IQ Cockpit Agent Connection Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

2.6

Technical User. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Creating the Technical User for a Role-Based System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Creating the Technical User for an Authority-Based System. . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Configure SAP IQ Cockpit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

3.1

SAP IQ System Privilege and Authority Summary Reference. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43


Simplex Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Multiplex Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Logical Server Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Logical Server Policy Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Remote Server Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
External Login Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Database Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Content

Table Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63


Table Column Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Table Permissions Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
Table Constraints Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Table Index Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Table Trigger Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Table Partition Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
View Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96
View Permissions Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
View Trigger Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
Materialized View Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Materialized View Permissions Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Materialized View Index Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Domain Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Text Configuration Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Text Index Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
Sequence Generator Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
Spatial Support Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
Authority-Based User Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .128
Authority-Based Group Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .132
Authority-Based Database Object Permissions Privilege Summary. . . . . . . . . . . . . . . . . . . . . . 135
Role-Based User Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137
Role-Based User-Extended Role Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
Role-Based Standalone Role Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146
Role-Based Database Object Permissions Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . .151
Role-Based System Role Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .153
Role-Based Compatibility Role Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
Role-Based System Privilege Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156
Login Mapping Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157
Login Policy Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .159
LDAP Server Configuration Object Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161
Dbspace Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163
Dbfile Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165
Event Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 168
Java External Environment Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171
Perl External Environment Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173
PHP External Environment Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175
Other External Environment Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177
Function Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178
Procedure Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 182
Web Service Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186

SAP IQ Cockpit
Content

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

3.2

Configuring the E-mail Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .188

3.3

Configuring Retrieval Thresholds for SAP IQ Cockpit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189

3.4

Configuring the Automatic Logout Timer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .190

3.5

Collection Jobs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190


Simplex Collections Jobs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .191
Multiplex Collections Jobs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .194
Logical Server Collections Jobs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
Executing and Stopping a Collection Job. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 197
Creating and Scheduling a Collection Job. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198
Deleting a Collection Job. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .199
Viewing Collection Job Schedule Details. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200
Resuming and Suspending a Collection Job. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200
Scheduling a Collection Job. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201
Modifying the Collection Interval for a Scheduled Job. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202
Viewing the Job Execution History. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .203

3.6

Repository. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203
Scheduling Backups of the Repository. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .204
Suspending or Resuming a Scheduled Backup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205
Modifying the Backup Schedule. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206
Forcing an Immediate Backup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206
Restoring the Repository from Backups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .207
Configuring Repository Purging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 208

3.7

Logging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 209
Viewing SAP IQ Event Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 210
Modifying the SAP IQ Server Log Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211
Viewing the SAP IQ Server and Agent Logs in SAP IQ Cockpit. . . . . . . . . . . . . . . . . . . . . . . . . . 211
Viewing the SAP IQ Cockpit Client Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 212
Viewing SAP IQ Cockpit Server Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 213
Changing the SAP IQ Cockpit Logging Level. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214
Changing SAP IQ Cockpit Logging Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215

3.8

Shared-Disk Mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .216


Enabling and Disabling Shared-Disk Mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217
Deploying an Instance from a Shared Disk Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218
instance Command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219
Starting and Stopping an Instance in Windows. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 221
Starting and Stopping an Instance in UNIX. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222
Refreshing or Converting an Instance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225
Removing an Instance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 226

3.9

Configuring Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 226

3.10

Configuring Memory Usage. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228


Changing a Memory Option on the Command Line. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 230

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Content

Changing a Memory Option for an SAP IQ Cockpit Windows Service. . . . . . . . . . . . . . . . . . . . .230


Changing a Memory Option for an SAP IQ Cockpit UNIX Service. . . . . . . . . . . . . . . . . . . . . . . . 231
3.11

SAP IQ Cockpit User Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231


Disabling and Enabling a User in SAP IQ Cockpit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232
Deleting a User in SAP IQ Cockpit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233
Defining an E-mail Address in SAP IQ Cockpit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .233
Updating User Information in SAP IQ Cockpit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 234

3.12

SAP IQ Cockpit Console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235


help Command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235
info Command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 236
shutdown command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237
status Command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237

3.13

Changing the SCCADMIN Password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 238


Encrypting a Password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .239

Monitor SAP IQ. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 240

4.1

Simplex Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .240


Viewing Overview Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .241
Viewing All Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243
Viewing Engine Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 244
Viewing Connections Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245
Viewing Transaction Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247
Viewing Dbspaces Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249
Viewing Backup and Dependency Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250
Viewing Store I/O Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 252
Viewing Cache Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253
Viewing Table Version Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 254
Viewing Operations and Requests Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255
Viewing Network Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 256
Viewing Table Page Usage Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 258
Viewing Table Lock Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259
Viewing Deadlock Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260
Viewing RLV Memory Usage Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .262
Viewing RLV Merge History Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263
Viewing the Statistics Chart. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 265
Changing Update Frequency for Simplex Monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .266

4.2

Multiplex Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 267


Viewing Multiplex Overview Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268
Multiplex Topology Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 270
Viewing Multiplex Server Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 275
Viewing Multiplex Connections Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276
Viewing Multiplex Transaction Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277

SAP IQ Cockpit
Content

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Viewing Multiplex Cache Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278


Viewing the Statistics Chart. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279
Changing Update Frequency for Multiplex Monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281
4.3

Logical Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .282


Viewing Logical Server Overview Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .282
Viewing Logical Server Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .283
Viewing the Statistics Chart. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284
Changing Update Frequency for Logical Server Monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . 286

Administer SAP IQ. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287

5.1

Executing a SQL Query. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 288

5.2

Simplex. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 288
Editing the Simplex Server Configuration File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289
Starting a Simplex Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 294
Stopping a Simplex Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295
Converting a Multiplex to a Simplex. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .296
Generating an Administration Script for a Simplex Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . 297
Upgrading a Simplex Database. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 298
Viewing or Modifying Simplex Server Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 301
Simplex Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 304

5.3

Multiplex. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 306
Editing the Multiplex Server Configuration File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 307
Starting a Multiplex Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 312
Stopping a Multiplex Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 313
Including an Excluded Secondary Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 314
Excluding a Secondary Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 315
Synchronizing a Secondary Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .317
Adding a Secondary Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 318
Dropping a Secondary Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 320
Generating Administration Scripts for a Multiplex Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 321
Upgrading a Multiplex Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 323
Converting a Simplex to Multiplex. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 326
Reconfiguring a Multiplex Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 329
Enabling and Disabling an RLV Store. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 330
Enabling and Disabling High Availability. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 331
Viewing or Modifying Multiplex Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 332
Viewing or Modifying Multiplex Server Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 334
Failover. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339
Shared-Nothing Multiplex. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .342
Multiplex Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .372

5.4

Logical Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .378


Creating a Logical Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 379

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Content

Deleting a Logical Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 380


Configuring Logical Server Node Membership. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 381
Altering a Logical Server Assignment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .382
Generating DDL Commands for a Logical Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 384
Viewing or Modifying Logical Server Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 385
Logical Server Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 386
5.5

Logical Server Policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 389


Creating a Logical Server Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 389
Deleting a Logical Server Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 391
Generating DDL Commands for a Logical Server Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 392
Viewing or Modifying Logical Server Policy Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 393
Logical Server Policy Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 395

5.6

Remote Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 396


Creating a Remote Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .397
Testing a Remote Server Connection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .399
Deleting a Remote Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .400
Generating Remote Server DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 401
Viewing or Modifying Remote Server Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 402
Remote Server Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 404

5.7

External Logins. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 405


Creating an External Login. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 406
Deleting an External Login. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 408
Generating External Login DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 409
Viewing External Login Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 410
External Login Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 411

5.8

Databases. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 412
Creating a Database. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 413
Creating a Database Using a CSV File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .416
Setting Database Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418
Configuring Point-in-Time Recovery Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419
Purging Backup History. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 421
Viewing or Modifying Database Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 422
Database Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 425

5.9

Tables. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 428
Creating an IQ (Catalog) System Store Table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429
Creating an IQ Main Store Table with No Partitions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 432
Creating a Table with a Hash Partition. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 436
Creating a Table with a Range Partition. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 440
Creating a Table with a Hash-Range Partition. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 445
Creating a Global Temporary Table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 450
Creating a Proxy Table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 453

SAP IQ Cockpit
Content

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Viewing Table Data in the Execute SQL Window. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 455


Deleting a Table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .456
Generating Table DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .457
Moving a Table to Another Dbspace. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 458
Validating an IQ (Catalog) System Store Table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 459
Setting the Primary Key. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 460
Removing the Primary Key. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 462
Setting a Clustered Index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 463
Merging Table Data from RLV Store with IQ Main Store. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 464
Calculating the Number of Rows in a Table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .466
Moving Table Objects to Another Dbspace. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 467
Enabling or Disabling Row-Level Versioning in a Table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .468
Viewing or Modifying Base Table Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 469
Viewing or Modifying Global Temporary Table Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . 474
Viewing and Modifying Proxy Table Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 479
Table Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 482
Table Columns. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 492
Table Permissions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 504
Table Constraints. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .515
Table Indexes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 541
Table Triggers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 559
Table Partitions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 569
5.10

Views. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 593
About Views. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 594
Creating a View. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 594
Viewing View Data in the Execute SQL Window. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .596
Recompiling and Enabling a View. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 597
Disabling a View. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 598
Deleting a View. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 599
Generating View DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 600
Viewing or Modifying View Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 601
View Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .603
View Permissions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 607
View Triggers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .617

5.11

Materialized Views. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 626


Creating a Materialized View. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 627
Viewing Materialized View Data in the Execute SQL Window. . . . . . . . . . . . . . . . . . . . . . . . . . 629
Refreshing Materialized View Data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 630
Truncating Materialized View Data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 632
Validating Materialized View Data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 633
Setting a Clustered Index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 634

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Content

Recompiling and Enabling a Materialized View. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 636


Disabling a Materialized View. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 637
Deleting a Materialized View. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 638
Generating Materialized View DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .639
Viewing or Modifying Materialized View Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 641
Materialized View Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 646
Materialized View Permissions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 652
Materialized View Indexes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 662
5.12

Domains. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 674
Creating a Domain. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 675
Deleting a Domain. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 680
Generating Domain DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 681
Viewing Domain Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .682
Domain Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 683

5.13

Text Configuration Objects. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 684


Creating a Text Configuration Object. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .684
Deleting a Text Configuration Object. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 687
Generating Text Configuration Object DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 688
Viewing or Modifying Text Configuration Object Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . 689
Text Configuration Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 691

5.14

Text Indexes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 693


Creating a Text Index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 694
Deleting a Text Index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 696
Refreshing a Text Index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 697
Truncating a Text Index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 700
Generating Text Index DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 701
Viewing or Modifying Text Index Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 702
Text Index Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 706

5.15

Sequence Generators. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 711


Creating a Sequence Generator. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 711
Deleting a Sequence Generator. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 713
Restarting a Sequence at Start Value. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 714
Generating Sequence Generator DDL Command. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .715
Viewing or Modifying Sequence Generator Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 716
Granting Sequence Generator USAGE Permission. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .718
Revoking Sequence Generator USAGE Permission. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 719
Sequence Generator Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 720

5.16

Spatial Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 722


Creating a Spatial Reference System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 723
Deleting a Spatial Reference System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 725
Generating Spatial Reference System DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 726

SAP IQ Cockpit
Content

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Viewing or Modifying Spatial Reference System Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . 727


Spatial Units of Measure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .732
Spatial Support Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 739
5.17

Security and User Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 742


Authority-Based Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 742
Role-Based Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 808
Login Mappings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1010
Login Policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1018
LDAP Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1033

5.18

Dbspaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1047
Creating a Dbspace. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1048
Deleting a Dbspace. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1051
Preallocating Space for a Dbspace. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1052
Generating Dbspace DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1053
Changing a Dbspace to Read-Only. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1054
Configuring Point-in-Time Recovery Logging Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1055
Viewing or Modifying Dbspace Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1057
Granting Dbspace CREATE Permission. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1059
Revoking Dbspace CREATE Permission. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1060
Dbspace Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1061

5.19

Dbfiles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1064
Creating a Dbfile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1065
Deleting a Dbfile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1068
Emptying a Dbfile. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1069
Generating Dbfile DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1070
Viewing or Modifying Dbfile Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1071
Dbfile Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1075

5.20

Events. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1077
Creating an Event. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1077
Deleting an Event. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1080
Disabling an Event. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1081
Enabling an Event. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1082
Triggering an Event. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1083
Generating Event DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1084
Viewing or Modifying Event Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1085
Event Schedules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1087
Event Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1092

5.21

External Environments. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1095


Working in a Java External Environment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1095
Working in a Perl External Environment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1110
Working in a PHP External Environment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1120

10

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Content

Working in a C ESQL External Environment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1130


Working in a C ODBC External Environment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1133
Working in a CLR (.NET) External Environment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1136
5.22

Functions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1138
Creating a Watcom SQL or Transact-SQL Function. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1139
Creating an External Java Function. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1141
Creating an External C/C++ Scalar or Aggregate Function. . . . . . . . . . . . . . . . . . . . . . . . . . . 1142
Deleting a Function. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1144
Generating Function DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1145
Viewing and Modifying a Function. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1146
Granting Function EXECUTE Permission. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1148
Revoking Function EXECUTE Permission. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1150
Function Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1151

5.23

Procedures. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1154
Creating a Procedure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1155
Creating a Remote Procedure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1157
Creating a Table UDF or TPF. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1159
Executing a Procedure, Table UDF, or TPF using View Data in SQL. . . . . . . . . . . . . . . . . . . . . 1162
Deleting a Procedure, Table UDF, or TPF. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1163
Generating Procedure, Table UDF, or TPF DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . 1164
Viewing or Modifying a Procedure, Table UDF, or TPF. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1165
Granting Procedure EXECUTE Permission. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1167
Revoking Procedure EXECUTE Permission. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1168
Procedure Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1169

5.24

Web Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1173


Creating a Web Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1174
Enabling a Web Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1178
Disabling a Web Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1179
Deleting a Web Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1181
Generating Web Service DDL Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1182
Viewing or Modifying Web Services Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1183
Web Service Privilege Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1187

Alerts in SAP IQ. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1189

6.1

Monitor and Resolve Alerts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1189

6.2

Setting Alert Notification. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1190

6.3

Managing Alert Notification Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1192

6.4

Adjusting the Monitoring Interval of a KPA. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1193

6.5

Configuring Alerts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1194


IQCockpit-product-name Simplex Alert Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1195
IQCockpit-product-name Multiplex Alert Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1198
IQCockpit-product-name Logical Server Alert Summary. . . . . . . . . . . . . . . . . . . . . . . . . . . . 1200

SAP IQ Cockpit
Content

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

11

Troubleshoot SAP IQ Cockpit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1203

7.1

Browser Refresh (F5) Causes Logout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1203

7.2

Cannot Change Another User's Password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1204

7.3

Cannot Validate an IQ (Catalog) System Store Table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1204

7.4

Cockpit Fails to Start. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1204

7.5

Data Collections Fail to Complete. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1205

7.6

Database Definition is Invalid. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1205

7.7

Fatal Error #2035 Prevents Successful Log in. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1206

7.8

Feature Disabled on the SAP IQ Cockpit Console Task Menu. . . . . . . . . . . . . . . . . . . . . . . . . . . . 1206

7.9

Login Fails After Having Your Password Changed by Another User. . . . . . . . . . . . . . . . . . . . . . . .1207

7.10

Login Fails when Selecting a Chinese or Japanese SAP IQ Server. . . . . . . . . . . . . . . . . . . . . . . . . 1207

7.11

Login Fails when Entering Valid Credentials. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1208

7.12

Multiplex and Logical Servers Are Missing on Login Dropdown List. . . . . . . . . . . . . . . . . . . . . . . 1209

7.13

Multiplex Connection Disallowed by Login Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1209

7.14

Node Fails to Restart when High Availability Is Enabled. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1209

7.15

Out of Memory Errors. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1210

7.16

Performance Statistics Do Not Cover Enough Time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1210

7.17

SQL Anywhere Error -131 Appears When Changing A User's Password. . . . . . . . . . . . . . . . . . . . . 1211

12

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Content

About SAP IQ Cockpit

SAP IQ Cockpit is a Web-based tool for managing and monitoring SAP IQ single-node and multiplex servers.
SAP IQ Cockpit provides availability, historical, and real-time monitoring in a scalable Web application. It also
offers real-time notification of availability and performance, and intelligent tools for spotting performance and
usage trends, all via a thin-client, rich Internet application delivered through your Web browser.
SAP IQ Cockpit supports SAP IQ version 15.3 or later.
The SAP IQ Cockpit architecture allows a single SAP IQ Cockpit server to monitor SAP IQ servers on a single
host or in an enterprise using the SAP IQ Cockpit agent.

Related Information
User Interface Overview [page 13]
Sorting Columnar Data [page 14]
Keyboard Shortcuts [page 16]
Displaying the Versions of the SAP IQ Cockpit Components [page 17]
Style and Syntax Conventions [page 18]
SAP IQ Cockpit Accessibility Information [page 19]

1.1

User Interface Overview

Important elements of the SAP IQ Cockpit user interfaced referenced in other help topics.

SAP IQ Cockpit
About SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

13

1.2

Sorting Columnar Data

You can sort and organize data displayed in grid format.

Note
Sorting is case-sensitive. A descending sort lists numbers, then uppercase, then lowercase.

Column Options
On the MONITOR and EXPLORE worksets, for data displayed in grid format, you can rearrange and sort
columns.
Sorting Option

Description

Simple sorts

Click column name to sort based on that column in ascending or descending


order. The arrow in the tab (right of column name) points to the sort order.

Reversing sort order

Click column sort tab to reverse order.

Nesting sorts

Click column name for the primary sort. For subsidiary sorts, click column sort
tab (not column name). Choose the subsidiary sort columns in the order to ap
ply. After clicking a sorting tab, its sorting level appears (1 for the primary sort,
2 for the secondary sort, and so on). Click any column name to clear the nested
sort.

14

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
About SAP IQ Cockpit

Sorting Option

Description

Rearranging columns

Move columns by dragging and dropping them.

Columns retain their sort order until you exit SAP IQ Cockpit.
The figure below shows a list of tables sorted first by dbspace; within dbspace by owner; and within owner by
name. Both columns sort in descending order.

Note
IQ_SYSTEM_MAIN is listed before d1 due to case sensitivity.

Figure 1: Tables Sorted By Dbspace, Then Owner, Then Name

Filter by Column

There is a filtering field at the top of each column to narrow the range of objects displayed. Delete the filtering
terms to return to the original display. Filtering terms are not case-sensitive. For example:
Enter the name of an owner at the top of the Owner column to display only the tables owned by that name.
The display reacts as you enter each character, so you might not need to enter the entire name.
Enter a name at the top of the Dbspace column to display only tables residing in the specified dbspace,
owned by the specified owner.

Figure 2: Filter the Output to a Specific Owner and Dbspace

SAP IQ Cockpit
About SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

15

Maximize an Area on a Page

Some areas on a page have a square minimize or maximize icon (


) in the upper-right corner. Click the icon
to expand that area to its maximum size. Click the icon again to restore the area to its former size.
Once an area is maximized, it retains its maximized state, even when changing tabs, until you exit SAP IQ
Cockpit.

Change the Font Size

To change the size of fonts in SAP IQ Cockpit screens:


Enter Ctrl-Alt + to enlarge display fonts.
Enter Ctrl-Alt - to shrink display fonts.
The font change applies to the SAP IQ Cockpit interface, and persists even after exiting SAP IQ.

1.3

Keyboard Shortcuts

Shortcut key sequences available for the SAP IQ Cockpit Web interface.
Key Sequence
Space bar

Escape

Action

Opens and closes the list after pressing Tab to navigate to menu item or button
with a dropdown list.

Expands and collapses a node in the left pane.

In a wizard or property window, selects or deselects the item after navigating


to a check box.

In a wizard or dialog box, applies the highlighted button (for example, Yes, No,
Back, Next, Apply, Finish, or Cancel).

Releases a dropdown list.

On the MONITOR workset, closes the errors window after clicking the errors
link at the bottom right of the window.

In a multiplex, closes the Monitor window after expanding

IQ Servers

Multiplex Management Multiplex Server , selecting a node in the right


pane, clicking Actions, and selecting Monitor.

16

Closes most, but not all wizards before completion.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
About SAP IQ Cockpit

Key Sequence
Arrow keys

Tab

Shift-Tab

Home

End

Action

Highlights the next item in a list or menu in the indicated direction.

Highlights the next radio button in a list in the indicated direction.

In the left pane, left and right arrows expand and collapse a node.

In a table with column searching, with the cursor positioned in the first row, up
arrow twice accesses the Column Search row. Left and right arrows move be
tween columns. Down arrow twice exists the Column Search row and returns
to the list.

Highlights the next item in the tab order. (Tab order progresses through the
accessible fields in a left-to-right, top-to-bottom fashion, starting at the upper
left.)

In a two-pane window, moves to the next pane.

In a window that includes a table or grid display, Tab twice highlights the table.
Press down arrow to enter it.

Highlights the previous item in the tab order. (Tab order progresses through
the accessible fields in a bottom-to-top, right-to-left, fashion, starting at the
bottom right.)

In a two-pane window, moves to the previous pane.

Highlights the first item in the active window (or the active section of a win
dow). For example, the first row in a list.

In the left pane, highlights the first node.

Highlights the last item in the active window (or the active section of a win
dow). For example, the last row in a list.

In the left pane, highlights the last node.

Ctrl-Alt +

Increases the size of displayed text. Change persists to future sessions.

Ctrl-Alt -

Decreases the size of displayed text. Change persists to future sessions.

F11

(Internet Explorer only) Enables or disables the browsers full-screen mode.

SAP IQ Cockpit is built on Adobe Flex. For complete information about Adobe Flex keyboard shortcuts, see
http://livedocs.adobe.com/flex/3/html/help.html?content=accessible_5.html .

1.4

Displaying the Versions of the SAP IQ Cockpit


Components

View a list of components installed in SAP IQ Cockpit and their versions.

Context
Check the versions of the components in your SAP IQ Cockpit installation to determine whether your
installation is up to date. Refer to online release information for the specific supported product component
versions.

SAP IQ Cockpit
About SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

17

Procedure
1. Log in to SAP IQ Cockpit and select About.
2. Compare the installed component versions against the versions published in the online release
information.

1.5

Style and Syntax Conventions

A reference for the fonts and special characters used to represent elements of system output and user input.
A placeholder represents a system- or environment-specific value that you supply. For example:
%SYBASE%\start.bat
where %SYBASE% is the path to where the application is installed.
Table 1: Style Conventions
Definition

Key

monospaced (fixed-width)

<italic monospaced>
<italic>

bold

SQL and program code

Commands names

File names

Directory names

In SQL or program code snippets, placeholders for user-specified values.

File and variable names

Cross-references to other topics or documents

In text, placeholders for user-specified values

Command, function, stored procedure, utility, class, and method names

Menu option paths

In numbered task or procedure steps, user-interface (UI) elements that you


click, such as buttons, check boxes, icons, and so on

Table 2: Syntax Conventions


Key

Definition

{}

Curly braces indicates you must choose at least one of the enclosed options. Do not type the braces
when you enter the command.

[]

Brackets indicate that choosing one or more of the enclosed options is optional. Do not type the
brackets when you enter the command.

()

Parentheses are to be typed as part of the command.

The vertical bar indicates you can only select one of the options shown.

18

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
About SAP IQ Cockpit

Key

Definition

The comma indicates you can include as many of the options shown as needed, separating your
choices with commas within the command.

...

An ellipsis (three dots) indicates you may repeat the last unit as many times as needed in the com
mand. Do not include ellipses in the command.

1.6

SAP IQ Cockpit Accessibility Information

SAP IQ Cockpit uses the Adobe Flex application.


For the most current information about Adobe Flex keyboard shortcuts, see http://livedocs.adobe.com/
flex/3/html/help.html?content=accessible_5.html .

SAP IQ Cockpit
About SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

19

Get Started with SAP IQ Cockpit

Start and configure the SAP IQ Cockpit server and launch the SAP IQ Cockpit console.

Related Information
Start and Stop the SAP IQ Cockpit Server [page 20]
COCKPIT_MONITOR Script [page 30]
SAP IQ Cockpit Console [page 32]
Logging Out of the SAP IQ Cockpit [page 35]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]
Technical User [page 38]

2.1

Start and Stop the SAP IQ Cockpit Server

You can start SAP IQ Cockpit server manually or set the service to start automatically and to restart in case of
failure.
If you elect to run the SAP IQ Cockpit server manually, you must issue a command every time you want to start
or shut down the server. If you elect to run as a service (recommended), you can configure the service to start
and restart automatically.
When you install the SAP IQ Cockpit in Windows, the installer offers you the option to set up the cockpit to run
as a service. If you want the cockpit to run as a service (daemon) in UNIX, you must set up the service yourself.
Regardless of the start method used, wait at least five minutes after startup to log in to the SAP IQ Cockpit.
Startup triggers automatic discovery, technical user verification, and collection jobs. Competing with these
processes may cause unexpected behavior.

Related Information
Starting and Stopping the SAP IQ Cockpit Server in Windows [page 21]
Starting and Stopping the SAP IQ Cockpit Server in UNIX [page 22]
Configuring SAP IQ Cockpit Server as a Windows Service [page 23]
Configuring SAP IQ Cockpit Server as a UNIX Service [page 25]
cockpit Command [page 26]

20

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

2.1.1 Starting and Stopping the SAP IQ Cockpit Server in


Windows
When you run SAP IQ Cockpit server manually, issue a command every time you start or shut down.

Prerequisites
Ensure that your home directorythat is, the home directory of the user who starts SAP IQ Cockpitis
writable from the SAP IQ Cockpit host. If the starting user cannot write to the home directory, SAP IQ Cockpit
logs an error and fails to launch. Resetting the users HOME environment variable to a writable directory does
not solve the problem.

Context

Note
If you are starting SAP IQ Cockpit server for the first time in Windows 2008, Windows 7, or Windows 8, use
the Run as Administrator option so that SAP IQ Cockpit can register its ODBC driver. (This is necessary
even if you are logged in as an administrator.)

Procedure
1. To start the SAP IQ Cockpit server, execute:
%SYBASE%\COCKPIT-4\bin\cockpit.bat
2. To stop SAP IQ Cockpit, at the cockpit> prompt, execute:
shutdown
At the prompt, enter a text reason for the shutdown.

Caution
Do not enter shutdown at a Windows prompt; it shuts down the operating system.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

21

2.1.2 Starting and Stopping the SAP IQ Cockpit Server in


UNIX
When you run SAP IQ Cockpit server manually, issue a command every time you start or shut down.

Prerequisites
Ensure that your home directorythat is, the home directory of the user who starts SAP IQ Cockpitis
writable from the SAP IQ Cockpit host. If the starting user cannot write to the home directory, SAP IQ Cockpit
logs an error and fails to launch. Resetting the users HOME environment variable to a writable directory does
not solve the problem.

Context
You can start the SAP IQ Cockpit server in the foreground or background. When you run SAP IQ Cockpit server
in the background, you can use nohup, &, and > to redirect output and system error to a file, and suppress the
SAP IQ Cockpit server console.

Procedure
1. Set the environment variables. Do this only once.
a. Change to the parent of the SAP IQ Cockpit installation directory.
b. Execute one of the following to set environment variables.
Bourne shell:
. SYBASE.sh
C shell:
source SYBASE.csh
2. To start the SAP IQ Cockpit server, do one of:
Option

Description

In the fore
ground

Execute:

$SYBASE/COCKPIT-4/bin/cockpit.sh
In the back
ground

22

Execute a command similar to the sample below that matches your shell. The sample command
directs output to the file cockpit-console.out. If the output file already exists, you might
need to use additional shell operators to append to or truncate the file.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

Option

Description
Bourne shell (sh) or Bash

nohup ./cockpit.sh 2>&1 > cockpit-console.out &


C shell

nohup ./cockpit.sh >& cockpit-console.out &


3. To stop the SAP IQ Cockpit server:
Option

Description

Running in the
foreground

At the cockpit> prompt, execute:

shutdown
At the prompt, enter a text reason for the shutdown.

Caution
Do not enter shutdown at a UNIX prompt; it shuts down the operating system.
Running in the
background

At the UNIX command line, execute:

$SYBASE/COCKPIT-4/bin/cockpit.sh --stop

2.1.3 Configuring SAP IQ Cockpit Server as a Windows


Service
You can set the service to start automatically and to restart in case of failure. SAP recommends running SAP
IQ Cockpit as a service.

Prerequisites
Ensure that your home directorythat is, the home directory of the user who starts SAP IQ Cockpitis
writable from the SAP IQ Cockpit host. If the starting user cannot write to the home directory, SAP IQ Cockpit
logs an error and fails to launch. Resetting the users HOME environment variable to a writable directory does
not solve the problem.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

23

Context
If you run SAP IQ Cockpit server as a service, you can still manually start and stop the service, as needed. By
default, if you install SAP IQ Cockpit to run as a service, the service is configured to automatically start, but not
automatically restart. You must configure this manually.

Procedure
1. To configure automatic restart:
a. In Windows Control Panel, open

System and Security

Administrative Tools

Services .

b. Click the Recovery tab and change the First, Second, and Subsequent failures to Restart the Service.
c. Click OK.
2. To manually start the service:
Option

Description

In the
Select the cockpit service and click Start.
Services
window
At a
com
mand
line

Execute:

net start "Cockpit 4.0"


The Cockpit 4 service is starting...... The Cockpit 4 service was
started successfully.

3. To manually stop the service:


Option

Description

In the Services window Select the cockpit service and click Stop.
At a command line

Execute:

net stop "Cockpit 4.0"


The Cockpit 4 service is stopping...... The Cockpit 4 service
was stopped successfully.

24

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

2.1.4 Configuring SAP IQ Cockpit Server as a UNIX Service


You can set the service to start automatically and to restart in case of failure. SAP recommends running SAP
IQ Cockpit as a service.

Prerequisites
Ensure that your home directorythat is, the home directory of the user who starts SAP IQ Cockpitis
writable from the SAP IQ Cockpit host. If the starting user cannot write to the home directory, SAP IQ Cockpit
logs an error and fails to launch. Resetting the users HOME environment variable to a writable directory does
not solve the problem.

Context
A UNIX service is a daemon process that starts automatically after the machine is started and runs in the
background. UNIX installations of SAP IQ Cockpit server include a shell script, cockpitd, located at
<sap_install_directory>/COCKPIT-4/bin, which you can use to configure the SAP IQ Cockpit service.
(Some UNIX platforms supply tools that make service configuration easier; Linux chkconfig is an example.)

Note
SAP recommends that if you are not familiar with setting up services in UNIX, you delegate this task to a
system administrator or consult the system administration documentation for your UNIX platform.

Procedure
1. Open cockpitd and make these changes:
Change the line that sets the SYBASE variable to the location of your SAP installation (that is, the
parent directory of COCKPIT-4, the SAP IQ Cockpit installation directory). By default, this directory is
called /opt/Sybase if you installed SAP IQ Cockpit on a machine with an existing Sybase or SAP
Sybase product or environment variable; otherwise the default parent directory is /opt/sap.
Set the COCKPIT_HOME environment variable to <sap_install_directory>/COCKPIT-4.
Copy cockpitd to /etc/init.d.
If you are using shared-disk mode to run a single instance whose name is not the host name, or to run
multiple instances on the same host, add the instance name to the script name. Change:
SCRIPT_NAME=cockpit.sh
to:
SCRIPT_NAME="cockpit.sh -instance <instance-name>"

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

25

2. In Linux:
a. Discover the location of chkconfig by running one of these commands:
whereis chkconfig
or
which chkconfig
b. In Linux, configure the service to run in run levels 2, 3, 4, and 5. Execute:
/sbin/chkconfig --add cockpitd
/sbin/chkconfig cockpitd 2345
You can test the cockpitd script with /sbin/service cockpitd status. (The service
command accepts these options: start | stop | status | restart.) For example, to start the
Cockpit, enter /sbin/service cockpitd start.
3. In Solaris:
a. Create soft links. Locate this directory:
/etc/rc<X>.d
Where <X> is the run level (for example, 3). Make two soft links in the directory for Solaris and set the
links to point to:
/etc/init.d/cockpitd: S90cockpitd, and
/etc/init.d/cockpitd: K10cockpitd
The S90cockpitd link starts the service and the K10cockpitd link stops the service. The two-digit
numbers in the links indicate the start and stop priorities of the service.
b. Use the S90cockpitd and K10cockpitd links to test starting and stopping the service. The links are
called automatically when the machine is started or shut down.

2.1.5 cockpit Command


Use cockpit.bat (Windows) or cockpit.sh (UNIX) to manually start and stop SAP IQ Cockpit servers and
to perform administrative tasks like configuring ports and enabling and disabling services.
A single cockpit server can manage other SAP database products if they reside on the same host. The cockpit
server shares ports and other resources, and the cockpit command enables all installed plugins.
Use the instance command to manage multiple server instances from the same Cockpit installation
directory.

Syntax
cockpit[.bat | .sh] [-a | --address <RMI-service-address>]
[-b | --bitwidth]
[--dbpassword]
[-disable | --disable <service-name,service-name...>]
[-enable | --enable <service-name,service-name...>]

26

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

[-h | --help]
[-I | --info [<information-category>]]
[-instance [<instance-name>]]
[-m | --message <message-level>]
[-password | --password <password>]
[-p | --port {<port-name>=<port-number> |
<service-name>:<property-name>=<port-number>}]
[{-start | --start} | {-stop | --stop}]
[-status | --status]
[-user | --user <login-name>]
[-v | -version | --version]

Parameters
-a | --address RMI-service-address The address for the RMI service to use; must be an IP address on this
machine or the name of this machine (which is the default).
-b | --bitwidth Return an informational only string identifying the bit width (32 or 64) of the underlying
platform. If you use this option, the cockpit command does not start the SAP IQ Cockpit.
--dbpassword Change the password of the default dba account provided for the repository database. It
prompts you for the new password, validates it, and starts the SAP IQ Cockpit server. This option does not
work if you start the SAP IQ Cockpit in the backgroundit fails to start if there is no console.
-disable | --disable service-name,service-name... Disable the specified services. This option does not
work while SAP IQ Cockpit is running or as part of a command that starts the SAP IQ Cockpit. To use it,
shut down the SAP IQ Cockpit, execute cockpit --disable, then restart. See under --ports for service
names; separate each service from the next with a comma.
-enable | --enable service-name,service-name... Enable the specified services. Separate each service
from the next with a comma. When you use this option, cockpit does not start SAP IQ Cockpituse a
separate command to start the SAP IQ Cockpit.
-h | --help Display help and usage information for the cockpit command. If you use this option, cockpit
does not start SAP IQ Cockpit.
-I | --info [information-category] Display the specified categories of information about SAP IQ Cockpit.
Separate each category from the next with a comma. The information categories are:
all Returns all the information provided by the sys, ports, and services categories. Default option.
sys Returns general information about this instance of SAP IQ Cockpit, including the version, the
home (installation) directory, the host machines name and IP address, the RMI port number, the
messaging level, and details about the platform and Java installation.
ports Lists all the ports on which the SAP IQ Cockpit and its services listen, indicates whether each
port is in use, and shows the service running on each port.
services Lists all the services known to the SAP IQ Cockpit, indicates whether each service is enabled,
and lists other services on which each service depends.
sysprop Lists all the Java system properties known to the Java VM and their values.
env Lists the complete Java VM process environment.
-instance [instance-name] Use with other options (-start and -stop, for example) to specify an
instance in a shared disk deployment. If you do not enter a name for the instance, it defaults to the host
name.
-m | --message message-level Set the amount of detail recorded in system logs; also known as the
logging level. Valid values are OFF, FATAL, ERROR, WARN, INFO, DEBUG, and ALL. WARN is the default.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

27

-password | --password Specify the password of the user account SAP IQ Cockpit uses to stop servers or
query them for status. Use this option with --user. When you enter a command with --user but without
--password, the console prompts you to enter a password.
-p | --port {port-name=port-number | service-name:property-name=port-number} Configure the
specified service to run on the specified port. Changing ports is useful if you discover a port conflict
between SAP IQ Cockpit and other software on the same system. When you use this option, cockpit
does not start SAP IQ Cockpituse a separate command to start the SAP IQ Cockpit.
Valid port names, service names and property names are:
Port Name

Description

Service Names

Property Names

Default Port

db

Database port

SccSADataserver

com.sybase.asa.server.port

4638

Messaging

messaging.db.port

Alert

alert.database.port

http

Web HTTP port

EmbeddedWebContainer

http.port

4282

https

Web HTTPS (secure

EmbeddedWebContainer

https.port

4283

HTTP) port
msg

Messaging port

Messaging

messaging.port

4993

rmi

RMI port

RMI

port

4992

tds

Tabular Data Stream

Tds

tdsPort

4998

port (used to communi


cate with other SAP da
tabase products)

You can also execute cockpit --info ports to display service names and associated property names;
they appear in the first two columns of the output.
-start | --start Start the SAP IQ Cockpit. This is the default optionif you execute cockpit with no
options, it starts the SAP IQ Cockpit. This option cannot be combined in the same command with options
that set ports or enable or disable services; use a separate cockpit command to start the SAP IQ
Cockpit.
-status | --status Display a status message indicating whether the SAP IQ Cockpit is running.
-stop | --stop Shut down the SAP IQ Cockpit if it is running.
-user | --user [login-name] Specify the user account SAP IQ Cockpit uses to stop managed servers or
query them for status. Use this option with --password. If you do not enter a login name, the console
prompts you to enter one.
-v | -version | --version Display the version of SAP IQ Cockpit software running on this system. If you use
this option, cockpit does not start SAP IQ Cockpit.

28

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

Examples
Set the RMI port
Each of these commands sets the RMI port to 5992. The first command demonstrates the port name
syntax; the second demonstrates the service name:property name syntax:
cockpit --port rmi=5992
cockpit --port RMI:port=5992
Set the RMI port and start SAP IQ Cockpit
These commands set the RMI port to 9996, then start the SAP IQ Cockpit. Two commands (separated by
a semicolon here) are needed because cockpit does not start the SAP IQ Cockpit when the command
includes any of the port-setting options:
cockpit -p rmi=9996; cockpit
Set all database ports
This command sets all three of the repository database ports (data server, messaging, and database alert)
to 3638:
cockpit --port db=3638
Set the TDS port
This command sets the TDS port to 9998:
cockpit --port Tds:tdsPort=9998
Enable a service and start the SAP IQ Cockpit
The first cockpit command enables the TDS service; the second starts the SAP IQ Cockpit. (The two
commands are separated by a semicolon.) The second command is needed because cockpit does not
start SAP IQ Cockpit when the command includes the -enable option:
cockpit -enable Tds; cockpit
Start an SAP IQ Cockpit instance
This command starts the SAP IQ Cockpit instance called kalamazoo. -start is optional because it is the
default:
cockpit -start -instance kalamazoo

Permissions
None required.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

29

Related Information
Shared-Disk Mode [page 216]

2.2

COCKPIT_MONITOR Script

Run the script to create the COCKPIT_MONITOR and COCKPIT_ADMIN roles (16.x) or groups (15.x) needed to
manage a system with the SAP IQ Cockpit console. It also creates the login policy required for the technical
user account.
You must be a member of the COCKPIT_MONITOR role or group to view statistics on the MONITOR workset.
Without membership or privilege, a red X appears at the bottom of each statistics page. Details of the error
indicate access is denied.
You must be a member of the COCKPIT_ADMIN role to perform administrative SAP IQ Cockpit tasks or
configure alerts.
Execute the COCKPIT_MONITOR script on the managed system before logging in for the first time.

Note
The COCKPIT_MONITOR role or group replaces the (deprecated) SCC_MONITOR role or group.
Do not run the script against the SAP IQ utility server.

Related Information
Executing the SAP IQ Cockpit Roles Script for a Role-Based [page 30]
Executing the SAP IQ Cockpit Groups Script for an Authority-Based [page 31]

2.2.1 Executing the SAP IQ Cockpit Roles Script for a RoleBased


(For 16.x systems only) Enable users or roles to monitor SAP IQ databases or administer SAP IQ Cockpit.

Prerequisites
Requires the MANAGE ROLES, MANAGE ANY USER and MANAGE ANY OBJECT PRIVILEGE system privileges.
Also requires administrative rights over the MONITOR system privilege.

30

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

Procedure
1. Using Interactive SQL or another SQL command tool, connect to a role-based SAP IQ server.
2. Execute the cockpit_monitor_role_based_privileges_setup.sql script, located at:
Windows

%SYBASE%\COCKPIT-4\plugins\IQ-CMAP

UNIX

$SYBASE/COCKPIT-4/plugins/IQ-CMAP

Next Steps
Grant users requiring access to the Cockpit Settings option membership in the COCKPIT_ADMIN role.
Grant users needing to monitor the SAP IQ managed system membership in the COCKPIT_MONITOR role.

Note
Users granted the MONITOR system privilege do not require membership in the COCKPIT_MONITOR
role to view statistics on the MONITOR workset.

Related Information
Adding a Grantee to a User-Extended Role [page 840]

2.2.2 Executing the SAP IQ Cockpit Groups Script for an


Authority-Based
(For 15.x systems only) Enable users or groups to monitor SAP IQ databases or administer SAP IQ Cockpit.

Prerequisites
Requires DBA authority.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

31

Context
Note
Users granted DBA authority do not require membership in the COCKPIT_MONITOR group to view
statistics.

Procedure
1. Using Interactive SQL or another SQL command tool, connect to an authority-based SAP IQ server.
2. Execute the cockpit_monitor_authority_based_privileges_setup.sql script, located at:
Windows

%SYBASE%\COCKPIT-4\plugins\IQ-CMAP

UNIX

$SYBASE/COCKPIT-4/plugins/IQ-CMAP

Next Steps
Grant users requiring access to the Cockpit Settings option membership in the COCKPIT_ADMIN group.
Grant users needing to monitor the SAP IQ managed system membership in the COCKPIT_MONITOR
group.

Note
Users granted DBA authority do not require membership in the COCKPIT_MONITOR role to view
statistics on the MONITOR workset.

Related Information
Adding Authority-Based Users and Groups to Groups [page 769]
Creating the Technical User for an Authority-Based System [page 41]

2.3

SAP IQ Cockpit Console

Allows you to managed any SAP IQ server running on the SAP IQ Cockpit server host.
To manage a multiplex environment, at least one of the nodes must be running on the SAP IQ Cockpit server
host.

32

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

Starting the SAP IQ Cockpit server triggers automatic discovery of any SAP IQ servers running on the SAP IQ
Cockpit host and lists them in the System field on the SAP IQ Cockpit console login page. Once discovered, a
server remains on the list, even when not running. A server must be running to log in.
For new SAP IQ installations where no SAP IQ server exists, log in to the utility server using SAP IQ Cockpit to
create a new server.

Related Information
Logging In to the SAP IQ Cockpit Console [page 33]
SAP IQ Utility Server [page 34]

2.3.1 Logging In to the SAP IQ Cockpit Console


Connect to the SAP IQ Cockpit console using a Web browser.

Prerequisites
Adobe Flash Player is installed in the browser you are using for SAP IQ Cockpit.
The SAP IQ Cockpit server is running.
At least one SAP IQ server or the SAP IQ utility server is running on the SAP IQ Cockpit host.

Procedure
1. Open a Web browser and enter: .
https://<hostname>:4283/cockpit

Note
Port 4283 is the default port. If you specified a different port during installation, substitute the custom
port number. To verify the defined port, type info -p in the console window on the SAP IQ Cockpit
server.
2. At the login prompt, select the system to manage and enter a valid SAP IQ user name and password.

Note
If a Login Failed message appears for the selected system, see Troubleshoot SAP IQ Cockpit > Login
Fails when Entering Valid Credentials.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

33

2.3.2 SAP IQ Utility Server


The utility server is a special database that has no physical representation and can contain no data.
For new SAP IQ installations, if no server is discovered by the SAP IQ Cockpit server, you cannot log in to the
SAP IQ Cockpit. If you cannot log in, you cannot use the Create Database wizard to create your initial server.
For this scenario only, start the SAP IQ utility server and then log in to the SAP IQ Cockpit using the utility
server.

Note
When logged in to the utility server, functionality in the SAP IQ Cockpit console is limited to the Create
Database wizard only. All other functionality is either unavailable or generates error messages if accessed.

Related Information
Starting the SAP IQ Utility Server [page 34]
Logging On to the SAP IQ Utility Server [page 35]

2.3.2.1

Starting the SAP IQ Utility Server

The SAP IQ utility server must be running before you can use it to log in to the SAP IQ Cockpit console and
should be stopped immediatly after createing the initial SAP IQ database.

Context
The utility server has no default password. It uses a temporary password which you define during startup. The
password is valid only for the duration the utility server is running. A new password must be defined each time
the utility server is started.

Procedure
1. To start the utility server, execute:
Option
Windows

34

Action

%SYBASE%\IQ-16_0\bin64\cockpitutildb.bat

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

Option

Action

Linux

$SYBASE/IQ-16_0/Bin64/cockpitutildb.sh

2. Specify a temporary password for the utility server.

2.3.2.2

Logging On to the SAP IQ Utility Server

You should log in to SAP IQ Cockpit using the SAP IQ utility server only to create the first SAP IQ server in a
new SAP IQ installation.
When logged in using the SAP IQ utility server, functionality in the SAP IQ Cockpit console is limited to the
Create Database wizard only. All other functionality is either unavailable or generates error messages if
accessed.
The default user name for the utility server is DBA (case insensitive). Use the password defined during
database startup.

Related Information
Creating a Database [page 413]
Creating a Database Using a CSV File [page 416]

2.4

Logging Out of the SAP IQ Cockpit

Click Log Out in the upper-right corner of the window to end the session.

Context
If an administrator has configured the automatic logout feature, SAP IQ Cockpit logs you out if your session is
idle (no typing or mouse movement) for longer than the timeout period.
If no automatic logout period is configured,
A login session left open on a screen that refreshes (a monitor screen or a data collection job screen, for
example) remains open indefinitely.
A login session left open on a screen that does not change expires after 30 minutes. The next time you
make a request of the server, SAP IQ Cockpit logs you out.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

35

2.5

Registering and Authenticating an SAP IQ Cockpit


Agent

Register and authenticate the SAP IQ Cockpit agent for a managed server.

Context
The SAP IQ Cockpit agent runs on a managed server and is installed automatically as part of the SAP IQ
server.
To perform certain administrative tasks, including starting and stopping an SAP IQ server, synchronizing
(multiplex), and adding secondary nodes, you must register and authenticate the servers SAP IQ Cockpit
agent.
Registration and authentication must be done once on each managed simplex. In a multiplex environment, it
must be performed once on each node.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, do either:
Option

Description

Simplex

Click IQ Servers.

Multiplex

Expand

IQ Servers

Multiplex Management

, and then click Multiplex Servers.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Register Agent.
5. Enter the IQ server host name and agent port (the default port is 4992) and click OK.
6. Reselect the item and display the menu.
7. Select Authenticate Agent.

Note
The Authenticate Agent option is unavailable if the agent has not been successfully registered.
8. Depending on your database version, do one of the following:

36

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

Option

Description

For 15.x Enter the SAP IQ Cockpit agent user (default is uafadmin or sccadmin) and password (by default, there
is no passwordleave the field blank).
For 16.0 Enter the SAP IQ Cockpit agent user (default is uafadmin or sccadmin) and password (default is
Sybase4me).

Next Steps
For instructions on changing the password for the SAP IQ Cockpit agents default uafadmin account, see
Changing the Uafadmin Password

Related Information
Viewing SAP IQ Cockpit Agent Connection Information [page 37]
Changing the SCCADMIN Password [page 238]
Creating the Technical User for an Authority-Based System [page 41]

2.5.1 Viewing SAP IQ Cockpit Agent Connection Information


Display read-only connection information for the SAP IQ Cockpit agent.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, do either:
Option

Description

Simplex

Click IQ Servers.

Multiplex

Expand

IQ Servers

Multiplex Management

, and then click Multiplex Servers.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Agent.
6. Select Agent from the left pane.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

37

The agent connection properties are:


Property

Description

Cockpit agent registered

Indicates if the SAP IQ Cockpit agent is registered: true


or false.

Cockpit agent authenticated

Indicates if the SAP IQ Cockpit agent is authenticated:


true or false.

Cockpit agent status

Status of the SAP IQ Cockpit agent: Running, Stopped,


Unknown.

Cockpit agent host

Name of the host machine on which the SAP IQ Cockpit


agent is running.

Cockpit agent port

Port number on the host machine the SAP IQ Cockpit


agent is running. Default is 9999.

Cockpit agent user

User name for authentication of the agent. Default is


uafadmin or sccadmin.

Cockpit agent process owner

User who owns the agent process.

Cockpit agent home

Home directory of the SAP IQ Cockpit agent.

Cockpit agent version

Version of the SAP IQ Cockpit agent.

Cockpit agent plugin version

Agent plugin version of the SAP IQ Cockpit agent.

IQ directory

Installation directory of the SAP IQ server with which the


SAP IQ Cockpit agent is associated.

IQ version

Version of the SAP IQ server with which the SAP IQ Cock


pit agent is associated.

2.6

Technical User

A dedicated account used for creating and scheduling collection jobs and monitoring, and triggering alerts
based on predefined thresholds.
There are two parts to the account: the SAP IQ part and the SAP IQ Cockpit part. Both parts are created using
the Create User wizard. The technical user account must have a password and be assigned to the
IQC_TECHNICAL_USER_POLICY login policy.

Note
Do not use the CREATE USER statement to create the account as it does not create this SAP IQ Cockpit
part.
Create a technical user in each managed SAP IQ system. Once created, the technical user cannot be deleted
and should not be modified, as modifications are not updated to the SAP IQ Cockpit part.
The technical user should not be used as a login account. It is recommended that you disable the account in
SAP IQ Cockpit. See Disabling and Enabling a User in SAP IQ Cockpit.
For a multiplex, you must be logged in to the multiplex system when creating the technical user account.

38

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

Related Information
Creating the Technical User for a Role-Based System [page 39]
Creating the Technical User for an Authority-Based System [page 41]
Disabling and Enabling a User in SAP IQ Cockpit [page 232]

2.6.1 Creating the Technical User for a Role-Based System


Create the account under which collections and alerts run.

Prerequisites
You have MANAGE ANY USER system privilege.
The IQC_TECHNICAL_USER_POLICY login policy exists (created by the SAP IQ Cockpit roles script).
The SAP IQ system is running, registered, and authenticated.
You are not logged in to the SAP IQ utility server.
In a multiplex configuration, the coordinator is running.
In a multiplex, you are logged on to the multiplex system, not a node within the multiplex (for example, the
coordinator).
The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

39

Property

Description

Select a resource on which the user will be created

Select a system.

Note
If the selected system does not support the selected
security mode (role-based or authority-based), an er
ror message appears.
What do you want to name the new user?

Enter a unique user ID..

Create as technical user

Select to create a technical user.

6. On the Specify a Password page:


Property

Description

Enable password

Select to define a password. The technical user account


must have a password defined.

Password

Create a strong user password. Characters appear as as


terisks.

Confirm password

Confirm the password. The contents of the two password


fields must match exactly.

Login policy

Select IQC_TECHNICAL_USER_POLICY, if not displayed.


This is the only valid login policy for the technical user.

7. Click Finish.

Note
Do not assign any roles or system privileges to the technical user.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]
Executing the SAP IQ Cockpit Roles Script for a Role-Based [page 30]

40

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

2.6.2 Creating the Technical User for an Authority-Based


System
Create the account under which collections and alerts run.

Prerequisites
One of:
DBA authority
Both USER ADMIN and PERMS ADMIN authorities
The IQC_TECHNICAL_USER_POLICY login policy exists (created by the SAP IQ Cockpit groups script).
The SAP IQ system is running, registered, and authenticated.
You are not logged in to the SAP IQ utility server.
In a multiplex configuration, the coordinator is running.
In a multiplex, you are logged on to the multiplex system, not a node within the multiplex (for example, the
coordinator).
The selected SAP IQ system supports authority-based security.

Context
All new users are automatically added to the PUBLIC group.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

41

Property

Description

Select a resource on which the user will be created

Select a system.

Note
If the selected system does not support the selected
security mode (role-based or authority-based), an er
ror message appears.
What do you want to name the new user?

Enter a unique user ID..

Create as technical user

Select to create a technical user.

6. On the Specify a Password page:


Property

Description

Enable password

Select to define a password. The technical user account


must have a password defined.

Password

Create a strong user password. Characters appear as as


terisks.

Confirm password

Confirm the password. The contents of the two password


fields must match exactly.

Login policy

Select IQC_TECHNICAL_USER_POLICY, if not displayed.


This is the only valid login policy for the technical user.

7. Click Finish.

Note
Do not assign any authorities to the technical user.

Related Information
Executing the SAP IQ Cockpit Groups Script for an Authority-Based [page 31]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

42

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Get Started with SAP IQ Cockpit

Configure SAP IQ Cockpit

There are several options available to configure SAP IQ Cockpit.

Note
These additional options are over and above the minimum configuration described in Get Started with SAP
IQ Cockpit.

Related Information
SAP IQ System Privilege and Authority Summary Reference [page 43]
Configuring the E-mail Server [page 188]
Configuring Retrieval Thresholds for SAP IQ Cockpit [page 189]
Configuring the Automatic Logout Timer [page 190]
Collection Jobs [page 190]
Repository [page 203]
Logging [page 209]
Shared-Disk Mode [page 216]
Configuring Ports [page 226]
Configuring Memory Usage [page 228]
SAP IQ Cockpit User Management [page 231]
SAP IQ Cockpit Console [page 235]
Changing the SCCADMIN Password [page 238]

3.1

SAP IQ System Privilege and Authority Summary


Reference

In SAP IQ, specific system privileges (16.0 and later) or authorities (15.3 and 15.4) are required to perform
many tasks. These privileges or authorities can be granted directly to a user or can be granted indirectly to a
role (16.0 and later) or group (15.3 and 15.4) of which the user is a member. This reference summarizes the
privileges or authorities required to perform each task in SAP IQ Cockpit.

Related Information
Simplex Privilege Summary [page 45]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

43

Multiplex Privilege Summary [page 47]


Logical Server Privilege Summary [page 53]
Logical Server Policy Privilege Summary [page 55]
Remote Server Privilege Summary [page 56]
External Login Privilege Summary [page 58]
Database Privilege Summary [page 60]
Table Privilege Summary [page 63]
Table Column Privilege Summary [page 73]
Table Permissions Privilege Summary [page 76]
Table Constraints Privilege Summary [page 77]
Table Index Privilege Summary [page 83]
Table Trigger Privilege Summary [page 87]
Table Partition Privilege Summary [page 89]
View Privilege Summary [page 96]
View Permissions Privilege Summary [page 99]
View Trigger Privilege Summary [page 101]
Materialized View Privilege Summary [page 103]
Materialized View Permissions Privilege Summary [page 109]
Materialized View Index Privilege Summary [page 110]
Domain Privilege Summary [page 113]
Text Configuration Privilege Summary [page 115]
Text Index Privilege Summary [page 117]
Sequence Generator Privilege Summary [page 122]
Spatial Support Privilege Summary [page 125]
Authority-Based User Privilege Summary [page 128]
Authority-Based Group Privilege Summary [page 132]
Authority-Based Database Object Permissions Privilege Summary [page 135]
Role-Based User Privilege Summary [page 137]
Role-Based User-Extended Role Privilege Summary [page 141]
Role-Based Standalone Role Privilege Summary [page 146]
Role-Based Database Object Permissions Privilege Summary [page 151]
Role-Based System Role Privilege Summary [page 153]
Role-Based Compatibility Role Privilege Summary [page 155]
Role-Based System Privilege Privilege Summary [page 156]
Login Mapping Privilege Summary [page 157]
Login Policy Privilege Summary [page 159]
LDAP Server Configuration Object Privilege Summary [page 161]
Dbspace Privilege Summary [page 163]
Dbfile Privilege Summary [page 165]
Event Privilege Summary [page 168]
Java External Environment Privilege Summary [page 171]
Perl External Environment Privilege Summary [page 173]
PHP External Environment Privilege Summary [page 175]

44

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Other External Environment Privilege Summary [page 177]


Function Privilege Summary [page 178]
Procedure Privilege Summary [page 182]
Web Service Privilege Summary [page 186]

3.1.1 Simplex Privilege Summary


A list of the system privileges and object permissions required to complete the various simplex server tasks

Editing the Simplex Server Configuration File


Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Starting or Stopping a Simplex Server


Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

SERVER OPERATOR system privilege

Converting a Simplex to a Multiplex


Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

45

Generating an Administration Script for a Simplex Server


Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Upgrading a Simplex Server


Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

Not supported

Viewing or Modifying Simplex Server Properties


Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

View any simplex property page none


Modify any simplex property DBA authority

SAP IQ 16.0

View any simplex property page none


Modify any property on the Configuration or Options property page SERVER OPERA
TOR system privilege
Modify any property on the Request Logging property page one of:

MANAGE PROFILING system privilege

SERVER OPERATOR system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

46

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding an Authority to an Authority-Based User [page 758]


Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.2 Multiplex Privilege Summary


A list of the system privileges and object permissions required to complete the various multiplex server tasks.

Editing the Multiplex Server Configuration File


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Starting or Stopping a Multiplex Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

SERVER OPERATOR system privilege

Including a Secondary Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

All of these authorities:

MULTIPLEX ADMIN authority

BACKUP authority

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

47

Database Version

Multiplex Privileges Required

SAP IQ 16.0

All of:

MANAGE MULTIPLEX system privilege

SERVER OPERATOR system privilege

BACKUP DATABASE system privilege

Excluding a Secondary Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

Synchronizing a Secondary Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

All of:

SERVER OPERATOR system privileges

BACKUP DATABASE system privileges

Adding a Secondary Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

48

DBA authority

All of these authorities:

MULTIPLEX ADMIN authority

SPACE ADMIN authority

BACKUP authority

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Multiplex Privileges Required

SAP IQ 16.0

All of:

SERVER OPERATOR system privilege

MANAGE MULTIPLEX system privilege

MANAGE ANY DBSPACE system privilege

BACKUP DATABASE system privilege

Dropping a Secondary Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

All of these authorities:

MULTIPLEX ADMIN authority

SPACE ADMIN authority

BACKUP authority

MANAGE MULTIPLEX system privilege

Generating an Administration Script for a Multiplex Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Upgrading a Multiplex Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

Not supported

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

49

Converting a Simplex to a Multiplex


Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

Reconfiguring a Multiplex Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

Change server name, port or database location all of:

MULTIPLEX ADMIN authority

BACKUP authority

All other changes require DBA authority


SAP IQ 16.0

All of:

SERVER OPERATOR system privilege

BACKUP DATABASE system privilege

Enabling and Disabling an RLV Store Node


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

MANAGE MULTIPLEX system privilege

Enabling and Disabling High Availability


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

Requires one of:

SAP IQ 16.0

50

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Viewing or Modifying Multiplex Server Properties


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

View multiplex properties none


Modify multiplex properties one of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

View multiplex properties none


Modify any property on the Configuration page all of:

SERVER OPERATOR system privilege

BACKUP DATABASE system privilege

MANAGE MULTIPLEX system privilege

Modify any property on the Options property page SERVER OPERATOR system privi
lege
Modify any property on the Request Logging property page one of:

MANAGE PROFILING system privilege

SERVER OPERATOR system privilege

Modify any property on the High Availability property page MANAGE MULTIPLEX
system privilege and the coordinator is running. The SAP IQ Cockpit agent for the mul
tiplex server for which the Properties page is open must also be running.

Viewing or Modifying Multiplex Properties


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

View multiplex properties none


Modify multiplex properties one of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

View multiplex properties none


Modify any property on the Configuration page MANAGE MULTIPLEX system privi
lege

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

51

Designating the Failover Node


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

All of:

MANAGE MULTIPLEX system privilege

SERVER OPERATOR system privilege

BACKUP DATABASE system privilege

Performing Coordinator Node Failover


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

52

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.1.3 Logical Server Privilege Summary


A list of the system privileges and object permissions required to complete the various logical server tasks

Creating a Logical Server


Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

Deleting a Logical Server


Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

Configuring Logical Server Node Membership


Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

53

Altering a Logical Server Assignment


Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

Generating DDL Commands for a Logical Server


Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Logical Server Properties


Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

View logical server properties none


Modify logical server properties one of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

View any logical server property page none


Modify any logical server property MANAGE MULTIPLEX system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

54

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding an Authority to an Authority-Based User [page 758]


Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.4 Logical Server Policy Privilege Summary


A list of the system privileges and object permissions required to complete the various logical server policy
tasks

Creating a Logical Server Policy


Database Version

Logical Server Policy Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE MULTIPLEX system privilege

Deleting a Logical Server Policy


Database Version

Logical Server Policy Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE MULTIPLEX system privilege

Generating DDL Commands for a Logical Server Policy


Database Version

Logical Server Policy Privileges Required

SAP IQ15.3 and 15.4

Not supported

SAP IQ 16.0

None

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

55

Viewing or Modifying Logical Server Policy Properties


Database Version

Logical Server Policy Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

View any logical server policy property page none


Modify any logical server policy property MANAGE MULTIPLEX system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.5 Remote Server Privilege Summary


A list of the system privileges and object permissions required to complete the various remote server tasks

Creating a Remote Server


Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

SERVER OPERATOR system privilege

56

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Testing a Remote Server Connection


Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Deleting a Remote Server


Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

SERVER OPERATOR system privilege

Generating Remote Server DDL Commands


Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Remote Server Properties


Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

View remote server properties none


Modify remote server properties DBA authority

SAP IQ 16.0

View any remote server property page none


Modify any remote server property SERVER OPERATOR system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

57

Adding Permissions on a View or Materialized View to a User or Role [page 916]


Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.6 External Login Privilege Summary


A list of the system privileges and object permissions required to complete the various external login tasks

Creating an External Login


Database Version

External Login Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

MANAGE ANY USER system privilege

Deleting an External Login


Database Version

External Login Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

58

DBA authority

USER ADMIN authority

MANAGE ANY USER system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Generating External Login DDL Commands


Database Version

External Login Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing External Login Properties


Database Version

External Login Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

59

3.1.7 Database Privilege Summary


A list of the system privileges and object permissions required to complete the various database tasks.

Creating a Database
Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

DBA authority. The account under which the server is running must have write permis
sions on the directories where files are created.

SAP IQ 16.0

The account under which the server is running must have write permissions on the di
rectories where files are created. No other system privilege is required.

Creating a Database Using CSV File


Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

The account under which the server is running must have write permissions on the di
rectories where files are created. No other system privilege is required.

Setting Database Options


Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

View database options only none


Modify database options DBA authority

SAP IQ 16.0

View database options only none


Modify database options Depending on the option being modified, one of:

60

SET ANY PUBLIC OPTION system privilege

SET ANY SECURITY OPTION system privilege

SET ANY SYSTEM OPTION system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Configuring Point-in-Time Recovery Options


Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Set PITR database options SET ANY SYSTEM OPTION system privilege
Set PITR logging options MANAGE ANY DBSPACE system privilege

Purging Backup History


Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

BACKUP DATABASE system privilege

Viewing or Modifying Database Properties


Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

View database license management property page EXECUTE permission on the

sp_iqlmconfig system procedure to display the content of the page.


View any other database property page none
Modify the following properties on the Settings page:

Include SQL statement information option EXECUTE permission on the

sa_server_option system procedure to modify this setting.

Collect Information about deadlocks option DBA authority

Clear Deadlock Information Now option DBA authority

Modify any other database property DBA authority

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

61

Database Version

Database Privileges Required

SAP IQ 16.0

View database license management property page EXECUTE permission on the

sp_iqlmconfig system procedure along with the SERVER OPERATOR system priv
ilege to display the content of the page.
View any other database property page none
Modify the following properties on the Settings page:

Refresh button SERVER OPERATOR or ALTER DATABASE system privilege

Collect Information about deadlocks option SET ANY SYSTEM OPTION system
privilege

Include SQL statement information option EXECUTE permission on the

sa_server_option system procedure along with the SERVER OPERATOR


system privilege to modify this setting.

Clear Deadlock Information Now option SERVER OPERATOR system privilege

Modify properties on the license management page SERVER OPERATOR system


privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

62

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.1.8 Table Privilege Summary


A list of the system privileges and object permissions required to complete the various table tasks.

Creating a Table
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Base table to be owned by self RESOURCE authority with CREATE permission on the
IQ main store dbspace in which the table is created.
Base table to be owned by any user DBA authority

SAP IQ 16.0

Base table to be owned by self CREATE permission on the dbspace where the table is
created, along with one of:

CREATE TABLE system privilege

CREATE ANY OBJECT system privilege

Base table to be owned by any user CREATE permission on the dbspace where the
table is created along with one of:

CREATE ANY TABLE system privilege

CREATE ANY OBJECT system privilege

Creating a Global Temporary Table


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Global temporary table to be owned by self RESOURCE authority with CREATE per
mission on the IQ main store dbspace in which the table is created.
Global temporary table to be owned by any user DBA authority

SAP IQ 16.0

Global temporary table to be owned by self CREATE TABLE system privilege


Global temporary table to be owned by any user one of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

CREATE ANY TABLE system privilege

CREATE ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

63

Creating a Proxy Table


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Proxy table to be owned by self RESOURCE authority with CREATE permission on


the IQ main store dbspace in which the table is created.
Proxy table to be owned by any user DBA authority

SAP IQ 16.0

Proxy table to be owned by self CREATE PROXY TABLE system privilege


Proxy table to be owned by any user one of:

CREATE ANY TABLE system privilege

CREATE ANY OBJECT system privilege

Viewing Table Data in the Execute SQL Windows


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

For the menu option to be enabled requires one of:

DBA authority

SELECT permission on the table

You own the table

Queries execute with the user's current permissions.


SAP IQ 16.0

For the menu option to be enabled requires one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Queries execute with the user's current privileges.

Deleting a Table
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

64

DBA authority

You own the table

One of:

DROP ANY TABLE system privilege

DROP ANY OBJECT system privilege

You own the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Generating Table DDL Commands


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Moving a Table to Another Dbspace


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

You own the table and have CREATE permission on the target dbspace

One of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

ALTER permission on the table and CREATE permission on the target dbspace

You own the table and have CREATE permission on the target dbspace

Validating a IQ (Catalog) System Store Table


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

VALIDATE authority

VALIDATE ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

65

Setting the Primary Key


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER and REFERENCE permission on the table

You own the table

To create a new or modify an existing primary key one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace where the table resides

ALTER and REFERENCE permission on the table

You own the table

To modify the name only of an existing primary key ALTER ANY INDEX system privi
lege

Setting a Clustered Index


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

You own the table

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

ALTER and REFERENCE permission on the table

You own the table

Moving Table Data from RLV Store to IQ Main Store


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

66

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Calculating the Number of Rows in a Table


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SELECT permission on the table

You own the table

One of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Moving Table Objects to Another Dbspace


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

CREATE permission on the target dbspace along with one of:

SAP IQ 16.0

DBA authority

RESOURCE authority with ALTER permission on the table

You own the table

CREATE permission on the target dbspace along with one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

You own the table

Enabling Row-Level Versioning in a Table


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

67

Viewing or Modifying Base Table Properties


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

View any property page of a base table owned by self none


View any property page of a base table owned by any user none needed except for
the Data page, which requires one of:

DBA authority

SELECT permission on the table

You own the table

Modify any property on the General page one of:

DBA authority

ALTER permission on the table

You own the table

Modify any property on the Miscellaneous page one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

For privileges needed to modify other table properties, see:

68

Table Column Privilege Summary [page 501]

Table Permissions Privilege Summary [page 514]

Table Constraints Privilege Summary [page 536]

Table Index Privilege Summary [page 555]

Table Trigger Privilege Summary [page 566]

Table Partition Privilege Summary [page 587]

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Table Privileges Required

SAP IQ 16.0

View any property page of a base table owned by self none.


View any property page of a base table owned by any user none needed except for
the Data page, which requires one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Modify the table name on the General page one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

You own the table

Use the Calculate button on the Miscellaneous page one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Modify any other property on the Miscellaneous page for an IQ (catalog) system store
table one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

You own the table

Modify a comment on the General page one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

For privileges needed to modify other table properties, see:

SAP IQ Cockpit
Configure SAP IQ Cockpit

Table Column Privilege Summary [page 501]

Table Permissions Privilege Summary [page 514]

Table Constraints Privilege Summary [page 536]

Table Index Privilege Summary [page 555]

Table Trigger Privilege Summary [page 566]

Table Partition Privilege Summary [page 587]

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

69

Viewing or Modifying Global Temporary Table Properties


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

View any property page of a global temporary table owned by self none
View any property page of a global temporary table owned by any user none needed
except for the Data page, which requires one of:

DBA authority

SELECT permission on the table

You own the table

Modify any property on the General page one of:

DBA authority

ALTER permission on the table

You own the table

Modify any property on the Miscellaneous page one of:

SELECT permission on the table

You own the table

For permissions needed to modify other table properties, see:

70

Table Column Privilege Summary [page 501]

Table Permissions Privilege Summary [page 514]

Table Constraints Privilege Summary [page 536]

Table Index Privilege Summary [page 555]

Table Trigger Privilege Summary [page 566]

Table Partition Privilege Summary [page 587]

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Table Privileges Required

SAP IQ 16.0

View any property page of a global temporary table owned by self none
View any property page of a global temporary table owned by any user none needed
except for the Data page, which requires one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Modify the table name on the General page one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

You own the table

Use the Calculate button on the Miscellaneous page one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Modify any other property on the Miscellaneous page for an IQ (catalog) system store
table one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

You own the table

Modify a comment on the General page one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

For privileges needed to modify other table properties, see:

SAP IQ Cockpit
Configure SAP IQ Cockpit

Table Column Privilege Summary [page 501]

Table Permissions Privilege Summary [page 514]

Table Constraints Privilege Summary [page 536]

Table Index Privilege Summary [page 555]

Table Trigger Privilege Summary [page 566]

Table Partition Privilege Summary [page 587]

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

71

Viewing or Modifying Proxy Table Properties


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

View any property page of a proxy table owned by self none needed except for the
Data page, which requires SELECT permission on the base table on the remote server.
View any properties of a proxy table owned by any user none needed except for the
Data page, which requires SELECT permission on the base table on the remote server
along with one of:

DBA authority

SELECT permission on the table

Modify any property on the General or Miscellaneous page one of:

DBA authority

You own the table

For privileges needed to modify other table properties, see:

SAP IQ 16.0

Table Column Privilege Summary [page 501]

Table Trigger Privilege Summary [page 566]

View any property page of a proxy table owned by self none needed except for the
Data page, which requires SELECT permission on the base table on the remote server.
View any property page of a proxy table owned by any user none needed except for
the Data page, which requires one of:

SELECT ANY TABLE system privilege

SELECT permission on the proxy table

SELECT permission on the base table

You own the table

Use the Calculate button on the Miscellaneous page one of:

SELECT ANY TABLE system privilege

SELECT permission on the proxy table

You own the table

Modify a comment on the General page one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

For privileges needed to modify other table properties, see:

72

Table Column Privilege Summary [page 501]

Table Trigger Privilege Summary [page 566]

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.9 Table Column Privilege Summary


A list of the system privileges and object permissions required to complete the various table column tasks.

Adding a Column
Database Version

Table Column Privileges Required

SAP IQ 15.3 and 15.4

Create a column without a primary key or unique constraint you must have one of:

DBA authority

Both ALTER permission on the table

You own the underlying table

Create a column with a primary key or unique constraint you must have one of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

Both ALTER and REFERENCE permission on the table

You own the underlying table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

73

Database Version

Table Column Privileges Required

SAP IQ 16.0

Create a column without a primary key or unique constraint you must have one of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace along with one of the following:

ALTER ANY TABLE system privilege

ALTER permission on the underlying table

You own the underlying table

Create a column with a primary key or unique constraint you must have one of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace along with one of the following:

ALTER ANY TABLE system privilege

Both ALTER and REFERENCE permission on the underlying table

You own the underlying table

Deleting a Column
Database Version

Table Column Privileges Required

SAP IQ 15.3 and 15.4

Deleting a column without a primary key or unique constraint you must have one of:

DBA authority

Both ALTER permission on the table

You own the underlying table

Deleting a column with a primary key or unique constraint you must have one of:

SAP IQ 16.0

DBA authority

Both ALTER and REFERENCE permission on the table

You own the underlying table

Deleting a column without a primary key or unique constraint you must have one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the underlying table

You own the underlying table

Deleting a column with a primary key or unique constraint you must have one of:

74

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

Both ALTER and REFERENCE permission on the underlying table

You own the underlying table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Viewing or Modify Column Properties


Database Version

Table Column Privileges Required

SAP IQ 15.3 and 15.4

View any table column property page none


Modify the Primary key property on the General page you must have one of:

DBA authority

Both ALTER and REFERENCE permission on the table

You own the table

Modify any other table column property you must have one of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

You own the table

View any table column property page none


Modify the Primary key property on the General page you must have one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

Both ALTER and REFERENCE permission on the table

You own the table

Modify a table column comment you must have one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

Modify any other table column property you must have one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

You own the table

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

75

Adding EXECUTE Permission to a User or Role [page 922]


Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.10 Table Permissions Privilege Summary


A list of the system privileges and object permissions required to complete the various table permission tasks.

Grant and Revoke Permissions on a Table


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You have administrative rights (with grant option) to the permission

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

Adjust Administration Permissions on a Table


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

76

DBA authority

PERMS ADMIN authority

You own the database object

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Database Object Privileges Required

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.11 Table Constraints Privilege Summary


A list of the system privileges and object permissions required to complete the various table constraints tasks.

Creating a Column Check Constraint


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

ALTER permission on the underlying table

You own the underlying table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

77

Database Version

Table Constraint Privileges Required

SAP IQ 16.0

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

You have ALTER permission on the underlying table

You own the underlying table

Creating a Foreign Key Constraint


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

ALTER permission on the derived table

You own the derived table

In addition, if you do not have DBA authority, you must also have one of:

REFERENCE permission on the base table

You own the base table

Finally, if you do not have DBA authority, you must also have one of:

SAP IQ 16.0

REFERENCE permission on the derived table (to index it)

You own the derived table

One of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace the table is defined on, along with one of:

ALTER ANY TABLE system privilege

ALTER permission on the derived table

You own the derived table

You must also have one of:

CREATE ANY INDEX system privilege

CREATE ANY OBJECT system privilege

REFERENCE permission on the base table

Creating a Table Check Constraint


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

78

DBA authority

ALTER permission on the underlying table

You own the underlying table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Table Constraint Privileges Required

SAP IQ 16.0

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

You have ALTER permission on the underlying table

You own the underlying table

Creating a Unique Constraint


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER and REFERENCE permission on the underlying table

You own the underlying table

One of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace the table is defined on, along with one of:

ALTER ANY TABLE system privilege

ALTER and REFERENCE permission on the underlying table

You own the underlying table

Deleting a Table or Column Check Constraint


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

ALTER permission on the underlying table

You own the underlying table

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the underlying table

You own the underlying table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

79

Deleting a Unique, Primary or Foreign Key Constraint


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER and REFERENCE permission on the underlying table

You own the underlying table

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER and REFERENCE permission on the underlying table

You own the underlying table

Rebuilding a Unique, Primary or Foreign Key Constraint


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

REFERENCE permission on the underlying table

You own the underlying table

One of:

ALTER ANY OBJECT system privilege

ALTER ANY INDEX system privilege

REFERENCE permission on the underlying table

You own the underlying table

Validating a Constraint
Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

80

DBA authority

VALIDATE authority

VALIDATE ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Generating Constraint DDL Commands


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Constraint Properties


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

View table constraint properties none


Modify comment on foreign key or unique constraint one of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

ALTER permission on the underlying table

You own the underlying table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

81

Database Version

Table Constraint Privileges Required

SAP IQ 16.0

View any table constraint property page none


Modify the comment on a foreign or primary key constraint one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

Modify the comment on a unique key constraint one of:

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

Modify the definition of a table or column check constraint one of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the table

You own the table

Modify any foreign key constraint property on the Action page one of:

CREATE ANY OBJECT system privilege

CREATE ANY INDEX system privilege

You must also have one of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the underlying table

You own the table

Modify any other property of a primary, foreign or unique key, table check or column
check constraint one of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the underlying table

You own the underlying table

Related Information
Adding a System Privilege to a Role-Based User [page 819]

82

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding a System Privilege to a User-Extended Role [page 849]


Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.12 Table Index Privilege Summary


A list of the system privileges and object permissions required to complete the various index tasks on tables.

Creating a Table Index


Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

CREATE permission on the specified dbspace along with one of:

SAP IQ 16.0

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

CREATE permission on the specified dbspace along with one of:

CREATE ANY INDEX system privilege

CREATE ANY OBJECT system privilege

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

83

Deleting a Table Index


Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority with REFERENCE permission on the underlying table of the


index

You own the underlying table of the index

One of:

DROP ANY INDEX system privilege

DROP ANY OBJECT system privilege

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

Rebuilding a Table Index


Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority with REFERENCE permission on the underlying table of the


index

You own the underlying table of the index

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

Validating a Table Index


Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

84

DBA authority

RESOURCE authority with ALTER permission on the underlying table of the index

You own the underlying table of the index

VALIDATE ANY OBJECT system privilege.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Moving a Table Index


Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

CREATE permission on the target dbspace, along with one of:

You own the underlying table

You have REFERENCE permission on the underlying table

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

You own the underlying table of the index

REFERENCE permission on the table along with one of:

CREATE ANY OBJECT system privilege

CREATE permission on the target dbspace

Generating Index DDL Commands


Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Index Properties


Database Version
SAP IQ 15.3 and 15.4

Table Index Privileges Required


View table index fragmentation property page EXECUTE permission on the

sp_iqindexfragmentation system procedure to display the content of the


page.
View any other table index property page none.
Modify any index property one of:

DBA authority

RESOURCE authority with REFERENCE permission on the underlying table of the


index

SAP IQ Cockpit
Configure SAP IQ Cockpit

You own the underlying table of the index

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

85

Database Version
SAP IQ 16.0

Table Index Privileges Required


View table index fragmentation property page EXECUTE permission on the

sp_iqindexfragmentation system procedure along with the MANAGE ANY


DBSPACE system privilege to display the content of the page.
View any other table index property page none.
Modify a table index comment one of:

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the underlying table of the index

Note
ALTER permission on the table is not required to modify the comment only.
Modify any other table index property one of:

ALTER ANY OBJECT system privilege

ALTER ANY INDEX system privilege

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

86

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.1.13 Table Trigger Privilege Summary


A list of the system privileges and object permissions required to complete the various table trigger tasks on
database objects.

Creating a Table Trigger


Database Version

Table Trigger Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority, along with one of:

ALTER permission on the underlying table of the trigger

You own the underlying table of the trigger

One of:

CREATE ANY TRIGGER system privilege

CREATE ANY OBJECT system privilege

You must also have one of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the underlying table of the trigger

You own the underlying table of the trigger

Deleting a Table Trigger


Database Version

Table Trigger Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

RESOURCE authority, along with one of:

ALTER permission on the underlying table of the trigger

You own the underlying table of the trigger

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

You own the underlying table of the trigger

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

87

Generating Table Trigger DDL Commands


Database Version

Table Trigger Privileges Required

SAP IQ 15.3 and 15.4

None.

SAP IQ 16.0

None.

Viewing or Modifying Table Trigger Properties


Database Version

Table Trigger Privileges Required

SAP IQ 15.3 and 15.4

View any trigger property page none.


Modify any trigger property one of:

SAP IQ 16.0

DBA authority

RESOURCE authority, along with one of:

ALTER permission on the underlying table of the trigger

You own the underlying table of the trigger

View any trigger property page none.


Modify a trigger comment one of:

CREATE ANY TRIGGER system privilege

ALTER ANY TRIGGER system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

Note
ALTER permission on the table is not required to modify a comment.
Modify any other trigger property one of:

ALTER ANY OBJECT system privilege

ALTER ANY TRIGGER system privilege, along with one of:

ALTER ANY TABLE system privilege

You own the underlying table of the trigger

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]

88

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding Permissions on a Table or Column to a User or Role [page 907]


Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.14 Table Partition Privilege Summary


A list of the system privileges and object permissions required to complete the various table partition tasks.

Creating a Hash Partition


Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

Table owned by self none.


Table owned by other users one of:

SAP IQ 16.0

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

ALTER permission on the table

One of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace along with one of:

ALTER ANY TABLE system privilege

ALTER permission on the table

You own the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

89

Creating a Range Partition


Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

CREATE permission on the dbspaces where the partitions are being created

You must also have one of:

SAP IQ 16.0

ALTER permission on the table

You own the table

One of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspaces along with one of:

ALTER ANY TABLE system privilege

ALTER permission on the table

You own the table

Creating a Hash-Range Partition


Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

90

DBA authority

SPACE ADMIN authority, along with one of:

ALTER permission on the table

You own the table

One of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace along with one of:

ALTER ANY TABLE system privilege

ALTER permission on the table

You own the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Deleting a Partition
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

Table owned by self none.


Table owned by other users one of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

Table owned by self none.


Table owned by other users one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

Unpartitioning a Table
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

Table owned by self none.


Table owned by other users one of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

Table owned by self none.


Table owned by other users one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

Merging Partitions
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

Table owned by self none.


Table owned by other users one of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

ALTER permission on the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

91

Database Version

Table Partition Privileges Required

SAP IQ 16.0

Table owned by self none.


Table owned by other users one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

Splitting Partitions
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

Table owned by self none.


Table owned by other users one of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

SELECT permission on the table

One of:

SELECT ANY TABLE system privilege

SELECT permission on table

You must also have one of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace along with one of:

ALTER ANY TABLE system privilege

ALTER permission on the table

You own the table

Moving Partitions
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

One of:

92

DBA authority

SPACE ADMIN authority

CREATE permission on the dbspace to which the partition is being moved along
with one of:

ALTER permission on the underlying table

You own the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Table Partition Privileges Required

SAP IQ 16.0

One of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

One of the following:

CREATE ANY OBJECT system privilege

CREATE permission on the dbspace to which the partition is being moved

Along with one of:

ALTER permission on the underlying table

You own the underlying table

Managing Column Storage in a Table Partition


Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

View any table partition property page none.


Modify any table partition property pertaining to moving partition location or separate
column storage for a partition one of:

DBA authority

SPACE ADMIN authority

CREATE permission on the dbspace to which the partition is being moved along
with one of:

ALTER permission on the underlying table

You own the table

Modify any other table partition property:

SAP IQ Cockpit
Configure SAP IQ Cockpit

Table owned by self none.

Table owned by other users one of:

DBA authority

ALTER permission on the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

93

Database Version

Table Partition Privileges Required

SAP IQ 16.0

View any table partition property page none.


Modify any table partition property pertaining to moving partition location or separate
column storage for a partition one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

One of the following:

CREATE ANY OBJECT system privilege

CREATE permission on the dbspace to which the partition is being moved

Along with one of:

ALTER permission on the underlying table

You own the underlying table

Modify any other table partition property:

Table owned by self none.

Table owned by other users one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

Viewing or Modifying Table Partition Properties


Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

View any table partition property page none.


Modify any table partition property pertaining to moving partition location or separate
column storage for a partition one of:

DBA authority

SPACE ADMIN authority

CREATE permission on the dbspace to which the partition is being moved along
with one of:

ALTER permission on the underlying table

You own the table

Modify any other table partition property:

94

Table owned by self none.

Table owned by other users one of:

DBA authority

ALTER permission on the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Table Partition Privileges Required

SAP IQ 16.0

View any table partition property page none.


Modify any table partition property pertaining to moving partition location or separate
column storage for a partition one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

One of the following:

CREATE ANY OBJECT system privilege

CREATE permission on the dbspace to which the partition is being moved

Along with one of:

ALTER permission on the underlying table

You own the underlying table

Modify any other table partition property:

Table owned by self none.

Table owned by other users one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

95

3.1.15 View Privilege Summary


A list of the system privileges and object permissions required to complete the various view tasks.

Creating a View
Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority with SELECT permission on the tables in the view definition
to create a view owned by you.

View to be owned by self CREATE VIEW system privilege along with one of:

SELECT ANY TABLE system privilege

SELECT object permission on the underlying tables of the view

View to be owned by any user one of:

CREATE ANY VIEW system privilege

CREATE ANY OBJECT system privilege

You must also have one of:

SELECT object permission on the underlying tables of the view

SELECT ANY TABLE system privilege

Viewing View Data in the Execute SQL Window


Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

None. Queries execute with the user's current permissions.

SAP IQ 16.0

None. Queries execute with the user's current permissions.

Recompiling and Enabling a View


Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

One of:

96

DBA authority

You own the view and have SELECT permission on the underlying tables of the
view

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

View Privileges Required

SAP IQ 16.0

One of:

ALTER ANY VIEW system privilege

ALTER ANY OBJECT system privilege

You own the view

You must also have one of:

SELECT ANY TABLE system privilege

SELECT permission on the underlying tables of the view

Disabling a View
Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the view

One of:

ALTER ANY VIEW system privilege

ALTER ANY OBJECT system privilege

You own the view

Deleting a View
Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the view

One of:

DROP ANY VIEW system privilege

DROP ANY OBJECT system privilege

You own the view

Generating View DDL Commands


Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

None.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

97

Database Version

View Privileges Required

SAP IQ 16.0

None.

Viewing or Modifying View Properties


Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

View any view property page none.


Modify view permissions one of:

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

Modify any other view property except those relating to triggers one of:

DBA authority

You own the view

For privileges relating to triggers, see View Trigger Privilege Summary [page 624].
SAP IQ 16.0

View any view property page none.


Modify view permissions one of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

Modify a view comment one of:

CREATE ANY VIEW system privilege

CREATE ANY OBJECT system privilege

ALTER ANY VIEW system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the view

Modify any other view property, except those relating to triggers one of:

ALTER ANY VIEW system privilege

ALTER ANY OBJECT system privilege

You own the view

For privileges relating to triggers, see View Trigger Privilege Summary [page 624].

98

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.16 View Permissions Privilege Summary


A list of the system privileges and object permissions required to complete the various view permission tasks.

Grant and Revoke Permissions on a View


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

99

Adjust Administration Permissions on a View


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

100

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.1.17 View Trigger Privilege Summary


A list of the system privileges and object permissions required to complete the various view trigger tasks on
database objects.

Creating a View Trigger


Database Version

View Trigger Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority and you own the underlying view of the trigger

One of:

CREATE ANY TRIGGER system privilege

CREATE ANY OBJECT system privilege

You must also have one of:

ALTER ANY OBJECT system privilege

ALTER ANY VIEW system privilege

You own the underlying view of the trigger

Deleting a View Trigger


Database Version

View Trigger Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the underlying view of the trigger

One of:

ALTER ANY OBJECT system privilege

ALTER ANY VIEW system privilege

You own the underlying view of the trigger

This gives you ALTER permission on the underlying view of the trigger.

Generating View Trigger DDL Commands


Database Version

View Trigger Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

101

Database Version

View Trigger Privileges Required

SAP IQ 16.0

None

Viewing or Modifying View Trigger Properties


Database Version

View Trigger Privileges Required

SAP IQ 15.3 and 15.4

View trigger properties only none.


Modify trigger comment or properties one of:

SAP IQ 16.0

DBA authority

RESOURCE authority and you own the underlying view of the trigger

View any trigger property page none


Modify a trigger comment one of:

CREATE ANY TRIGGER system privilege

ALTER ANY TRIGGER system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

Note
ALTER permission on the view is not required to modify a comment.
Modify any other trigger property one of:

ALTER ANY OBJECT system privilege

ALTER ANY TRIGGER system privilege, along with one of:

ALTER ANY VIEW system privilege

You own the underlying view of the trigger

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

102

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding an Authority to an Authority-Based User [page 758]


Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.18 Materialized View Privilege Summary


A list of the system privileges and object permissions required to complete the various materialized view tasks.

Creating a Materialized View


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

Materialized view to be owned by self RESOURCE authority with SELECT permission


on tables in the view definition. You must also have CREATE permission on the selected
dbspace to create a view owned by you.
Materialized view to be owned by any user DBA authority

SAP IQ 16.0

Materialized view to be owned by self CREATE MATERIALIZED VIEW system privi


lege. You must also have one of:

CREATE ANY OBJECT system privilege

CREATE object permission on the dbspace where the materialized view is being
created

Finally, you must have one of:

SELECT ANY TABLE system privilege

SELECT object permission on the underlying tables of the materialized view

Materialized view to be owned by any user CREATE object permission on the


dbspace where the materialized view is being created. You must also have one of:

CREATE ANY MATERIALIZED VIEW system privilege

CREATE ANY OBJECT system privilege

Finally, you must have one of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

SELECT ANY TABLE system privilege

SELECT object permission on the underlying tables of the materialized view

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

103

Viewing Materialized View Data in the Execute SQL Window


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

None. Queries execute with the user's current permissions.

SAP IQ 16.0

None. Queries execute with the user's current permissions.

Truncating Materialized View Data


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the materialized view

One of:

TRUNCATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

TRUNCATE permission on the materialized view

You own the materialized view

Validating Materialized View Data


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the materialized view

VALIDATE ANY OBJECT system privilege

Refreshing Materialized View Data


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

DBA authority along with both of:

104

INSERT permission on the underlying tables of the materialized view or you own
the materialized view

SELECT permission on the underlying tables of the materialized view or you own
the underlying tables of the materialized view

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Materialized View Privileges Required

SAP IQ 16.0

One of:

INSERT ANY TABLE system privilege

INSERT permission on the materialized view

You own the materialized view

You must also have one of:

SELECT ANY TABLE system privilege

SELECT permission on the underlying tables of the materialized view

You own the underlying tables of the materialized view

Recompiling and Enabling Materialized View Data


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the materialized view and have one of the following:

SELECT permission on the underlying tables of the materialized view

You own the underlying tables of the view

One of:

ALTER ANY MATERIALIZED VIEW system privilege

ALTER ANY OBJECT system privilege

You own the materialized view

You must also have one of:

SELECT ANY TABLE system privilege

SELECT permission on the underlying tables of the materialized view

You own the underlying tables of the materialized view

Disabling Materialized View Data


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

You own the materialized view

One of:

ALTER ANY MATERIALIZED VIEW system privilege

ALTER ANY OBJECT system privilege

You own the materialized view

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

105

Deleting a Materialized View


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

DROP ANY MATERIALIZED VIEW system privilege

DROP ANY OBJECT system privilege

You own the materialized view

Generating Materialized View DDL Commands


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Setting a Clustered Index on a Materialized View


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

106

DBA authority

You own the materialized view

One of:

ALTER ANY MATERIALIZED VIEW system privilege

ALTER ANY OBJECT system privilege

You own the materialized view

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Viewing or Modifying Materialized View Properties


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

View any materialized view property page none


Modify materialized view permissions one of:

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

Modify the SQL page of the materialized view properties one of:

DBA authority

You own the materialized view and have SELECT permission on the underlying ta
bles

Modify any other materialized view property except those relating to indexes one of:

DBA authority

ALTER permission on the underlying tables

SELECT permission on the underlying tables

You own the materialized view

For privileges relating to materialized view indexes, see Materialized View Index Privi
lege Summary [page 671]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

107

Database Version

Materialized View Privileges Required

SAP IQ 16.0

View any materialized view property page none


Modify materialized view permissions one of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

Modify a materialized view comment one of:

CREATE ANY MATERIALIZED VIEW system privilege

ALTER ANY MATERIALIZED VIEW system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the materialized view

Modify the SQL page of the materialized view properties one of:

DROP ANY MATERIALIZED VIEW system privilege

DROP ANY OBJECT system privilege

You own the materialized view

You must also have one of:

CREATE ANY MATERIALIZED VIEW system privilege

CREATE ANY OBJECT system privilege

Modify any other materialized view property except those relating to indexes one of:

ALTER ANY MATERIALIZED VIEW system privilege

ALTER ANY OBJECT system privilege

You own the materialized view

For privileges relating to materialized view indexes, see Materialized View Index Privi
lege Summary [page 671]

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]

108

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding an Authority to a Group [page 776]


Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.19 Materialized View Permissions Privilege Summary


A list of the system privileges and object permissions required to complete the various materialized view
permission tasks.

Grant and Revoke Permissions on a Materialized View


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

Adjust Administration Permissions on a Materialized View


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

109

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.20 Materialized View Index Privilege Summary


A list of the system privileges and object permissions required to complete the various index tasks
materialized views.

Creating a Materialized View Index


Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

110

DBA authority

You own the underlying database object of the index

One of:

CREATE ANY OBJECT system privilege

CREATE permission on the dbspace, along with one of:

CREATE ANY INDEX system privilege

You own the materialized view index

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Deleting a Materialized View Index


Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority with ALTER permission on the underlying database object of


the index

You own the underlying database object of the index

One of:

DROP ANY INDEX system privilege

DROP ANY OBJECT system privilege

You own the materialized index

Rebuilding a Materialized View Index


Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority with ALTER permission on the underlying database object of


the index

You own the underlying database object of the index

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

You own the underlying database object of the index

Validating a Materialized View Index


Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

VALIDATE authority

VALIDATE ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

111

Generating Materialized View Index DDL Commands


Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Materialized View Index Properties


Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

View any materialized view index property page none


Modify any materialized view index property one of:

DBA authority

RESOURCE authority with ALTER permission on the underlying database object of

You own the underlying database object of the index

the index

SAP IQ 16.0

View any materialized view index property page none


Modify a materialized view index comment one of:

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

Note
ALTER permission on the materialized view is not required to modify the comment
only.
Modify any other materialized view index property one of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace, along with one of:

ALTER ANY INDEX system privilege

You own the materialized view

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]

112

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding a System Privilege to a Standalone Role [page 886]


Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.21 Domain Privilege Summary


A list of the system privileges and object permissions required to complete the various domain tasks.

Creating a Domain
Database Version

Domain Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority

One of:

CREATE DATATYPE system privilege

CREATE ANY OBJECT system privilege

Deleting a Domain
Database Version

Domain Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

DROP DATATYPE system privilege

DROP ANY OBJECT system privilege

You own the domain

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

113

Generating Domain DDL Commands


Database Version

Domain Privileges Required

SAP IQ15.3 and 15.4

None

SAP IQ 16.0

None

Viewing Domain Properties


Database Version

Domain Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

114

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.1.22 Text Configuration Privilege Summary


A list of the system privileges and object permissions required to complete the various text configuration
tasks.

Creating a Text Configuration Object


Database Version

Text Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Text configuration object to be owned by self RESOURCE authority


Text configuration object to be owned by any user DBA authority

SAP IQ 16.0

Text configuration object to be owned by self CREATE TEXT CONFIGURATION sys


tem privilege
Text configuration object to be owned by any user one of:

CREATE ANY TEXT CONFIGURATION system privilege

CREATE ANY OBJECT system privilege

You must also have one of:

ALTER ANY TEXT CONFIGURATION system privilege

ALTER ANY OBJECT system privilege

Deleting a Text Configuration Object


Database Version

Text Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Text configuration object owned by self none


Table configuration object owned by any user DBA authority

SAP IQ 16.0

Text configuration object owned by self none


Table configuration object owned by any user one of:

DROP ANY TEXT CONFIGURATION system privilege

DROP ANY OBJECT system privilege

Generating Text Configuration Object DDL Commands


Database Version

Text Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

115

Viewing or Modifying Text Configuration Object Properties


Database Version

Text Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

View any text object configuration property page none


Modify any text object configuration property one of:

SAP IQ 16.0

DBA authority

You own the text configuration object

View any text object configuration property page none


Modify a text configuration object term breaker or external prefilter property CREATE
ANY EXTERNAL REFERENCE system privilege. You must also have one of:

ALTER ANY TEXT CONFIGURATION system privilege

ALTER ANY OBJECT system privilege

You own the text configuration object

Modify a text configuration object comment one of:

CREATE ANY TEXT CONFIGURATION system privilege

ALTER ANY TEXT CONFIGURATION system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the text configuration

Modify any other text configuration object properties one of:

ALTER ANY TEXT CONFIGURATION system privilege

ALTER ANY OBJECT system privilege

You own the text configuration object

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]

116

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding EXECUTE Permission to a User or Group [page 799]


Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.23 Text Index Privilege Summary


A list of the system privileges and object permissions required to complete the various text index tasks.

Creating a Text Index


Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

REFERENCE permission on the underlying table being indexed along with CREATE
permission on the dbspace where the index is being created

You own the underlying table being indexed along with CREATE permission on the
dbspace where the index is being created

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes.
SAP IQ 16.0

One of:

CREATE ANY INDEX system privilege along with CREATE permission on the
dbspace where the index is being created

CREATE ANY OBJECT system privilege

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes:

SAP IQ Cockpit
Configure SAP IQ Cockpit

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

117

Deleting a Text Index


Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

REFERENCE permission on the underlying table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes.
SAP IQ 16.0

One of:

DROP ANY INDEX system privilege

DROP ANY OBJECT system privilege

REFERENCE permission on the underlying table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes:

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

Refreshing a Text Index


Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

REFERENCE permission on the underlying table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes.

118

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Text Index Privileges Required

SAP IQ 16.0

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

REFERENCE permission on the underlying table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes:

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

Truncating a Text Index


Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

ALTER permission on the table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes.
SAP IQ 16.0

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes:

SAP IQ Cockpit
Configure SAP IQ Cockpit

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

119

Generating Text Index DDL Commands


Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

None required to generate DDL commands; however, you must have EXECUTE permis
sion on the sa_text_index_stats system procedure to display a list of existing
text indexes.

SAP IQ 16.0

None required to generate DDL commands; however, you must also have EXECUTE
permission on the sa_text_index_stats system procedure to display a list of ex
isting text indexes:

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

Viewing or Modifying Text Index Properties


Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

EXECUTE permission on the sa_text_index_stats system procedure to display


a list of existing text indexes.
View text index properties none
Rename a text index one of:

DBA authority

REFERENCE permission on the underlying table

You own the underlying table being indexed

Move a text index one of:

DBA authority

SPACE ADMIN authority

You own the underlying table being indexed and have CREATE permission on the
target dbspace

Modify comment on a text index one of:

120

DBA authority

You own the underlying table being indexed

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Text Index Privileges Required

SAP IQ 16.0

EXECUTE permission on the sa_text_index_stats system procedure to display


a list of existing text indexes along with one of:

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

View any text index property page none


Rename a text index one of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

REFERENCE permission on the underlying table

You own the underlying table being indexed

Move a text index one of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE

One of the following:

You own the underlying table being indexed

REFERENCE permission on the table along with one of the following:

CREATE ANY OBJECT system privilege

CREATE permission on the target dbspace

Modify a text index comment MANAGE ANY STATISTICS system privilege along with
one of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

CREATE ANY OBJECT system privilege

CREATE ANY INDEX system privilege

COMMENT ANY OBJECT system privilege

You own the underlying table being indexed

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

121

Adding Permissions on a View or Materialized View to a User or Role [page 916]


Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.24 Sequence Generator Privilege Summary


A list of the system privileges and object permissions required to complete the various sequence generator
tasks.

Creating a Sequence Generator


Database Version

Sequence Generator Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority

One of:

CREATE ANY SEQUENCE system privilege

CREATE ANY OBJECT system privilege

Deleting a Sequence Generator


Database Version

Sequence Generator Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

122

DBA authority

You own the sequence generator

One of:

DROP ANY SEQUENCE system privilege

DROP ANY OBJECT system privilege

You own the sequence generator

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Restarting a Sequence at Start Value


Database Version

Sequence Generator Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the sequence generator

One of:

ALTER ANY SEQUENCE system privilege

ALTER ANY OBJECT system privilege

You own the sequence generator

Generating Sequence Generator DDL Commands


Database Version

Sequence Generator Privileges Required

SAP IQ 15.3 and 15.4

None.

SAP IQ 16.0

None.

Viewing or Modifying Sequence Generator Properties


Database Version

Sequence Generator Permissions

SAP IQ 15.3 and 15.4

View sequence generator properties none.


Modify a sequence comment one of:

DBA authority

RESOURCE authority

You own the sequence generator

Modify sequence permissions one of:

DBA authority

PERMS ADMIN authority

You own the sequence generator

Modify any other sequence property one of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

You own the sequence generator

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

123

Database Version

Sequence Generator Permissions

SAP IQ 16.0

View any sequence property page none.


Modify a sequence comment one of:

CREATE ANY SEQUENCE system privilege

ALTER ANY SEQUENCE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

Modify sequence permissions one of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the sequence generator

Modify any other sequence property one of:

ALTER ANY SEQUENCE system privilege

ALTER ANY OBJECT system privilege

You own the sequence generator

Granting and Revoking Sequence Generator USAGE Permission


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the sequence generator

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the sequence generator

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]

124

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding USAGE Permission to a User or Role [page 926]


Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.25 Spatial Support Privilege Summary


A list of the system privileges and object permissions required to complete the various spatial support tasks.

Creating a Spatial Reference System


Database Version

Spatial Reference System Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

One of:

MANAGE ANY SPATIAL OBJECT system privilege

CREATE ANY OBJECT system privilege

Deleting a Spatial Reference System


Database Version

Spatial Reference System Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

One of:

MANAGE ANY SPATIAL OBJECT system privilege

DROP ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

125

Generating Spatial Reference System DDL Commands


Database Version

Spatial Reference System Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Spatial Reference System Properties


Database Version

Spatial Reference System Privileges Required

SAP IQ 15.3 and 15.4

View spatial reference system properties none


Modify spatial reference system properties or comments one of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

View spatial reference system properties none


Modify spatial reference system properties one of:

MANAGE ANY SPATIAL OBJECT system privilege

ALTER ANY OBJECT system privilege

Modify spatial reference system comment one of:

COMMENT ANY OBJECT system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY SPATIAL OBJECT system privilege

Creating a Spatial Unit of Measure


Database Version

Spatial Unit of Measure Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

126

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

One of:

CREATE ANY OBJECT system privilege

MANAGE ANY SPATIAL OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Deleting a Spatial Unit of Measure


Database Version

Spatial Unit of Measure Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

One of:

MANAGE ANY SPATIAL OBJECT system privilege

DROP ANY OBJECT system privilege

Generating Spatial Unit of Measure DDL Commands


Database Version

Spatial Unit of Measure Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Spatial Unit of Measure Properties


Database Version

Spatial Unit of Measure Privileges Required

SAP IQ 15.3 and 15.4

View spatial unit of measure properties none


Modify spatial unit of measure properties or comments one of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

View any spatial unit of measure property page none


Modify a spatial unit of measure comment one of:

COMMENT ANY OBJECT system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY SPATIAL OBJECT system privilege

Modify any other spatial unit of measure property one of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

MANAGE ANY SPATIAL OBJECT system privilege

ALTER ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

127

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.26 Authority-Based User Privilege Summary


A list of the system privileges and object permissions required to complete the various authority-based user
tasks.

Creating an Authority-Based User


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

128

DBA authority

Both USER ADMIN and PERMS ADMIN authorities

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Deleting an Authority-Based User


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

Converting an Authority-Based User to a Group


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

Viewing or Modifying Authority-Based User Options


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

Not supported

Generating Authority-Based User DDL Commands


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

Not supported

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

129

Viewing or Modifying Authority-Based User Properties


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

View any user property page none


Modify a password one of:

DBA authority

USER ADMIN authority

PERMS ADMIN authority

Modify a login policy one of:

DBA authority

USER ADMIN authority

Modify any other user property except those relating to permissions DBA authority
For privileges relating to user permissions, see Authority-Based Database Object Per
missions Privilege Summary [page 806]
SAP IQ 16.0

Not supported

Changing an Authority-Based User Password


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

Forcing an Authority-Based User Password Change


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

130

DBA authority

USER ADMIN authority

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Unlocking an Locked Authority-Based User Account


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

Changing an Authority-Based User Login Policy


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

Granting or Revoking an Authority from a User


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

Related Information
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding Permissions on a View or Materialized View to a User or Group [page 793]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

131

3.1.27 Authority-Based Group Privilege Summary


A list of the system privileges and object permissions required to complete the various authority-based group
tasks.

Creating an Authority-Based Group


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

Both USER ADMIN and PERMS ADMIN authorities

Not supported

Deleting an Authority-Based Group


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

Converting an Authority-Based Group to a User


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

132

DBA authority

PERMS ADMIN authority

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding Authority-Based Users and Groups to Groups


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

Removing Authority-Based Users and Groups from a Group


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

Viewing or Modifying Authority-Based Group Options


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

Generating Authority-Based Group DDL Commands


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

Not supported

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

133

Viewing or Modifying Authority-Based Group Properties


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

View any property page none


Modify a password one of:

DBA authority

USER ADMIN authority

PERMS ADMIN authority

Modify a login policy one of:

DBA authority

USER ADMIN authority

Modify any other group property except those relating to permissions DBA authority
For privileges relating to user permissions, see Authority-Based Database Object Per
missions Privilege Summary [page 806]
SAP IQ 16.0

Not supported

Granting or Revoking an Authority to a Group


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

Related Information
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding Permissions on a View or Materialized View to a User or Group [page 793]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

134

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.1.28 Authority-Based Database Object Permissions


Privilege Summary
A list of the system privileges and object permissions required to complete the various authority-based user
and group tasks pertaining to database objects.

Grant or Revoke Permissions on a Table or Column


Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You have administrative rights (with grant option) to the permission

You own the database object

Not supported

Modify Administrative Permissions on a Table or Column


Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

Not supported

Grant or Revoke Permissions on a View or Materialized View


Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

135

Modify Administrative Permissions on a View or Materialized View


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

Grant or Revoke Permissions on a Sequence Generator


Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the sequence generator

Not supported

Grant or Revoke Permissions on a Function or Procedure


Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

136

DBA authority

PERMS ADMIN authority

You own the database object

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Grant or Revoke Permissions on a Dbspace


Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

Related Information
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding Permissions on a View or Materialized View to a User or Group [page 793]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.29 Role-Based User Privilege Summary


A list of the system privileges and object permissions required to complete the various role-based user tasks.

Creating a Role-Based User


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Create a user MANAGE ANY USER system privilege


Grant a role during the user creation process you must have one of:

Administrative rights over the role being granted (role administrator)

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

Grant a system privilege during user creation you must have administrative rights
over the system privilege being granted.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

137

Deleting a Role-Based User


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

Converting a Role-Based User to a User Extended Role


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ROLES system privilege

Adding and Removing a User from a Role


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

You must have one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Adding and Removing System Privileges from a User


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

You must have administrative rights over the system privilege

Viewing or Modifying Role-Based User Options


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

138

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Role-Based User Privileges Required

SAP IQ 16.0

View the list of options none.


Modify any option Depending on the option being modified, requires one of:

SET ANY PUBLIC OPTION system privilege

SET ANY SECURITY OPTION system privilege

SET ANY SYSTEM OPTION system privilege

Generating Role-Based User DDL Commands


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None.

Viewing or Modifying Role-Based User Properties


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

View any user property page none.


Modify a password CHANGE PASSWORD system privilege
Modify a login policy, comment, or refresh DN MANAGE ANY USER system privilege
Refresh LDAP DN - MANAGE ANY USER system privilege
For privileges relating to user permissions, see Role-Based Database Object Permis
sions Privilege Summary [page 928]

Changing a Role-Based User Password


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

139

Forcing a Role-Based User Password Change


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

CHANGE PASSWORD system privilege

Unlocking a Role-Based User Account


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

Changing a Role-Based User Login Policy


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

140

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.1.30 Role-Based User-Extended Role Privilege Summary


A list of the system privileges and object permissions required to complete the various role-based userextended role tasks.

Creating a User-Extended Role


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Create a role both the MANAGE ANY USER and MANAGE ROLES system privileges.
Grant a role during user-extended role creation one of:

Administrative rights over the role being granted (role administrator)

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

Grant a system privilege during user-extended role creation administrative rights


over the system privilege being granted

Deleting a User-Extended Role


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

Converting a User-Extended Role to a Role-Based User


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the role being converted

Adding and Removing Grantees to and from a User-Extended Role


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

141

Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Changing Administrative Rights of a Grantee of a User-Extended Role


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Adding and Removing Underlying Roles to and from a User-Extended Role


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Enable the Manage Roles option one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Add an underlying system role MANAGE ROLES system privilege


Add an underlying user-defined or compatibility role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

Changing Administrative Rights on an Underlying Role of a User-Extended


Role
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

142

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 16.0

Enable the Manage Roles option one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Add an underlying system role MANAGE ROLES system privilege


Add an underlying user-defined or compatibility role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

Adding and Removing System Privileges to and from a User-Extended Role


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the system privilege. Administrative rights on the role is not
required.

Changing Administrative Rights on a System Privileges Granted to a UserExtended Role


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the system privilege. Administrative rights on the role is not
required.

Viewing or Modifying User-Extended Role Options


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

View user-extended role options only none


Modify user-extended role options depending on the option being modified, one of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

SET ANY PUBLIC OPTION system privilege

SET ANY SECURITY OPTION system privilege

SET ANY SYSTEM OPTION system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

143

Managing Role Administrators of a User-Extended Role


Database Version

Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role being managed

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

Adding the Global Role Administrator to a User-Extended Role


Database Version

Global Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

Administrative rights over the role being managed

Removing the Global Role Administrator from a User-Extended Role


Database Version

Global Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

One of:

Administrative rights over the role being managed

MANAGE ROLES system privilege

Generating User-Extended Role DDL Commands


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

Viewing or Modifying User-Extended Role Properties


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

144

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 16.0

View any user-extended role property page none


Modify a password CHANGE PASSWORD system privilege
Modify a login policy, or refresh LDAP DN MANAGE ANY USER system privilege
Modify a user-extended role comment one of:

MANAGE ROLES system privilege

Administrative rights over the role begin commented

For privileges relating to user permissions, see Role-Based Database Object Permis
sions Privilege Summary [page 928]

Changing a User-Extended Role Password


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

CHANGE PASSWORD system privilege

Forcing a User-Extended Role Password Change


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

Unlocking a User-Extended Role Account


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

145

Changing a User-Extended Role Login Policy


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

3.1.31 Role-Based Standalone Role Privilege Summary


A list of the system privileges and object permissions required to complete the various role-based standalone
role tasks.

Creating a Standalone Role


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Create a role MANAGE ROLES system privilege


Grant a role during standalone role creation one of:

Administrative rights over the role being granted (role administrator)

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

Grant a system privilege during standalone creation administrative rights over the
system privilege being granted

146

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Deleting a Standalone Role


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role being deleted

MANAGE ROLES system privilege if the role being deleted has a global role admin
istrator

Adding and Removing Grantees to and from a Standalone Role


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Changing a Grantee's Administrative Rights on a User-Extended Role


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Adding and Removing Underlying Roles to and from a Standalone Role


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

147

Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 16.0

Enable the Manage Roles option one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Add an underlying system role MANAGE ROLES system privilege


Add an underlying user-defined or compatibility role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

Changing Administrative Rights on an Underlying Role of a Standalone Role


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Enable the Manage Roles option one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Add an underlying system role MANAGE ROLES system privilege


Add an underlying user-defined or compatibility role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

Adding and Removing System Privileges to and from a Standalone Role


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the system privilege. Administrative rights on the role is not
required.

148

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Changing Administrative Rights on a System Privileges Granted to a


Standalone Role
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the system privilege. Administrative rights on the role is not
required.

Managing Role Administrators of a Standalone Role


Database Version

Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role being managed

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

Adding the Global Role Administrator to a Standalone Role


Database Version

Global Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

Administrative rights over the role being managed

Removing the Global Role Administrator from a Standalone Role


Database Version

Global Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

One of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

Administrative rights over the role being managed

MANAGE ROLES system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

149

Generating Standalone Role DDL Commands


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

Viewing or Modifying User-Extended Role Properties


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not Supported

SAP IQ 16.0

View any standalone role property page none


Modify a standalone role comment one of:

Administrative rights over the role being commented

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

For privileges relating to user permissions, see Role-Based Database Object Permis
sions Privilege Summary [page 928]

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

150

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.1.32 Role-Based Database Object Permissions Privilege


Summary
A list of the system privileges and object permissions required to complete the various role-based user, userextended role, or standalone role tasks relating to database objects.

Grant or Revoke Permissions on a Table or Column


Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

Modify Administrative Permissions on a Table or Column


Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

Grant or Revoke Permissions on a View or Materialized View


Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

151

Modify Administrative Permissions on a View or Materialized View


Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

Grant or Revoke Permissions on a Function or Procedure


Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

Grant or Revoke Permissions on a Sequence Generator


Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the sequence generator

Grant or Revoke Permissions on a Dbspace


Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]

152

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding a System Privilege to a User-Extended Role [page 849]


Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

3.1.33 Role-Based System Role Privilege Summary


A list of the system privileges and object permissions required to complete the various role-based system role
tasks.

View Grantees, Underlying Roles, and System Privileges Granted to a


System Role
Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

Adding and Removing Grantees to and from a System Role


Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ROLES system privilege

Adding and Removing Underlying Roles to and from a System Role


Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

153

Database Version

Role-Based System Role Privileges Required

SAP IQ 16.0

To enable the Manage Roles option MANAGE ROLES system privilege


To then add an underlying role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

Changing Administrative Rights of an Underlying Role on a System Role


Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

To enable the Manage Roles option MANAGE ROLES system privilege


To then add an underlying role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

Adding and Removing System Privileges from a System Role


Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ROLES system privilege along with administrative rights over the system
privilege

Changing Administrative Rights of an Underlying Role on a System Role


Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ROLES system privilege along with administrative rights over the system
privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]

154

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding a System Privilege to a User-Extended Role [page 849]


Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

3.1.34 Role-Based Compatibility Role Privilege Summary


A list of the system privileges and object permissions required to complete the various role-based
compatibility role tasks.

View Grantees, Underlying Roles, and System Privileges Granted to a


Compatibility Role
Database Version

Role-Based Compatibility Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

Granting and Revoking a Grantee to and from a Compatibility Roles


Database Version

Role-Based Compatibility Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the compatibility role

Deleting Compatibility Roles


Database Version

Role-Based Compatibility Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the compatibility role being deleted

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

155

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

3.1.35 Role-Based System Privilege Privilege Summary


A list of the system privileges and object permissions required to complete the various role-based system
privilege tasks.

View Users and Roles Granted to a Sytstem Privilege


Database Version

Role-Based System Privilege Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

Adding and Removing Grantees to and From a System Privilege


Database Version

Role-Based System Privilege Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over any system privilege

Changing Administrative Rights of a Grantee of a System Privilege


Database Version

Role-Based System Privilege Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over any system privilege

156

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

3.1.36 Login Mapping Privilege Summary


A list of the system privileges and object permissions required to complete the various login mapping tasks.

Creating a Login Mapping


Database Version

Login Mapping Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

USER ADMIN authority along with SELECT permission on the SYSLOGINMAP


view

SAP IQ 16.0

MANAGE ANY USER system privilege along with one of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

Deleting a Login Mapping


Database Version

Login Mapping Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

USER ADMIN authority along with SELECT permission on the SYSLOGINMAP


view

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

157

Database Version

Login Mapping Privileges Required

SAP IQ 16.0

MANAGE ANY USER system privilege along with one of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

Generating Login Mapping DDL Commands


Database Version

Login Mapping Privileges Required

SAP IQ 15.3 and 15.4

SELECT permission on the SYSLOGINMAP view

SAP IQ 16.0

One of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

Viewing Login Mapping Properties


Database Version

Login Mapping Privileges Required

SAP IQ 15.3 and 15.4

View Login Mapping properties SELECT permission on the SYSLOGINMAP view


Modify Login Mapping comment one of:

DBA authority
USER ADMIN authority along with SELECT permission on the SYSLOGINMAP
view

SAP IQ 16.0

View any login mapping property page one of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

Modify a login mapping comment MANAGE ANY USER system privilege along with
one of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]

158

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding Permissions on a View or Materialized View to a User or Role [page 916]


Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.37 Login Policy Privilege Summary


A list of the system privileges and object permissions required to complete the various login policy tasks.

Creating a Login Policy for a Simplex or Multiplex


Database Version

Login Policy Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

MANAGE ANY LOGIN POLICY system privilege

Deleting a Login Policy


Database Version

Login Policy Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

USER ADMIN authority

MANAGE ANY LOGIN POLICY system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

159

Generating Login Policy DDL Commands


Database Version

Login Policy Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing Login Policy Properties


Database Version

Login Policy Privileges Required

SAP IQ 15.3 and 15.4

View any login policy property page none


Modify any login policy property one of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

View any login policy property page none


Modify any login policy property MANAGE ANY LOGIN POLICY system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

160

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.1.38 LDAP Server Configuration Object Privilege Summary


A list of the system privileges and object permissions required to complete the various LDAP server
configuration object tasks for SAP IQ.

Creating an LDAP Server Configuration Object


Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY LDAP SERVER system privilege

Deleting an LDAP Server Configuration Object


Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY LDAP SERVER system privilege

Activating, Suspending, and Refreshing an LDAP Server Configuration


Object
Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY LDAP SERVER system privilege

Validating User
Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY LDAP SERVER system privilege

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

161

Generating LDAP Server Configuration Object DDL Commands


Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

Viewing or Modifying LDAP Server Configuration Object Properties


Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

View any LDAP server property page none


Modify any LDAP server property MANAGE ANY LDAP SERVER system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

162

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.1.39 Dbspace Privilege Summary


A list of the system privileges and object permissions required to complete the various dbspace tasks.

Creating a Dbspace
Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

Deleting a Dbspace
Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

Preallocating Space for a Dbspace


Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

Generating Dbspace DDL Commands


Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

163

Changing a Dbspace to Read-Only


Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

Configuring Point-in-Time Recovery Logging Options


Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

Viewing or Modifying Dbspace Properties


Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

View any dbspace property page none


Modify dbspace permissions one of:

DBA authority

PERMS ADMIN authority

Modify any other dbspace property one of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

View any dbspace property page none


Modify dbspace permissions MANAGE ANY DBSPACE system privilege
Modify any other dbspace property MANAGE ANY DBSPACE system privilege

164

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Granting and Revoking Dbspace CREATE Permission


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

MANAGE ANY DBSPACE system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.40 Dbfile Privilege Summary


A list of the system privileges and object permissions required to complete the various dbfile tasks.

Creating a Dbfile
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

SPACE ADMIN authority

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

165

Database Version

Dbfile Privileges Required

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

Deleting a Dbfile
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

Emptying a Dbfile
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

Generating Dbfile DDL Commands


Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Dbfile Properties


Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

View any dbfile property page none


Modify any dbfile property One of:

166

DBA authority

SPACE ADMIN authority

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Dbfile Privileges Required

SAP IQ 16.0

View any dbfile property page none


Modify any dbfile property MANAGE ANY DBSPACE system privilege

Granting or Revoking Dbspace CREATE Permission


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

MANAGE ANY DBSPACE system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

167

3.1.41 Event Privilege Summary


A list of the system privileges and object permissions required to complete the various event tasks.

Creating an Event
Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

CREATE ANY OBJECT system privilege

Deleting an Event
Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

DROP ANY OBJECT system privilege

Disabling or Enabling an Event


Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

Triggering an Event
Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EVENT system privilege

168

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Generating Event DDL Commands


Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Event Properties


Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

View event properties none


Modify event comment or properties DBA authority

SAP IQ 16.0

View event properties only none


Modify event properties one of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

Modify event comment only one of:

MANAGE ANY EVENT system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

Creating an Event Schedule


Database Version

Event Schedule Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

Deleting an Event Schedule


Database Version

Event Schedule Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

169

Database Version

Event Schedule Privileges Required

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

Generating Event Schedule DDL Commands


Database Version

Event Schedule Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Event Schedule


Properties
Database Version

Event Schedule Privileges Required

SAP IQ 15.3 and 15.4

View any event schedule property page none


Modify any event schedule property DBA authority

SAP IQ 16.0

View any event schedule property page none


Modify any event schedule property one of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]

170

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding Permissions on a Table or Column to a User or Group [page 784]


Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.42 Java External Environment Privilege Summary


A list of the system privileges and object permissions required to complete the various external environment
Java tasks.

Installing a Java Classes or JAR File


Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Updating a Java Classes or JAR File


Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Deleting a Java Classes or JAR File


Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

171

Viewing or Modifying a Java Classes or JAR File


Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

View external environment properties none


Modify external environment properties DBA authority

SAP IQ 16.0

View external environment properties none


Modify external environment properties MANAGE ANY EXTERNAL OBJECT system
privilege

Testing the Configuration of a Java External Environment


Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL ENVIRONMENT system privilege

Viewing or Modifying Java External Environment Properties


Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL ENVIRONMENT
system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]

172

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding USAGE Permission to a User or Role [page 926]


Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.43 Perl External Environment Privilege Summary


A list of the system privileges and object permissions required to complete the various Perl external
environment tasks.

Installing a Perl Object


Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Updating a Perl Object


Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Deleting a Perl Object


Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

173

Viewing or Modifying a Perl Object Properties


Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

View external environment properties none


Modify View external environment properties DBA authority

SAP IQ 16.0

View external environment properties none


Modify external environment properties MANAGE ANY EXTERNAL OBJECT system
privilege

Testing the Configuration of a Perl External Environment


Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Viewing or Modifying Perl External Environment Properties


Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL OBJECT sys
tem privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]

174

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding USAGE Permission to a User or Role [page 926]


Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.44 PHP External Environment Privilege Summary


A list of the system privileges and object permissions required to complete the various PHP external
environment tasks.

Installing a PHP Object


Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

View external environment properties none


Modify external environment properties DBA authority

SAP IQ 16.0

View external environment properties none


Modify external environment properties MANAGE ANY EXTERNAL OBJECT system
privilege

Updating a PHP Object


Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Deleting a PHP Object


Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

175

Viewing or Modifying a PHP Object Properties


Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

View properties none


Modify comment MANAGE ANY EXTERNAL OBJECT system privilege

Testing the Configuration of a PHP External Environment


Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Viewing or Modifying PHP External Environment Properties


Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL OBJECT sys
tem privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]

176

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Adding Permissions on a Table or Column to a User or Group [page 784]


Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.45 Other External Environment Privilege Summary


A list of the system privileges and object permissions required to complete the various external environment
tasks.

Viewing or Modifying C ESQL, C ODBC, or CLR (.NET) Executable Properties


Database Version

Other External Environment Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL OBJECT sys
tem privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

177

3.1.46 Function Privilege Summary


A list of the system privileges and object permissions required to complete the various function tasks.

Creating a Watcom SQL or Transact-SQL Function


Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

Watcom SQL or Transact-SQL function to be owned by self one of:

DBA authority

RESOURCE ADMIN authority

Watcom SQL or Transact-SQL function to be owned by any user DBA authority


SAP IQ 16.0

Watcom SQL or Transact-SQL to be owned by self CREATE PROCEDURE system


privilege
Watcom SQ or Transact-SQL function to be owned by any user one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

Creating an External C/C++ Scalar or Aggregate Function


Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

External C/C++ Scalar or Aggregate function to be owned by self or any user DBA
authority

SAP IQ 16.0

External C/C++ Scalar or Aggregate function to be owned by self all of:

CREATE PROCEDURE system privilege

CREATE EXTERNAL REFERENCE system privilege

External C/C++ Scalar or Aggregate function to be owned by any user CREATE EX


TERNAL REFERENCE system privilege along with one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

Creating an External Java Function


Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

External Java function to be owned by self or any user DBA authority

178

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Function Privileges Required

SAP IQ 16.0

External Java function to be owned by self all of:

CREATE PROCEDURE system privilege

CREATE EXTERNAL REFERENCE system privilege

External Java function to be owned by any user CREATE EXTERNAL REFERENCE


system privilege along with one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

Deleting a Function
Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the function

One of:

DROP ANY PROCEDURE system privilege

DROP ANY OBJECT system privilege

You own the function

Generating Function DDL Commands


Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

179

Viewing or Modifying Function Properties


Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

View any function property page regardless of type none


Modify permissions for any function type one of:

DBA authority

PERMS ADMIN authority

You own the database object

Modify any other function property regardless of type one of:

SAP IQ 16.0

DBA authority

You own the function

View any function property page regardless of type none


Modify SQL code for Watcom SQL or Transact-SQL function one of:

ALTER ANY PROCEDURE system privilege

ALTER ANY OBJECT system privilege

You own the function

Modify SQL code for External C/C++ Scalar or Aggregate, or External Java function
CREATE EXTERNAL REFERENCE system privilege along with one of:

ALTER ANY PROCEDURE system privilege

ALTER ANY OBJECT system privilege

You own the function

Modify a comment for any function type one of:

CREATE ANY PROCEDURE system privilege.

ALTER ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the function

Modify permissions for any function type one of:

180

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Granting or Revoking Function EXECUTE Permission


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

181

3.1.47 Procedure Privilege Summary


A list of the system privileges and object permissions required to complete the various procedure tasks.

Creating a Procedure
Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

Watcom SQL or Transact-SQL procedure to be owned by self one of:

DBA authority

RESOURCE ADMIN authority

Watcom SQL or Transact-SQL, to be owned by any user DBA authority


External C/C++ or External Environment procedure to be owned by self or any user
DBA authority
SAP IQ 16.0

Watcom SQL or Transact-SQL procedure to be owned by self CREATE PROCEDURE


system privilege
Watcom SQL or Transact-SQL procedure to be owned by any user one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

External C/C++ or External Environment procedure to be owned by self all of:

CREATE EXTERNAL REFERENCE system privilege

CREATE PROCEDURE system privilege

External C/C++ or External Environment procedure to be owned by any user CRE


ATE EXTERNAL REFERENCE system privilege along with one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

Creating a Remote Procedure


Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

Remote procedure to be owned by self or any user DBA authority

SAP IQ 16.0

Remote procedure to be owned by self CREATE PROCEDURE system privilege


Remote procedure to be owned by any user one of:

182

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Creating a Table UDF or TPF


Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

Table UDF or TPF to be owned by self all of:

CREATE EXTERNAL REFERENCE system privilege

CREATE PROCEDURE system privilege

Table UDF or TPF to be owned by any user CREATE EXTERNAL REFERENCE system
privilege along with one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

Executing a Procedure Using View Data in SQL


Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You have EXECUTE permission on the procedure

You own the procedure

One of:

EXECUTE ANY PROCEDURE system privilege

You have EXECUTE permission on the procedure

You own the procedure

Deleting a Procedure
Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Configure SAP IQ Cockpit

DBA authority

You own the procedure

One of:

DROP ANY PROCEDURE system privilege

DROP ANY OBJECT system privilege

You own the procedure

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

183

Generating Procedure DDL Commands


Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Procedure Properties


Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

View any procedure property page regardless of type none


Modify permissions for any procedure type one of:

DBA authority

PERMS ADMIN authority

You own the database object

Modify any other procedure property regardless of type one of:

184

DBA authority

You own the procedure

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Procedure Privileges Required

SAP IQ 16.0

View any procedure property page regardless of type none


Modify SQL code for Watcom-SQL or Transcat-SQL procedures one of:

ALTER ANY PROCEDURE system privilege

ALTER ANY OBJECT system privilege

You own the procedure

Modify SQL code for Table UDFs, TPFs, or External Environment procedures CREATE
EXTERNAL REFERENCE system privilege along with one of:

ALTER ANY PROCEDURE system privilege.

ALTER ANY OBJECT system privilege

You own the procedure

Modify a comment for any procedure type one of:

CREATE ANY PROCEDURE system privilege

ALTER ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the procedure

Modify permissions for any procedure type one of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

Granting or Revoking Procedure EXECUTE Permission


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

185

Adding a System Privilege to a Standalone Role [page 886]


Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

3.1.48 Web Service Privilege Summary


A list of the system privileges and object permissions required to complete the various Web service tasks.

Creating a Web Service


Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY WEB SERVICE system privilege

Enabling or Disabling a Web Service


Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY WEB SERVICE system privilege

Deleting a Web Service


Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

186

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Database Version

Web Service Privileges Required

SAP IQ 16.0

MANAGE ANY WEB SERVICE system privilege

Generating Web Service DDL Commands


Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Web Service Properties


Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

View any Web service property page none


Modify any Web service property DBA authority

SAP IQ 16.0

View any Web service property page none


Modify any Web service property MANAGE ANY WEB SERVICE system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

187

3.2

Configuring the E-mail Server

Specify the e-mail server for SAP IQ Cockpit to use to send alert notifications.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. Select General Settings.


3. Click the E-mail tab.
4. Enter the name of the e-mail server.
5. Change the default e-mail server port only in consultation with your e-mail administrator.
6. (Optional) Send a test e-mail to verify the e-mail server is correctly configured.
7. (Optional) Click Customize e-mail settings to display options for setting the domain name and e-mail
sender for e-mail alert notifications.
a. Enter your domain name (for example, mycompany.com).
Most e-mail servers do not require SAP IQ Cockpit to provide an explicit domain name. Try providing a
domain name here if your first attempt to configure e-mail alerts fails.
b. Change the default e-mail sender name.
This name appears in the "From" field of SAP IQ Cockpit e-mail alert messages. Do not use spaces;
use hyphens or underscore characters instead.

Tip
If you have multiple SAP IQ Cockpit servers, configure their sender names so you can identify which
SAP IQ Cockpit an alert is coming from. For example, Cockpit_Boston or Cockpit_test11.
c. If you entered anything in the E-mail Domain name or E-mail sender name fields, click Apply to make
the test e-mail option reappear.
d. To dispatch a test message, enter an e-mail address in the Test e-mail address field and click Send.
If the test e-mail is received, you have properly configured the server for e-mail alert notifications.
8. Click OK to update any changes and close the Cockpit Settings page.

188

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.3

Configuring Retrieval Thresholds for SAP IQ Cockpit

Set limits on the time SAP IQ Cockpit waits for data to load or on the number of rows it loads.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Context
Performing some tasks may cause the SAP IQ Cockpit to load a large amount of data, which can be timeconsuming and can place a heavy load on your network. SAP IQ Cockpit mitigates this problem by displaying
placeholders called message rows when data takes longer than a specified number of seconds to retrieve, or
exceeds a specified number of rows. The data retrieval options let you specify those numbers.

Note
This option is only applicable to the EXPLORE workset of the cockpit.
This data retrieval scheme reduces network traffic, since result sets that exceed the specified row count are
not transmitted unless you ask for them by expanding a message row.

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. Select General Settings.


3. Click the EXPLORE workset.
4. Set the timeout for data retrieval in seconds.
When SAP IQ Cockpit is not able to return all requested data within this period of time, it generates
message rows in place of the results. SAP IQ Cockpit replaces message rows with real data as soon as the
data arrives.
5. Set the row count.
When a request returns results that exceed the specified row count, SAP IQ Cockpit displays a message
row in place of the expected results. You can expand the message row by selecting it, clicking the
dropdown arrow, and selecting Expand.
6. Click OK to update any changes and close the Cockpit Settings page.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

189

3.4

Configuring the Automatic Logout Timer

Set SAP IQ Cockpit to end login sessions when users are inactive for too long.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. Select General Settings.


3. Click the Auto-Logout tab.
4. Enter the number of minutes after which an idle user will be automatically logged out.
Enter 0 or leave the box empty to disable automatic logout.
5. Click OK to update any changes and close the Cockpit Settings page.

3.5

Collection Jobs

Statistics collection jobs provide the data that appears on the Statistics Chart on the MONITOR workset. Some
collection jobs are also used to manage and monitor alerts on the ALERTS workset.
Data gathered by collection jobs appears on the Statistics Chart page on the MONITOR workset. If you attempt
to view data for a collection job that has not been created, No data was found for statistic appears.
Alerts can only be configured on the three default collection jobs (see Configuring Alerts).
The Availability Statistics, Performance Statistics, and Capacity Statistics collection jobs are scheduled by
default. Additional collection jobs can be created and scheduled as needed.
You can define job schedules as one-time or repeating, and modify the schedule for a job based on a number
of attributes such as repeat interval, date and time. Statistics gathering consumes system resources
intensively; the more collection jobs you run, the greater the burden on your server. The data is stored in the
repository. The job history displays the status of jobs executed each day.
All collections jobs run using the technical user account.

190

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Related Information
Simplex Collections Jobs [page 191]
Multiplex Collections Jobs [page 194]
Logical Server Collections Jobs [page 195]
Executing and Stopping a Collection Job [page 197]
Creating and Scheduling a Collection Job [page 198]
Deleting a Collection Job [page 199]
Viewing Collection Job Schedule Details [page 200]
Resuming and Suspending a Collection Job [page 200]
Scheduling a Collection Job [page 201]
Modifying the Collection Interval for a Scheduled Job [page 202]
Viewing the Job Execution History [page 203]
Configuring Alerts [page 1194]

3.5.1 Simplex Collections Jobs


Predefined simplex data collections that generate statistics for the historical data displayed in the Statistics
Chart. Collected statistics appear on the statistics charts on the MONITOR workset.
Some collection jobs collect the same data. It may not be necessary to create a collection job if the data is
already being gathered.
Collection Job

Description

Statistics Gathered

IQ Availability Statistics

Contains the availability statistics


used to monitor and manage alerts.

Note

Available Connections (Count)

DBSpaces Online (Count)

Resource State (State)

Total CPU Usage (Percent)

Catalog Cache in Use (Percent)

Deadlocks Count (Count)

IQ Threads Usage (Percent)

IQ Waiting Operations (Count)

Long Running Transactions (Count)

Main Cache in Use (Percent)

Temporary Cache in Use (Percent)

Do not delete or suspend this col


lection.
IQ Performance Statistics

Contains the performance statistics


used to monitor and manage alerts.

Note
Do not delete or suspend this col
lection.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

191

Collection Job

Description

IQ Capacity Statistics

Contains the capacity statistics used


to monitor and manage alerts.

DBSpace Highest Size in Use (Percent)

Percentage of Available RLV Memory (Per


cent)

Store Disk Usage (Percent)

Do not delete or suspend this col


lection.

Total CPU Idle (Percent)

Contains performance statistics for


caches.

Catalog Cache Dirty Pages Percent (Percent)

Note

IQ Cache Statistics

IQ Engine Statistics

Statistics Gathered

Contains performance statistics for


the SAP IQ engine.

Catalog Cache Hits Per Second (Count)

Catalog Cache in Use (Percent)

Catalog Cache Pinned (Count)

Catalog Cache Pinned Percent (Percent)

Catalog Cache Reads Per Second (Count)

Catalog Cache Size (MB)

Main Cache Dirty Pages Percent (Percent)

Main Cache Hits Per Second (Count)

Main Cache in Use (Percent)

Main Cache Pinned (Count)

Main Cache Pinned Percent (Percent)

Main Cache Reads Per Second (Count)

Main Cache Size (MB)

Temporary Cache Dirty Pages Percent (Per


cent)

Temporary Cache Hits Per Second (Count)

Temporary Cache in Use (Percent)

Temporary Cache Pinned (Count)

Temporary Cache Pinned Percent (Percent)

Temporary Cache Reads Per Second (Count)

Temporary Cache Size (MB)

IQ Maximum Memory Allocated (MB)

IQ Memory Allocated (MB)

IQ Threads Available (Count)

IQ Threads in Use (Count)

IQ Threads Usage (Percent)

System CPU Usage (Percent)

Total CPU Idle (Percent)

Total CPU Usage (Percent)

User CPU Usage (Percent)

Cockpit Agent Availability Sta


tistics

Contains agent resource state statis


tics

IQ DBSpace File Statistics

Contains dbspace file performance


statistics.

DBSpace File Size in Use (MB)

Percentage of Available DBSpace File (Per


cent)

Contains dbspace performance sta


tistics.

DBSpace Size in Use (MB)

Percentage of Available DBSpace (Percent)

IQ DBSpace Statistics

192

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Agent Resource State (Status)

SAP IQ Cockpit
Configure SAP IQ Cockpit

Collection Job

Description

IQ Transaction Statistics

Contains transaction performance


statistics.

IQ RLV Memory Statistics

IQ Store I/O Statistics

IQ Operations/Requests Sta
tistics

IQ Connection Statistics

IQ Network Statistics

SAP IQ Cockpit
Configure SAP IQ Cockpit

Statistics Gathered

Contains RLV memory statistics.

Contains performance statistics for


store reads and writes.

Contains performance statistics re


lated to operations and requests.

Contains connection performance


statistics.

Contains network-related perform


ance statistics.

Active INC Transactions (Count)

Active Load Table Statements (Count)

Active Transactions (Count)

Active User Transactions (Count)

Deadlocks Count (Count)

Long Running Transactions (Count)

Percentage of Available RLV Memory (Per


cent)

RLV Memory Size in Use (MB)

Catalog Store Disk Reads Per Second (KB)

Catalog Store Disk Writes Per Second (KB)

Temporary Store Disk Reads Per Second


(KB)

Temporary Store Disk Writes Per Second


(KB)

Main Store Disk Reads Per Second (KB)

Main Store Disk Writes Per Second (KB)

IQ Active Operations (Count)

IQ Waiting Operations (Count)

Requests Per Second (Count)

Unscheduled Requests (Count)

Active Connections (Count)

Active INC Incoming Connections (Count)

Active INC Outgoing Connections (Count)

Active User Connections (Count)

Available Connections (Count)

Resumed INC Connections (Count)

Rolled back INC Connections (Count)

Suspended INC Connections (Count)

User Connections Per Minute (Count)

User Disconnections Per Minute (Count)

Available Communication Buffers (Count)

Bytes Received Per Second (Bytes)

Bytes Received Uncompressed Per Second


(Bytes)

Bytes Sent Per Second (Bytes)

Bytes Sent Uncompressed Per Second


(Bytes)

Total Communication Buffers (Count)

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

193

3.5.2 Multiplex Collections Jobs


Predefined multiplex data collections that generate statistics for the historical data displayed in the Statistics
Chart. Collected statistics appear on the statistics charts on the MONITOR workset.
Some data collections collect the same data. It may not be necessary to create a collection job if the data is
already being gathered.
Collection Job

Description

Multiplex Availability Statis


tics

Contains the availability statistics used


to monitor and manage alerts.

Note

Statistics Gathered

Average Available Connections (Count)

Average CPU Usage (Percent)

Resource State (State)

Do not delete or suspend this col


lection.
Multiplex Performance Statis
tics

Contains the performance statistics


used to monitor and manage alerts.

Note
Do not delete or suspend this col
lection.

Multiplex Capacity Statistics

Contains the capacity statistics used


to monitor and manage alerts.

Note

Average Catalog Cache in Use (Percent)

Average Deadlocks (Count)

Average Long Running Transactions (Count)

Average Main Cache in Use (Percent)

Average Temporary Cache in Use (Percent)

Average Threads Usage (Percent)

Average Waiting Operations (Count)

Average CPU Idle (Percent)

Average DBSpace High Usage (Percent)

Average Store Disk Usage (Percent)

Average Active Operations (Count)

Do not delete or suspend this col


lection.
Multiplex Operations/
Requests Statistics

194

Contains performance statistics re


lated to operations and requests.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Average Waiting Operations (Count)

Maximum Active Operations (Count)

Maximum Waiting Operations (Count)

Minimum Active Operations (Count)

Minimum Waiting Operations (Count)

Total Active Operations (Count)

Total Waiting Operations (Count)

SAP IQ Cockpit
Configure SAP IQ Cockpit

Collection Job

Description

Multiplex Transaction Statis


tics

Contains transaction performance sta


tistics.

Multiplex Cache Statistics

Multiplex Connection Statis


tics

Statistics Gathered

Contains performance statistics for


caches.

Contains connection performance sta


tistics.

Note
For user connection statistics are
also available in the Multiplex Con
nection Statistics except Default
collection.
Multiplex Engine Statistics

Contains performance statistics for


the SAP IQ engine.

Average Active Load Table Statements


(Count)

Average User Transactions (Count)

Maximum Active Load Table Statements


(Count)

Maximum User Transactions (Count)

Minimum Active Load Table Statements


(Count)

Minimum User Transactions (Count)

Total Active Load Table Statements (Count)

Total User Transactions (Count)

Average Catalog Cache in Use (Percent)

Average Main Cache in Use (Count)

Average Temporary Cache in Use (Percent)

Maximum Catalog Cache in Use (Percent)

Maximum Main Cache in Use (Count)

Maximum Temporary Cache in Use (Per


cent)

Minimum Catalog Cache in Use (Percent)

Minimum Main Cache in Use (Count)

Minimum Temporary Cache in Use (Per


cent)

Average Available Connections (Count)

Average User Connections (Count)

Maximum Available Connections (Count)

Maximum User Connections (Count)

Minimum Available Connections (Count)

Minimum User Connections (Count)

Total Available Connections (Count)

Total User Connections (Count)

Average CPU Usage (Percent)

Maximum CPU Usage (Percent)

Minimum CPU Usage (Percent)

3.5.3 Logical Server Collections Jobs


Predefined logical server data collections that generate statistics for the historical data displayed in the
Statistics Chart. Collected statistics appear on the statistics charts on the MONITOR workset.
Some data collections collect the same data. It may not be necessary to create a collection job if the data is
already being gathered.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

195

Collection Job

Description

Logical Server Availability


Statistics

Contains the availability statistics


used to monitor and manage alerts.

Note

Statistics Gathered

Average Available Connections (Count)

Average CPU Usage (Percent)

Resource State (State)

Average Catalog Cache in Use (Percent)

Average Deadlocks (Count)

Average Long Running Transactions (Count)

Average Main Cache in Use (Percent)

Average Temporary Cache in Use (Percent)

Do not delete or suspend this col


lection.
Logical Server Performance
Statistics

Contains the performance statistics


used to monitor and manage alerts.

Note
Do not delete or suspend this col
lection.

Logical Server Capacity Sta


tistics

Contains the capacity statistics used


to monitor and manage alerts.

Note

Average Threads Usage (Percent)

Average Waiting Operations (Count)

Average CPU Idle (Percent)

Average DBSpace High Usage (Percent)

Average Store Disk Usage (Percent)

Average Active Load Table Statements


(Count)

Average User Transactions (Count)

Maximum Active Load Table Statements


(Count)

Maximum User Transactions (Count)

Minimum Active Load Table Statements


(Count)

Do not delete or suspend this col


lection.
Logical Server Transaction
Statistics

Logical Server Engine Statis


tics

Logical Server Operations/


Requests Statistics

196

Contains transaction performance


statistics.

Contains performance statistics for


the SAP IQ engine.

Contains performance statistics re


lated to operations and requests.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Minimum User Transactions (Count)

Total Active Load Table Statements (Count)

Total User Transactions (Count)

Average CPU Usage (Percent)

Maximum CPU Usage (Percent)

Minimum CPU Usage (Percent)

Average Active Operations (Count)

Average Waiting Operations (Count)

Maximum Active Operations (Count)

Maximum Waiting Operations (Count)

Minimum Active Operations (Count)

Minimum Waiting Operations (Count)

Total Active Operations (Count)

Total Waiting Operations (Count)

SAP IQ Cockpit
Configure SAP IQ Cockpit

Collection Job

Description

Logical Server Connection


Statistics

Contains connection performance sta


tistics.

Logical Server Cache Statis


tics

Statistics Gathered

Contains performance statistics for


caches.

Average Available Connections (Count)

Average User Connections (Count)

Maximum Available Connections (Count)

Maximum User Connections (Count)

Minimum Available Connections (Count)

Minimum User Connections (Count)

Total Available Connections (Count)

Total User Connections (Count)

Average Catalog Cache in Use (Percent)

Average Main Cache in Use (Count)

Average Temporary Cache in Use (Percent)

Maximum Catalog Cache in Use (Percent)

Maximum Main Cache in Use (Count)

Maximum Temporary Cache in Use (Percent)

Minimum Catalog Cache in Use (Percent)

Minimum Main Cache in Use (Count)

Minimum Temporary Cache in Use (Percent)

3.5.4 Executing and Stopping a Collection Job


You can run or stop a data collection job.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Procedure
1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. In the left pane, select Collection Jobs.


3. Select a job in the Job Name column.
4. On the General tab:
To execute a job immediately, click Execute.
To stop a job, click Stop, then click Yes to confirm.

Tip
If the General tab is grayed out, you have selected a schedule (child) rather than a job (parent) in the
Collection Jobs table. Select the parent job to enable the General tab.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

197

3.5.5 Creating and Scheduling a Collection Job


Besides the default collection job, you can create and schedule additional data collection jobs.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Context
For best performance, SAP recommends these guidelines for scheduling data collection jobs:
Schedule only one collection job for each collection.
Set the collection interval to 5 minutes or more. (The default is 5 minutes.)

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. In the left pane, select Collection Jobs.


3. Click Create Job.
4. On the Collection Information page, select the data collection for the job.
5. Ensure the Save data collected from this job option is selected, or no data will be available on the
Statistics Chart page for the job.

Note
This option cannot be modified once the job is created. If you need to change it, delete and recreate the
collection job.
6. On the Scheduling Information page, if you do not want to schedule the job, unselect Create a schedule
for this job. You can schedule the collection job later, if needed. Skip to step 8 [page 199].
7. To schedule the data collection job, specify:

198

Field

Description

Name

A name for this schedule.

Description

A description of this schedule.

Start the job

Select Now or Later. If you choose Later, specify the start date and time.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Field

Description

Run the job

Specify frequency:

Once

Repetitively at a repeat interval between job executes you specify in seconds,


minutes, hours, or days.

Until a stop date and time that you specify.

Note
Enter dates and times using your local time. SAP IQ Cockpit converts your
times for remote time zones if necessary.
You cannot change the frequency of a scheduled job. To change the frequency, delete
and recreate the job.

8. Click Finish.

3.5.6 Deleting a Collection Job


You can delete one or more data collection jobs.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Context
Caution
Data gathered by the Availability Statistics, Performance Statistics, and Capacity Statistics collections is
used to trigger alerts. If you delete one of these collection jobs, it is automatically re-created the next time
automatic discovery occurs (every five minutes). Until re-created, no new collection data is gathered on
which to trigger alerts.

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. In the left pane, select Collection Jobs.


3. Select the job in the Job Name column and click Delete.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

199

4. Click OK to confirm the deletion.

3.5.7 Viewing Collection Job Schedule Details


Display schedule details from a data collection job.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Context
You can only view schedule details; you cannot modify them.

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. Select Collection Jobs.


3. Expand a job in the Job Name column.
If there is no arrow to the left of the jobs name, this job has no schedules.
4. Select a schedule in the Schedule Name column.
The name, description, start and end dates, and repeat interval appear on the Schedule tab.
5. Click OK.

3.5.8 Resuming and Suspending a Collection Job


You can resume or suspend a data collection job.

Prerequisites
Membership in the COCKPIT_ADMIN role.

200

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Context

Caution
Data gathered by the Availability Statistics, Performance Statistics, and Capacity Statistics collections is
used to trigger alerts. If you suspend one of these collection jobs, no new collection data is gathered on
which to trigger new alerts until you resume the collection job.

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. Select Collection Jobs.


3. Select a job in the Job Name column.
4. On the General tab:
To resume a job, click Resume.
To suspend a job, click Suspend, then click Yes to confirm the suspension.

Tip
If the General tab is grayed out, you have selected a schedule (child) rather than a job (parent) in the
Collection Jobs table. Select the parent job to enable the General tab.

3.5.9 Scheduling a Collection Job


You can schedule when a data collection job runs.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Context
A collection job can be scheduled more than once. You must delete and recreate the job to change any
property of a scheduled job except the repeat interval.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

201

Procedure
1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. Select Collection Jobs.


3. Select a job in the Job Name column.
4. Click Add Schedule.
5. Specify details for the schedule:
Field

Description

Name

A name for this schedule.

Description

A description of this schedule.

Start the job

Select Now or Later. If you choose Later, specify the start date and time.

Run the job

Specify frequency:

Once

Repetitively at a repeat interval between job executes you specify in seconds,


minutes, hours, or days.

Until a stop date and time that you specify.

Note
Enter dates and times using your local time. SAP IQ Cockpit converts your
times for remote time zones if necessary.
You cannot change the frequency of a scheduled job. To change the frequency, delete
and recreate the job.

6. Click Finish to save the schedule.


7. Click OK.

3.5.10 Modifying the Collection Interval for a Scheduled Job


You can modify the repeat interval at which a scheduled job runs.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Context
Once a job is scheduled, only the repeat interval can be modified. You must delete and recreate the collection
job to change any other aspect of the scheduled job.

202

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. Select Collection Jobs.


3. Expand a scheduled job in the Job Name column.

Note
If there is no arrow to the left of the job name, the job is not scheduled.
4. Select the scheduled job in the Schedule Name column.
5. On the Schedule tab, modify the Repeat interval field.
6. Click OK.

3.5.11 Viewing the Job Execution History


View a data collection job execution history.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. Select Collection Jobs.


3. Select a job in the Job Name column.
4. Click the History tab.

3.6

Repository

The SAP IQ Cockpit embedded repository stores information related to the server being managed, as well as
user preference data, operational data, statistics, and alert configuration.
You can back up the repository database on demand, schedule automatic backups, restore the repository
from backups, and configure repository purging options. Full and incremental backups are available. A full

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

203

backup copies the entire repository. An incremental backup copies the transaction log, capturing any changes
since the last full or incremental backup.
By default, SAP IQ Cockpit saves backups as follows:
Each full backup is stored in its own subdirectory in %SYBASE%\backup.
Each incremental backup is stored in a file in %SYBASE%\backup\incremental.
SAP recommends that you periodically move backup files to a secondary storage location to prevent the
installation directory from becoming too large.

Related Information
Scheduling Backups of the Repository [page 204]
Suspending or Resuming a Scheduled Backup [page 205]
Modifying the Backup Schedule [page 206]
Forcing an Immediate Backup [page 206]
Restoring the Repository from Backups [page 207]
Configuring Repository Purging [page 208]

3.6.1 Scheduling Backups of the Repository


Configure full and incremental backups of the repository to occur automatically.

Prerequisites
Determine your backup strategy, including when to perform full backups and incremental backups. For
example, you might schedule incremental backups every day and a full backup every Saturday.
Membership in the COCKPIT_ADMIN role.

Context
A full backup copies the entire repository. An incremental backup copies the transaction log, capturing any
changes since the last full or incremental backup.

204

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. In the left pane, select Repository.


3. In the right pane, choose:
Incremental Backup
Full Backup
4. To change the directory in which the backup is stored, click Browse, and navigate to the desired directory.
5. Select Schedule a Regular Backup.
6. Specify a Start date or click the calendar and select a date.
7. Use the Time and AM/PM controls to specify the time to start the backup.
8. Use the Repeat interval control to specify how often the backup occurs.
9. (Optional) To purge the repository after each backup, select Run a repository purge after the backup
completes.
a. If you include purging in the backup schedule, select the Size Management tab and unselect
Automatically purge the repository periodically to disable automatic purging.
10. Click Apply to save the schedule.

Next Steps
Set purging options on the Size Management tab.

3.6.2 Suspending or Resuming a Scheduled Backup


Suspend or resume a scheduled backup of the repository.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. In the left pane, select Repository.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

205

3. In the right pane, choose:


Incremental Backup
Full Backup
4. Select or unselect Schedule a Regular Backup.
When you unselect this option, the scheduling area is grayed out and scheduled backups no longer occur.
However, the schedule is preserved and you can reinstate it at any time.
5. Click OK to update any changes and close the Cockpit Settings page.

3.6.3 Modifying the Backup Schedule


Change the backup schedule for the repository.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. In the left pane, select Repository.


3. In the right pane, choose:
Incremental Backup
Full Backup
4. To change the backup schedule, edit the Start date, Time, Repeat interval, or units. You can also select or
unselect Run a repository purge after the backup completes.
5. Click OK to update any changes and close the Cockpit Settings page.

3.6.4 Forcing an Immediate Backup


Perform an unscheduled full or incremental backup of the repository.

Prerequisites
Membership in the COCKPIT_ADMIN role.

206

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. In the left pane, select Repository.


3. In the right pane, choose:
Incremental Backup
Full Backup
4. Click Back up Now.
5. Click Yes at the confirmation prompt to begin the backup.
6. Click OK to acknowledge when the backup is complete.

3.6.5 Restoring the Repository from Backups


Load backup files into the repository database to revert undesirable changes or to recover from a catastrophic
failure.

Context
If you configured SAP IQ Cockpit to store backups somewhere other than the default location, change the
source directory in the copy commands in this procedure.

Procedure
1. Log out of the SAP IQ Cockpit console, if it is running.
2. Shut down the SAP IQ Cockpit server.
3. Copy the most recent full backup from \backup to \services\Repository\db.
Windows:
%SYBASE%\COCKPIT-4\backup
%SYBASE%\COCKPIT-4\services\Repository\db
UNIX:
$SYBASE/COCKPIT-4/backup
$SYBASE/COCKPIT-4/services/Repository/db
4. If you have incremental backups to load:

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

207

a. Copy the log file from \backup\incremental\<generated_directory_name> to \services


\Repository:
Windows:
%SYBASE%\COCKPIT-4\backup\incremental\<generated_directory_name>
%SYBASE%\COCKPIT-4\services\Repository
UNIX:
$SYBASE/COCKPIT-4/backup/incremental/<generated_directory_name>
$SYBASE/COCKPIT-4/services/Repository
b. Skip to step 6 [page 208].
5. (Optional) To load incremental backups, start the repository database using the -ad option, which directs
it to load transaction logs (incremental backups) from the incremental directory. (The database loads
full backups automatically.)
6. Start the SAP IQ Cockpit server.
If you loaded incremental backups, SAP IQ Cockpit starts normally (that is, no further recovery occurs). If
you copied a full backup to the Repository directory, the database recovers the repository from the full
backup.

3.6.6 Configuring Repository Purging


Change repository purging options.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Context
As you decide how to purge your repository, consider that:
Purging keeps the repository from absorbing too much disk space.
By default, purging is enabled. It occurs once a day and purges data older than one day.
Statistics and alert history can help you detect trends in server performance and user behavior. The SAP
IQ Cockpit statistics chart can graph performance data over a period of a year or more if the data is
available. If you have enough disk space, consider saving data for a longer period of time or disabling the
purging of statistics or alert history.
Changing the purge frequency and other options might affect SAP IQ Cockpit performance.

208

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Note
If you configure purging as part of a scheduled backup of the repository, disable automatic purging on the
Size Management tab.

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. In the left pane, select Repository, and then click the Size Management tab in the right pane.
3. To turn automatic purging on or off, click Automatically purge the repository periodically.
Turn this option off if purging is configured as part of your scheduled full or incremental backups.
4. Click purge options to turn them on or off:
Purge statistics
Purge alert history
5. In Purge data older than, enter the number of days after which to purge repository data.
6. Click OK to update any changes and close the Cockpit Settings page.

3.7

Logging

Logging helps SAP IQ Cockpit administrators identify and track errors and other system events by recording
messages about the events in log files.
SAP IQ Cockpit maintains these logs:
Client log captures messages about activities in the browser-based client components. These messages
are generated by the component product modules to display information that is pertinent to the user but
not critical enough to warrant a pop-up. SAP IQ Cockpit also uses the client log to trace client browser
operations.
Server logs capture messages about activities during the initialization sequence, such as starting
services; auditing messages recording logins and logouts; errors such as missed scheduled events; and
other events on the server. Server logs include:
Component logs, which record only events concerning individual product modules.
Repository log captures information about inserts and updates that have occurred in the SAP IQ Cockpit
repository, a SQL Anywhere database. This log is in COCKPIT-4\log\repository.log.
Alert services log captures information about alert service status and events, including execution of alerttriggered scripts (start time, end time, and status and exit codes). This log is in COCKPIT-4\log\alertserver.log.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

209

Related Information
Viewing SAP IQ Event Logs [page 210]
Modifying the SAP IQ Server Log Configuration [page 211]
Viewing the SAP IQ Server and Agent Logs in SAP IQ Cockpit [page 211]
Viewing the SAP IQ Cockpit Client Log [page 212]
Viewing SAP IQ Cockpit Server Logs [page 213]
Changing the SAP IQ Cockpit Logging Level [page 214]
Changing SAP IQ Cockpit Logging Configuration [page 215]

3.7.1 Viewing SAP IQ Event Logs


View event logs for the SAP IQ server.

Context
SAP IQ Cockpit uses Log4J for message logging.

Procedure
1. Navigate to:
Option

Description

Windows

%SYBASE%\COCKPIT-4\plugins\IQ-CMAP\log

UNIX

$SYBASE/COCKPIT-4/plugins/IQ-CMAP/log

2. Display the iqmap.log file using a log viewer or another method of your choice.
3. Look for entries of interest such as login attempts or the failure of a service to start.

210

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.7.2 Modifying the SAP IQ Server Log Configuration


Change the log level or logging configuration settings for the SAP IQ server.

Procedure
1. Navigate to:
Option

Description

Windows

%SYBASE%\COCKPIT-4\plugins\IQ-CMAP

UNIX

$SYBASE/COCKPIT-4/plugins/IQ-CMAP

2. Open the IQMapLog4j.properties file, and modify the settings as needed.


3. Save and close the file.

Results
Messages related to SAP IQ are recorded on the console and the iqmap.log file. The iqmap.log file is
located in:
Windows: %SYBASE%\COCKPIT-4\plugins\IQ-CMAP\log
UNIX: $SYBASE/COCKPIT-4/plugins/IQ-CMAP/log

3.7.3 Viewing the SAP IQ Server and Agent Logs in SAP IQ


Cockpit
View, filter, copy, and paste from SAP IQ server and agent log snapshots in the SAP IQ Cockpit console.

Context
The SAP IQ server log records startup errors, tracks verification processes, and may help diagnose multiplex
synchronization issues. If you log server requests, the log may also help resolve query problems.
The SAP IQ agent log records agent activities and may help diagnose issues. Various logging levels are
available to record corresponding information. In order of priority, these levels are ALL < TRACE < DEBUG <
INFO < WARN < ERROR < FATAL < OFF. The default logging level, INFO, records all informational, warning,
error, and fatal messages.
The SAP IQ agent log provides diagnostic information for the agent, and its DEBUG setting provides extra
detail.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

211

You can:
Task

Action

Open a log

Do one of the following:


1.

On the EXPLORE workset, for:


Simplex in the left pane, select IQ Servers.
Multiplex in the left pane, expand
Management

IQ Servers

Multiplex

and select Multiplex Servers.

2. In the right pane, select an item, and do one of:

Click the arrow to the right of the name.

Click the Actions button.

3. Select View Server Log or View Agent Log


Filter logs

In the log window, click Settings on the top right corner. Choose a setting and
click Apply Settings.

Copy and paste rows or the table

In the log window, do one of the following:

Click the Copy Rows button on the top right.

Click the Copy Table button on the top right.

The SAP IQ server and agent logs are displayed as static snapshots that do not refresh automatically. Close
and reopen the log window to view a refreshed snapshot.

3.7.4 Viewing the SAP IQ Cockpit Client Log


Display the event log for the current session of your SAP IQ Cockpit browser client.

Context
In the SAP IQ Cockpit, do either of the following to display the client log:
Enter Ctrl+Alt+L.
Open the MONITOR workset and click the warning or error icon in the bottom right of the window.

Note
If there have been no new warnings or errors since the last time the log was viewed, the icon does not
appear.
To exit the client log, press Esc.

212

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.7.5 Viewing SAP IQ Cockpit Server Logs


View event logs for the SAP IQ Cockpit server.

Context
SAP IQ Cockpit logs events to several places:
The SAP IQ Cockpit agent log: agent.log
The SAP IQ Cockpit repository log: repository.log

Procedure
1. Navigate to:
Log

Platform

Location

Agent log

Windows

%SYBASE%\COCKPIT-4\plugins\IQ-CMAP\log
\agent.log

Unix

$SYBASE/COCKPIT-4/plugins/IQ-CMAP/log/
agent.log

Windows

%SYBASE%\COCKPIT-4\plugins\IQ-CMAP\log
\repository.log

Unix

$SYBASE/COCKPIT-4/plugins/IQ-CMAP/log/
repository.log

Repository log

2. Display one of the log files using a log viewer or a method of your choice.
3. Look for entries of interest such as login attempts or the failure of a service to start.
On the SAP IQ Cockpit console and in the agent log file, some components prepend the component name
to log entries.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

213

3.7.6 Changing the SAP IQ Cockpit Logging Level


Adjust the logging level that determines which events SAP IQ Cockpit records in the server logs. This task
requires you to restart SAP IQ Cockpit.

Context
If you are having a problem with SAP IQ Cockpit, you might be able to discover the cause of the problem by
changing the server logging level so that more events are recorded.

Procedure
1. Shut down the SAP IQ Cockpit server.
2. Restart the SAP IQ Cockpit server using the -m option to change the logging level. In COCKPIT-4/bin,
enter:
cockpit -m <logging-level>
These are the logging levels, from highest to lowest. The higher the level, the more serious an event must
be to be logged. Each level includes all the levels above itfor example, if you set the logging level to
WARN, you log events for the WARN, ERROR, and FATAL levels.
Table 3: Valid Logging Levels
OFF

Nothing is logged. This is the highest level.

FATAL

Logs only very severe error events that lead the server to abort. This is the highest level
at which events are logged.

ERROR

Logs error events that might allow the server to continue running.

WARN

Logs potentially harmful situations. WARN is the default logging level during normal op
eration (that is, after system initialization).

INFO

Logs informational messages that track the progress of the server in a coarse-grained
fashion. INFO is the default logging level during the system initialization process.

DEBUG

Logs a larger set of events that provides a finer-grained picture of how the server is oper
ating. This level is recommended for troubleshooting.

ALL

Logs all loggable events. This is the lowest level.

3. Examine the server log for clues about what might be causing the problem.
4. When you have resolved the problem, set the logging level back to WARN, the default. Your log may
become unmanageably large if you leave it at the DEBUG or ALL level.

Example
These commands, which must be executed in the installation directory, start SAP IQ Cockpit with the
logging level set to DEBUG:

214

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

UNIX

Execute:

bin/cockpit -m DEBUG

3.7.7 Changing SAP IQ Cockpit Logging Configuration


Edit the logging configuration file, log4j.properties, to modify SAP IQ Cockpit logging.

Context
You can change the names, locations, or maximum size of the log files as well as the number of log files backed
up.
Options for the cockpit command let you change the overall SAP IQ Cockpit log message level when you
start SAP IQ Cockpit, but if you choose the DEBUG level, the large volume of log messages generated may be
inconvenient. Editing the log properties file gives you finer control; you can set logging levels for each SAP IQ
Cockpit component separately. SAP recommends making such changes only if you are familiar with log4j and
you are working with SAP technical support; DEBUG-level log messages are not likely to be meaningful to you.
(If you have not used log4j before, a good place to start is http://logging.apache.org/log4j/1.2/manual.html
.)

Procedure
1. Shut down the SAP IQ Cockpit server.
2. Navigate to:
Option

Description

Windows

%SYBASE%\COCKPIT-4\plugins\IQ-CMAP\log\iqmap.log

UNIX

$SYBASE/COCKPIT-4/plugins/IQ-CMAP/log/iqmap.log

3. Make a backup copy of the log4j.properties file.


4. Open and modify the log4j.properties file as needed.
To
Change the name or location of a log file

SAP IQ Cockpit
Configure SAP IQ Cockpit

Modify

Agent log log4j.appender.agent.File

Repository log log4j.appender.repository.File

Collection statistics log log4j.appender.collection-stats.File

Alert server log log4j.appender.alert.File

Gateway log log4j.appender.gateway.File

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

215

To

Modify

Change the maximum size that a log file


can reach before SAP IQ Cockpit cre
ates a new file

Change the number of log files SAP IQ


Cockpit backs up before deleting the
oldest file

Agent log log4j.appender.agent.MaxFileSize

Repository log log4j.appender.repository.MaxFileSize

Collection statistics log log4j.appender.collection-stats.MaxFileSize

Alert server log log4j.appender.alert.MaxFileSize

Gateway log log4j.appender.gateway.MaxFileSize

Agent log log4j.appender.agent.MaxBackupIndex

Repository log log4j.appender.repository.MaxBackupIndex

Collection statistics log log4j.appender.collection-stats.MaxBacku


pIndex

Alert server log log4j.appender.alert.MaxBackupIndex

Gateway log log4j.appender.gateway.MaxBackupIndex

5. Save and exit the file.


6. Start the SAP IQ Cockpit server to make the logging changes take effect.

3.8

Shared-Disk Mode

Shared-disk mode lets you run multiple SAP IQ Cockpit instances from a single installation of the product.
The shared-disk capability enables SAP IQ Cockpit servers on the installation host or on remote hosts to
access and execute from the same installation. This feature is especially useful if you plan to use SAP IQ
Cockpit to manage SAP Adaptive Server Enterprise clusters, SAP Event Stream Processor clusters, or SAP
IQ multiplexes.
After installing SAP IQ Cockpit on a shared disk, use the instance command to enable shared-disk mode and
deploy instances. instance copies the files needed for the instance into a new directory structure. The path
takes the form <COCKPIT-4-install-directory>/instances/<instance-name> (for example,
COCKPIT-4/instances/Cockpitserver-1).
You can specify a name for each instance. If you do not supply a name, the instance name defaults to the host
name.
An instance runs on the host on which you start it. When shared-disk mode is enabled, SAP IQ Cockpit servers
run out of the COCKPIT-4/instances subdirectories, not from the base file system.
In shared-disk mode, changes made to configuration files in the base file system (everything under
COCKPIT-4 except the COCKPIT-4/instances branch) are copied to any instance deployed thereafter.
Previously deployed instances are not affected.
Use instance to deploy, remove, refresh, or convert an instance; and to configure an instances ports.
Perform other tasks, including configuring a UNIX instance to run as a service, and all other configuration,
using the tools and procedures documented for all installations. Use tools provided by the UI wherever
possible. When you must edit a file to change the configuration of an instance (for role mapping, for example),
edit the copy of the file stored under <COCKPIT-4-install-directory>/instances/<instance-name>.

216

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Related Information
Enabling and Disabling Shared-Disk Mode [page 217]
Deploying an Instance from a Shared Disk Installation [page 218]
instance Command [page 219]
Starting and Stopping an Instance in Windows [page 221]
Starting and Stopping an Instance in UNIX [page 222]
Refreshing or Converting an Instance [page 225]
Removing an Instance [page 226]

3.8.1 Enabling and Disabling Shared-Disk Mode


Turn on or turn off shared-disk mode, which allows you to run multiple SAP IQ Cockpit servers from a single
installation on a shared disk.

Prerequisites
Install SAP IQ Cockpit on a shared disk.

Context
Shared-disk mode affects the entire installation; do not enable or disable individual instances.
Disabling shared-disk mode leaves the instances file systems intact under <COCKPIT-4-installdirectory>/instances, but the instances cannot run. If you reenable, the instances are able to run again.

Procedure
1. Change to COCKPIT-4/bin.
2. Enable or disable shared disk mode.
To enable shared disk mode:
instance -enable
To disable shared disk mode:
instance -disable

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

217

3.8.2 Deploying an Instance from a Shared Disk Installation


Create an SAP IQ Cockpit server or agent from an installation on a shared disk.

Prerequisites
Install SAP IQ Cockpit on a shared disk.
Enable shared-disk mode.

Procedure
1. Log in to the host on which you plan to run the SAP IQ Cockpit server.

Note
You can create an instance on one host and run it on another host, but doing so interferes with the
predeployment checks run by instance. Such a deployment might generate errors (port conflicts, for
example). If you are confident that the errors are caused by problems that will not be present on the
host where you plan to run the instance, use the -force option to create the instance.
2. Change to COCKPIT-4/bin.
3. Create the instance as an SAP IQ Cockpit agent if you plan to run a managed server on this host, or create
the instance as an SAP IQ Cockpit server if you plan to manage other SAP servers from this host.
4. If other SAP IQ Cockpit instances will run on this host, change the port assignments for the new instance.
Change the instance names and port values in the sample commands to suit your environment, but take
care to specify ports that are not in use by another SAP IQ Cockpit instance or any other application or
server.
This command changes the port assignments for an SAP IQ Cockpit server called myserver:
instance -refresh -server -instance myserver -portconfig rmi=8889,db=3640,
http=7072,https=7073,jiniHttp=9094,jiniRmi=9097,msg=2002,tds=9996
5. (Optional) List the instances deployed from this installation:
instance -list
6. (Optional) If you are setting up an instance in UNIX, configure it to run as a service. See Configuring SAP IQ
Cockpit Server as a Service in UNIX.

218

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Next Steps
When you manage and maintain instances, keep in mind that the directory structure for instances is different
from that of singleton installations. In file paths in SAP IQ Cockpit help, replace COCKPIT-4 or <COCKPIT-4install-directory> with COCKPIT-4/instances/<instance-name>.
For example, the path to the log directory, COCKPIT-4/log, becomes this for an instance called kalamazoo:
COCKPIT-4/instances/kalamazoo/log

3.8.3 instance Command


Use instance (UNIX) to deploy an instance of SAP IQ Cockpit from a shared-disk installation or to manage
existing instances.
You can run multiple instances of SAP IQ Cockpit from a single installation on a shared disk.

Syntax
instance[.bat]
[-c | -create]
[-d | -debug]
[-disable]
[-enable]
[-f | -force]
[-h | -help]
[-host <host-name>]
[-i | -instance [<instance-name>]]
[-l | -list]
[-plugins {<plugin-ID,plugin-ID,...>}]
[-portconfig {<port-name>=<port-number>,<port-name>=<port-number>, ...}]
[-refresh]
[-r | -remove]
[-s | -server]
[-service]
[-silent]

Parameters
-create Deploy a new instance. Use alone or with -server to create a server instance.
-d | debug Display debugging messages with the output of this command.
-disable turn off shared-disk mode for this installation. Generates an error if any instance is running.
-enable Turn on shared-disk mode for this installation. Shared-disk mode is required if you intend to run
more than one server from a single installation of SAP IQ Cockpit.
-f | -force Execute instance even if there are potential conflicts, such as port clashes or a running SAP IQ
Cockpit process.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

219

-h | --help Display help and usage information for the instance command.
-host host-name Specify the host for this instance. Use with -create; required only when the instance
name does not match the name of the host on which this instance will run. (The instance name defaults to
the name of the current host unless you use -instance to specify another name.)
-instance [instance-name] Specify an instance. Use with -create, -remove, or -refresh, or use alone
to display the instances status. You can omit -instance when you are addressing the only SAP IQ
Cockpit instance on the current host.
instance assumes that the host name is the same as the instance name unless you use -host to specify
a different host name.
-l | -list Display a list of all instances deployed from this SAP IQ Cockpit installation.
-plugins {plugin-ID,plugin-ID,...} Specify a product plug-in for this instance. An alternative to -server, plugins is primarily for use by the SAP IQ Cockpit installation program. Use with -create or -refresh.
-portconfig {port-name=port-number, port-name=port-number, ...} Assign ports to services for this
instance. Use only with -create or -refresh. For the <port-name> value, use a port name from the
table below. If you plan to run more than one SAP IQ Cockpit instance on a host machine, you must
reassign all the ports for every instance after the first.
Port information:
Port Name

Description

Service Names

Property Names

Default Port

db

Database port

SccSADataserver

com.sybase.asa.server.port

4638

Messaging

messaging.db.port

Alert

alert.database.port

http

Web HTTP port

EmbeddedWebContainer

http.port

4282

https

Web HTTPS (secure

EmbeddedWebContainer

https.port

4283

HTTP) port
msg

Messaging port

Messaging

messaging.port

4993

rmi

RMI port

RMI

port

4992

tds

Tabular Data Stream

Tds

tdsPort

4998

port (used to communi


cate with other SAP da
tabase products)

-refresh recopy all the files that make up all this instances services and plug-ins (UNIX). Refreshing
preserves any service or plug-in configuration in the deployed instance.
-r | -remove delete an instance. Use alone or with -instance. Generates an error if the instance is
running. You cannot restore a removed instance.
-s | -server use with -create or -refresh to create or refresh an SAP IQ Cockpit server, including any
product modules available.
-silent suppress the output of instance.

220

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Examples
Deploy a server instance and reassign ports
deploys the server on this host and configures nondefault RMI, HTTP, and HTTPS ports.
instance -create -server -portconfig rmi=8888,http=7070,https=7071
Remove a server instance
removes the instance named porcupine if it is not running:
instance -remove -instance porcupine
Display status
displays the status of the instance on this host:
instance
List all instances
displays a list of all SAP IQ Cockpit server instances deployed from this SAP IQ Cockpit installation:
instance -list

Permissions
instance uses the permissions of the user, except as noted for certain parameters.

3.8.4 Starting and Stopping an Instance in Windows


There are several ways to start and stop the SAP IQ Cockpit server instance. You can do it manually, or set the
service to start automatically and to restart in case of failure.
You can omit the -instance option if the instances name is the same as its host name (the default).

Start and Stop the Server Instance Manually


When you run SAP IQ Cockpit server manually, issue a command every time you start or shut down.
1. To start the SAP IQ Cockpit server instance, execute:
%SYBASE%\COCKPIT-4\bin\cockpit.bat -instance <instance-name>
2. To stop the SAP IQ Cockpit server instance, at the cockpit console command prompt, execute:
shutdown

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

221

Start and Stop the Server Service Instance


If you run SAP IQ Cockpit server as a service, you can still manually start and stop the service, as needed. By
default, if you install SAP IQ Cockpit to run as a service, the service is configured to automatically start, but not
automatically restart. You must configure this manually.
1. To configure automatic restart of the service instance:
1. In Windows Control Panel, open

System and Security

Administrative Tools

Services .

2. Locate Cockpit in the Services list. It may be followed by a release number; if the service is for an
instance, it is also followed by the instance name. Service names do not distinguish between agents
and servers. If the service is running, the Status column displays Started.
3. Click the Recovery tab and change the First, Second, and Subsequent failures to Restart the Service.
4. Click OK.
2. To manually start the service instance:
In the Services
window

Click Start.

At a command
line

Including the instance name in parentheses, execute:

net start "Cockpit 4 (<instance-name>)"


The Cockpit 4 (<instance-name>) service is starting...... The
Cockpit 4 (<instance-name>) service was started successfully.
3. To manually stop the service instance:
In the Services
window

Click Stop.

At a command
line

Including the instance name in parentheses, execute:

net stop "Cockpit 4 (<instance-name>)"


The Cockpit 4 (<instance-name>) service is stopping...... The
Cockpit 4 (<instance-name>) service was stopped successfully.

3.8.5 Starting and Stopping an Instance in UNIX


There are several ways to start and stop the SAP IQ Cockpit server instance. You can do it manually, or set the
service to start automatically and to restart in case of failure.
You can omit the -instance option if the instances name is the same as its host name (the default).

222

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Start and Stop the Server Instance Manually


You can start the SAP IQ Cockpit server in the foreground or background. When you run SAP IQ Cockpit server
in the background, you can use nohup, &, and > to redirect output and system error to a file, and suppress the
SAP IQ Cockpit server console.
1. Set the environment variables. Do this only once.
1. Execute one of the following to set environment variables.
Bourne shell:
. SYBASE.sh
C shell:
source SYBASE.csh
2. To start the SAP IQ Cockpit server, do one of:
In the foreground

Execute:

$SYBASE/COCKPIT-4/bin/cockpit.sh -instance <instance-name>


In the background

Execute a command similar to the sample below that matches your shell. The sample com
mand directs output to the file cockpit-console.out. If the output file already exists,
you might need to use additional shell operators to append to or truncate the file.
Bourne shell (sh) or Bash

nohup ./cockpit.sh -instance <instance-name> 2>&1 > cockpitconsole-your-instance.out &


C shell

nohup ./cockpit.sh -instance <instance-name> >& cockpitconsole.out &


3. To stop the SAP IQ Cockpit server:
Run in the fore
ground

At the cockpit-console> prompt, execute:

shutdown <instance-name>

Caution
Do not enter shutdown at a UNIX prompt; it shuts down the operating system.
Run in the back
ground

At the UNIX command line, execute:

$SYBASE/COCKPIT-4/bin/cockpit.sh --stop -instance <instancename>

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

223

Start and Stop the Service for an Instance


A UNIX service is a daemon process that starts automatically after the machine is started and runs in the
background. UNIX installations of SAP IQ Cockpit include a shell script, cockpitd, which you can use to
configure the SAP IQ Cockpit service. (Some UNIX platforms supply tools that make service configuration
easier; Linux chkconfig is an example.)

Note
SAP recommends that if you are not familiar with setting up services in UNIX, you delegate this task to a
system administrator or consult the system administration documentation for your UNIX platform.
If you run SAP IQ Cockpit server as a service, you can still manually start and stop the service, as needed. By
default, if you install SAP IQ Cockpit to run as a service, the service is configured to automatically start, but not
automatically restart. You must configure this manually.
You can omit the -instance option if the instances name is the same as its host name (the default).
1. Open cockpit and make these changes:
Change the line that sets the SYBASE variable to the location of your SAP installation (that is, the
parent directory of COCKPIT-4, the SAP IQ Cockpit installation directory). By default, this directory is
called /opt/Sybase if you installed SAP IQ Cockpit on a machine with an existing Sybase or SAP
Sybase product or environment variable; otherwise the default parent directory is /opt/sap.
If you are using shared-disk mode to run multiple instances on the same host, append the instance
name to the name of the output log file. Change:
./${SCRIPT_NAME} --start 2>&1 >> ${cockpit_HOME}/log/cockpit-service.out &
to:
./${SCRIPT_NAME} --start 2>&1 >> ${cockpit_HOME}/log/cockpitservice_<instance-name>.out &
If you are using shared-disk mode to run multiple instances on the same host, save a copy of the
cockpitd script for each instance, giving each copy a unique name. In each copy, add the instance
name to the script name and append the instance name to the output log file name as described
above. Perform the remaining steps in this procedure for each copy of cockpitd.
2. In Linux, configure the service to run in run levels 2, 3, 4, and 5. Execute:
/sbin/chkconfig --add cockpitd
/sbin/chkconfig cockpitd 2345
You can test the cockpitd script with /sbin/service cockpitd status. (The service command
accepts these options: start | stop | status | restart.) For example, to start the Cockpit, enter /
sbin/service cockpitd start.

224

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.8.6 Refreshing or Converting an Instance


Refresh an SAP IQ Cockpit server deployed from an installation on a shared disk.

Prerequisites
Shut down the instance.

Context
When you refresh an instance of an SAP IQ Cockpit server, SAP IQ Cockpit recopies files from the main
installation on the shared disk (COCKPIT-4/) into the instances subdirectories (COCKPIT-4/instances/
<instance-name>). In UNIX, it recopies all this instances services and plug-ins.
Refreshing an instance preserves configuration and logs but overwrites the repository, so historical
performance data is lost.
As part of a refresh, you can:
Reassign ports on the instance

Procedure
1. Change to COCKPIT-4/bin.
2. Refresh the instance. Change the instance names and port values in the sample commands to suit your
environment, but take care to specify ports that are not in use by another SAP IQ Cockpit instance or any
other application or server.
3. (Optional) Display the status of the refreshed instance. Replace the name in the sample command with
your instances name, or omit the -instance option to display the status of the instance on this host.
instance -instance kalamazoo

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

225

3.8.7 Removing an Instance


Delete an SAP IQ Cockpit server deployed from an installation on a shared disk.

Prerequisites
Shut down the instance.

Context
Removing an SAP IQ Cockpit instance deletes the instances files and directories (COCKPIT-4/instances/
<instance-name> and its contents) from the installation.
You cannot restore a removed instance.

Procedure
1. Change to COCKPIT-4/bin.
2. Remove the instance. Change the instance name in the sample command to suit your environment.
This command removes the cockpit server porcupine if it is not running; if it is running, you see an error.
instance -remove -instance porcupine

3.9

Configuring Ports

Use the cockpit --port command to assign SAP IQ Cockpit services to new ports.

Prerequisites
Check for port conflicts between SAP IQ Cockpit and other software running on the same host.

226

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Context
SAP IQ Cockpit cannot function properly if other services use its ports. If you discover a conflict with any port
listed in the right column below, you can either reconfigure the other services port or reconfigure SAP IQ
Cockpit as described here.
Port Name

Description

Service Names

Property Names

Default Port

db

Database port

SccSADataserver

com.sybase.asa.server.port

4638

Messaging

messaging.db.port

Alert

alert.database.port

http

Web HTTP port

EmbeddedWebContainer

http.port

4282

https

Web HTTPS (secure

EmbeddedWebContainer

https.port

4283

HTTP) port
msg

Messaging port

Messaging

messaging.port

4993

rmi

RMI port

RMI

port

4992

tds

Tabular Data Stream

Tds

tdsPort

4998

port (used to communi


cate with other SAP data
base products)

Procedure
1. Shut down SAP IQ Cockpit.
2. Execute cockpit --info ports to display a list of SAP IQ Cockpit services, their properties, and their
assigned ports.
3. To reassign a port, enter a command in one of these formats:
cockpit --port <port-name>=<port-number>
cockpit --port <service-name>:<property-name>=<port-number>
Use the first, simpler format unless you want to configure the database services to use different ports. (By
default, all the database services use the same port.)
4. Start SAP IQ Cockpit.
5. Execute cockpit --info ports again to confirm that the port has been reassigned.

Example
Set all three database services (data server, messaging, and database alert) to the same port, 4639. (The
database services belong to the internal repository.)
cockpit --port db=4639

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

227

Set only the database messaging service to port 4639.


cockpit --port Messaging:messaging.db.port=4639
Set the HTTP port to 9292.
cockpit --port http=9292
Set the main SAP IQ Cockpit messaging service to port 4994.
cockpit --port msg=4994
Set the RMI port to 4993
cockpit --port rmi=4993
Set the Tabular Data Stream port to 4997.
cockpit --port tds=4997

Note
cockpit commands that include a port-setting option (-p or --port) do not start SAP IQ Cockpit. To
start SAP IQ Cockpit, execute a separate cockpit command.

3.10 Configuring Memory Usage


Determine whether you need to configure how much memory SAP IQ Cockpit uses, and if so which
configuration method to use.

Context
It is not usually necessary to configure memory usage for SAP IQ Cockpit. This table lists memory options you
can set and circumstances under which you should consider changing them.

228

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Table 4: Memory Options


Value
Maximum memory

COCKPIT_MEM_MAX if
you are starting SAP IQ
Cockpit from the com
mand line

Permanent memory

COCKPIT_MEM_MAX if
you are running SAP IQ
Cockpit as a UNIX service

Modify When

COCKPIT_MEM_PERM

Guidelines

You need to prevent SAP IQ Cockpit


from using more than a given amount
of memory.
SAP IQ Cockpit fails to start and may
display an error: Could not

ory, set maximum memory to 256MB or


more.
Default value: none. (On machines with

create the Java Virtual


machine.

4GB or more of memory, maximum mem

An OutOfMemory error says SAP IQ


Cockpit is out of heap space.

ited only by the amount of system memory

A warning message about system


memory appears during the start
process.

The machine where SAP IQ Cockpit is


installed has less than 4GB of memory.
(Starting SAP IQ Cockpit on a machine
with less than 4GB of memory triggers
the startup warning message about
system memory.)

ory is set dynamically and is effectively lim


available.)

An OutOfMemory error says SAP IQ Cock

Increase by 32MB increments. If you reach

pit is out of permanent generation space.

a value equal to twice the default and still

if you are running SAP IQ


Cockpit as a UNIX service

On machines with less than 4GB of mem

see the OutOfMemory error, contact SAP


technical support.

COCKPIT_MEM_PERM

Default value: 128MB

if you are starting SAP IQ


Cockpit from the com
mand line

You can change memory options in two ways:


For SAP IQ Cockpit started from the command line execute commands to set one or more environment
variables before executing the cockpit command to start SAP IQ Cockpit. When you use this method,
your changes to the memory options last only as long as the current login session. This method is useful
for testing new option values.
For the SAP IQ Cockpit service modify a file used by the SAP IQ Cockpit service. When you use this
method, your changes to the memory options persistSAP IQ Cockpit uses them every time it starts as a
service.

Related Information
Changing a Memory Option on the Command Line [page 230]
Changing a Memory Option for an SAP IQ Cockpit Windows Service [page 230]
Changing a Memory Option for an SAP IQ Cockpit UNIX Service [page 231]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

229

3.10.1 Changing a Memory Option on the Command Line


Before you start SAP IQ Cockpit from the command line, you can issue a command to change the value of a
memory option temporarily.

Context
Changes made using this method last only as long as the current login session. This method is useful for
testing new option values.

Procedure
1. If SAP IQ Cockpit server is running, shut it down.
2. Set the environment variable. Specify a size in megabytes, but do not indicate the units in the command.
UNIX example:
bash$ export COCKPIT_MEM_MAX=512
3. Use the cockpit command to start SAP IQ Cockpit server.

3.10.2 Changing a Memory Option for an SAP IQ Cockpit


Windows Service
Add a jvmopt command to the cockpit.properties file to change a memory option (-Xmx or XX:MaxPermSize) for an SAP IQ Cockpit Windows service.

Context
When you use this method to set memory options, your changes are permanentSAP IQ Cockpit uses them
every time it starts as a service.

Procedure
1. If SAP IQ Cockpit server is running, shut it down.
2. Open the SAP IQ Cockpit properties file:
%SYBASE%\COCKPIT-4\bin\cockpit.properties

230

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3. Add (or modify, if it already exists) a jvmopt line specifying the memory size in Java format. Use m for
megabytes or g for gigabytes.
For example:
jvmopt=-Xmx512m
4. Save the file and start the SAP IQ Cockpit Windows service.

3.10.3 Changing a Memory Option for an SAP IQ Cockpit


UNIX Service
To change a memory setting for an SAP IQ Cockpit UNIX service, add the appropriate environment variable
(<COCKPIT_MEM_MAX> or <COCKPIT_MEM_PERM>) to the cockpit.sh script.

Context
When you use this method to set memory options, your changes are permanentSAP IQ Cockpit uses them
every time it starts as a service.

Procedure
1. If SAP IQ Cockpit is running, shut it down.
2. Navigate to $SYBASE/COCKPIT-4/bin and open cockpitd.
3. Add the environment variable at the top of the file (after the comments). Specify a size in megabytes but
do not indicate the units in the command.
For example:
COCKPIT_MEM_MAX=512
4. Save the file and start the SAP IQ Cockpit UNIX service.

3.11

SAP IQ Cockpit User Management

Manage user information, such as name, phone, and email addresses, disable or enable users, or delete users.
Any valid user in the managed system can log in to SAP IQ Cockpit. You cannot prevent a valid user from
initially logging in to a managed system, but you can disable subsequent access. You can also maintain e-mail
addresses for alert notification.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

231

Related Information
Disabling and Enabling a User in SAP IQ Cockpit [page 232]
Deleting a User in SAP IQ Cockpit [page 233]
Defining an E-mail Address in SAP IQ Cockpit [page 233]
Updating User Information in SAP IQ Cockpit [page 234]

3.11.1 Disabling and Enabling a User in SAP IQ Cockpit


Prevent a valid user in a managed system from logging in to SAP IQ Cockpit or allow a previously disabled user
to log in again.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Context
You cannot prevent a valid managed system user from initially logging into SAP IQ Cockpit, but you can
prevent subsequent access.

Tip
Do not use the technical user account to log in to SAP IQ Cockpit. To enforce this, SAP recommends that
you disable this account in SAP IQ Cockpit. Disabling the technical user account has no impact on the
account's ability to collect data.

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. In the left pane, select User Management, and then select the General tab.
3. Select or clear Login disabled.
4. Click OK.

232

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.11.2 Deleting a User in SAP IQ Cockpit


Remove a user from the list of registered SAP IQ Cockpit users.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Context
Caution
Use extreme care when deleting a user from SAP IQ Cockpit. Do not delete the technical user or
COCKPIT_ADMIN accounts.
There should be little need to delete users under User Management as doing so does not prevent access to
SAP IQ Cockpit. To prevent a user from accessing SAP IQ Cockpit, disable the users.

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. In the left pane, select User Management.


3. In the right pane, click Delete.
4. At the confirmation prompt, click Yes.
5. Click OK.

3.11.3 Defining an E-mail Address in SAP IQ Cockpit


Add a user's e-mail address to be used for alert notification.

Prerequisites
Membership in the COCKPIT_ADMIN role.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

233

Context
If you enter an e-mail address under ALERT
under User Management, and vice versa.

NOTIFY , the cockpit automatically updates the user record

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. In the left pane, select User Management, and then select the User Info tab.
3. Add a valid email address and click OK.

3.11.4 Updating User Information in SAP IQ Cockpit


Add details such as name, phone, and e-mail address for a user who has successfully logged in to a managed
system.

Prerequisites
Membership in the COCKPIT_ADMIN role.

Context
Note
User information is stored in the SAP IQ Cockpit repository. It is not updated to the user account in the
managed system.

Procedure

1. In SAP IQ Cockpit, click the Cockpit Settings icon (

).

2. In the left pane, select User Management, and then select the User Info tab.
3. Add the user information and click OK.

234

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

3.12 SAP IQ Cockpit Console


The console is a command-line interface for displaying details about the status of the SAP IQ Cockpit server,
its ports, plug-ins, and services.
When you use the cockpit command to start SAP IQ Cockpit, it displays start-up messages and then displays
the console prompt.

Note
The console prompt does not appear if you start SAP IQ Cockpit as a service, if you direct the output of
cockpit to a file, or if you start SAP IQ Cockpit in the background.

Related Information
help Command [page 235]
info Command [page 236]
shutdown command [page 237]
status Command [page 237]

3.12.1 help Command


Display syntax information for one or more SAP IQ Cockpit console commands.

Syntax

help [<command_name>]

Parameters
command_name (Optional) Use with status, info, or shutdown. If you omit <command_name>, help
returns information on all the console commands.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

235

Examples
Example 1
This help command returns information on the status command:
help status

3.12.2 info Command


Display information about specified parts of the SAP IQ Cockpit server.
If you enter info with no parameters, it returns information for every parameter.

Syntax

info [-a | --sys]


[-D | --sysprop [<system-property>]]
[-e | --env [<environment-variable>]]
[-h | --help]
[-m | --mem]
[-p | --ports]
[-s | --services]

Parameters
-a | --sys (Optional) List all the services known to SAP IQ Cockpit, indicate whether each service is
enabled, and list other services on which each service depends.
-D | --sysprop [system-property] (Optional) Display information about the specified Java system
property. Omit the system-property argument to return a list of all Java system properties and their
values.
-e | --env [environment-variable] (Optional) List all the environment variables in the SAP IQ Cockpit Java
VM process environment. Omit the environment-variable argument to return a list of environment
variables and their values.
-h | --help (Optional) Display information about the info command.
-m | --mem (Optional) Display information about the servers memory resources.
-p | --ports (Optional) List all the ports on which the SAP IQ Cockpit services listen, indicate whether each
port is in use, and show the service running on each port.
-s | --services (Optional) Llist all SAP IQ Cockpit services, indicate whether each service is enabled, and
list other services on which each service depends.

236

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

Examples
Example 1
Displays information about ports on this SAP IQ Cockpit server:
info -p

3.12.3 shutdown command


Stop the SAP IQ Cockpit server if it is running.

Syntax
shutdown

Examples
Example 1
Shuts down SAP IQ Cockpit:
shutdown

3.12.4 status Command


Display the status of the SAP IQ Cockpit plug-in, or service components of SAP IQ Cockpit.

Syntax
status
[-h | --help]
[-p | --plugin [<plugin-name>]]
[-s | --service [<service-name>]]

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

237

Parameters
-h | --help Display information about the info command.
-p | --plugin [plugin-name] Display the status of the specified SAP IQ Cockpit plug-in. Omit the pluginname argument to return a list of plug-ins.
-s | --service [service-name] Display the status of the specified SAP IQ Cockpit service (for example, the
Alert service or the Messaging service). Omit the service-name argument to return a list of services.

Examples
Example 1
Displays status information on the Repository service:
status --service Repository

3.13 Changing the SCCADMIN Password


You can change the password of the SCCADMIN accounts.

Prerequisites
You have already encrypted the new password. See Encrypting a Password [page 239].

Procedure
1. In a text editor, open the csi_config.xml file:
Option

Description

UNIX

$SYBASE/COCKPIT-4/conf/csi_config.xml

2. Search for the account name.


3. Paste the new encrypted password into the value field of the password line. It looks similar to thisbe sure
to paste inside the double quotes:
<options name="password" value="{SHA-256:WNATpqw76zA=}GYeAKdTRiIh1VcqmWv1k/
A2pcXSHfLUBr9boP03ArKE=" />
4. Save the file and exit.

238

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Configure SAP IQ Cockpit

5. To make the new password take effect, restart the SAP IQ Cockpit server on which the changes were
made.

Related Information
Encrypting a Password [page 239]
Encrypting a Password [page 239]

3.13.1 Encrypting a Password


Use the passencrypt utility to encrypt passwords and other values that must be kept secure while stored in
text files.

Context
You can safely store an encrypted password in a configuration file. Enter the password in clear text
(unencrypted) when you execute passencrypt and when you use the password to log in.
passencrypt, which is located in the COCKPIT-4\bin directory, uses the SHA-256 hash algorithm for
passwords used in the PreConfiguredLoginModule in csi_config.xml.

Procedure
1. Open a command window and change to the COCKPIT-4\bin directory:
2. Type passencrypt -csi. Enter your new password at the resulting prompt.
passencrypt encrypts the password you enter (which does not appear on the screen) and displays the
password in encrypted form.
3. Copy the encrypted password.
4. Paste the encrypted password where needed.

SAP IQ Cockpit
Configure SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

239

Monitor SAP IQ

You can monitor the availability and performance of a simplex server or multiplex environment.
With the exception of the Statistics Chart, data displayed on the MONITOR workset is gathered by the monitor
engine. It is real-time, not historical data, and is reflective of the current session only. The data is not stored in
the repository. Use the Settings option on the MONITOR workset to adjust the refresh interval.

Related Information
Simplex Server [page 240]
Multiplex Servers [page 267]
Logical Servers [page 282]

4.1

Simplex Server

Statistics allow you to monitor the availability and performance of a simplex server.

Related Information
Viewing Overview Statistics [page 241]
Viewing All Statistics [page 243]
Viewing Engine Statistics [page 244]
Viewing Connections Statistics [page 245]
Viewing Transaction Statistics [page 247]
Viewing Dbspaces Statistics [page 249]
Viewing Backup and Dependency Statistics [page 250]
Viewing Store I/O Statistics [page 252]
Viewing Cache Statistics [page 253]
Viewing Table Version Statistics [page 254]
Viewing Operations and Requests Statistics [page 255]
Viewing Network Statistics [page 256]
Viewing Table Page Usage Statistics [page 258]
Viewing Table Lock Statistics [page 259]
Viewing Deadlock Statistics [page 260]
Viewing RLV Memory Usage Statistics [page 262]

240

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Viewing RLV Merge History Statistics [page 263]


Viewing the Statistics Chart [page 265]
Changing Update Frequency for Simplex Monitoring [page 266]

4.1.1 Viewing Overview Statistics


Display the overall health of the SAP IQ server.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Overview.
3. In the right pane, select the tab to display details on the required information.

Results
Note
Click a column header to sort the data by that column.
To display the information in a chart or table in the full window, select the Maximize icon in the top right
of the area.
Hover the mouse pointer over any line or bar graph to display information for that graph.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

241

Tab

Description

Server

State current status of the server. Valid states include:

Unknown

Stopped

Running

Host host name where the server is running.


Port port number where the server is running.
Server name name of the server.
Database name of the SAP IQ database.
Server type type of server the database is on. Server
types include Single Server, Coordinator, Reader, and
Writer.
Server version version of the SAP IQ server.
Platform operating system running on the server host.
Activities

CPU total usage (%) total CPU usage percentage, in


cluding both system and user usage.
Active connections total number of active connec
tions, including user and internode communication
connections.
Connections available number of connections availa
ble for users and internode communication connec
tions.
Active requests number of active requests on the
server.
IQ threads in use number of threads being used by the
SAP IQ server.
Active transactions number of active transactions.
Number of committed transactions number of com
mitted transactions.
Oldest transaction (minutes) elapsed age, in minutes,
of the oldest transaction.

Caches

IQ (catalog) system store cache reads (per second)


number of IQ (catalog) system store cache page look
ups per second.
IQ main store cache size (MB) size of the IQ main
store buffer cache, in megabytes.
Temp cache size (MB) size of the temporary cache, in
megabytes.
Remaining heap size (MB) size of the remaining heap
allocation, in megabytes.

242

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Tab
Version Usage

Description
Number of committed versions the number of table
versions in the server.
Total version space used (MB) total space consumed
by all the table versions.
Oldest version ID the oldest version identifier on the
server.
Number of active versions total number of active write
table versions on the server.
Total active version space created (MB) amount of
data created by active write transactions.
Total active version space to be destroyed (MB)
amount of data destroyed by active write transactions.
If these transactions commit, the destroyed data be
comes an old version and is eventually dropped. If the
transactions roll back, the created data is released.

Details

Server full version version of the IQ server software, in


cluding the date and time.
Platform version version of the operating system in
stalled on the server host.

CPU History

Percentage of total CPU usage over a period of time.

IQ Memory

Allocation of the IQ memory between the main buffer cache,


temporary cache, and remaining heap.

Disk Usage

Available and used space for the main and temporary


stores.

4.1.2 Viewing All Statistics


Display all statistics for the SAP IQ server.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select All statistics.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

243

3. In the right pane, click to expand each statistics group to display the individual key performance indicators
(KPIs) in that group. Each KPI includes the name, current value, unit of measure, and brief description of
the KPI.

4.1.3 Viewing Engine Statistics


Display engine statistics for the SAP IQ server.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Engine.
Details on the engine statistics and IQ memory appear in the right pane.

Results
Note
Click a column header to sort the data by that column.
To display the information in a chart or table in the full window, select the Maximize icon in the top right
of the area.
Hover the mouse pointer over any line or bar graph to display information for that graph.

244

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Area

Description

Engine Statistics

Displays the statistics for the engine. The calculations are


continuously updated based on live server information. The
engine statistics include:
CPU total usage percentage of CPU total usage.
CPU system usage percentage of CPU system usage.
CPU user usage percentage of CPU user usage.
Total memory allocated (MB) total amount of memory
(in megabytes) allocated for the main buffer cache,
temporary buffer cache, and remaining heap.
Max memory allocated (MB) maximum amount of
memory (in megabytes) allocated for the main buffer
cache, temporary buffer cache, and remaining heap.
Main cache (MB) total size of the main buffer cache, in
megabytes.
Temp cache (MB) total size of the temporary buffer
cache, in megabytes.
IQ threads in use number of IQ threads in use.
IQ threads available number of available IQ threads.

IQ Memory

Shows the allocation of the IQ memory between the main


buffer cache, temporary buffer cache, and remaining heap.

CPU History

Displays the percentage of total, system, and user CPU us


age over a period of time.

4.1.4 Viewing Connections Statistics


Display connection details for the SAP IQ server.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Connections.
3. To display a list of connections for a server, in the right pane, click the Connections tab.
4. To display details and associated transactions for a specific user, select the user in the Active Connections
area.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

245

Note
Click a column header to sort the data by that column.
Area
Active Connections

Description
User ID the ID of the connected user.
Name the name of the connected user.
Creation time the date and time the connection was
established.
Connection ID the ID of the connection.
State the current state of the selected connection.
Possible states include:

ACTIVE the connection is live.

SUSPENDED the connection and its corre


sponding transaction are suspended, probably
due to hardware or communication failure.

Client IP address the IP address of the client that


made the connection.
Connection or cursor indicates a connection or an
active cursor
Connection Details

Statement being executed the statement executed


by the selected user.
Last request time the last time a request was exe
cuted on the server by the selected user.
Request type type of request executed by the se
lected user.
Last command time the last time a command was
executed on the server by the selected user.
Command type type of command executed by the
selected user.
IQ temporary store usage (KB) number of tempo
rary store kilobytes used during the connection.
IQ temporary work space usage (KB) number of
temporary workspace kilobytes used during the con
nection.
Cursor count number of open SAP IQ cursors on the
connection.
Thread in use number of threads in use by the se
lected user.

Associated Transactions

The transaction ID, creation time, and state of transac


tions executed by the selected user.

5. To display connection statistics, in the right pane, click the Connections Statistics tab.

246

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

4.1.5 Viewing Transaction Statistics


Display transaction details for the SAP IQ server.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Transactions.
3. To display a list of transactions for a user, in the right pane, click the Transactions tab.
4. To display details for a specific user, select the user in the Transactions & Versions area.

Note
Click a column header to sort the data by that column.
Area

Description

Transactions
Transactions & Versions

User ID the ID of the user who generated the trans


action.
Transaction ID the unique ID of the transaction.
Version ID the version ID of the transaction.
Creation time the date and time of the transaction.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

247

Area
Transaction Details

Description
Transaction ID the unique identification number for
the selected transaction.
Connection ID the connection identification number
for the selected transaction.
Statement being executed the statement executed
by the selected transaction.
IQ main store space created by transaction (KB)
the amount of main store space created by the se
lected transaction.
IQ main store space dropped by transaction (KB)
the amount of main store space dropped by the se
lected transaction.
IQ temporary store space created by transaction
(KB) the amount of temporary store space created
by the selected transaction.
IQ temporary store space dropped by transaction
(KB) the amount of temporary store space created
by the selected transaction.
Cursor count number of open SAP IQ cursors on the
transaction.
IQ threads number of threads being used by the
transaction.
IQ govern priority numeric priority of the transaction
in the queue.
Connection or cursor identifies whether the transac
tion is a connection or a cursor.
Connection or cursor create time date and time the
connection or cursor was created.

Transaction Statistics
Active Transactions

Displays a chart of the number of user, internode commu


nication (identified on the chart as INC), and other trans
actions on the server.

Other Statistics

Displays additional details on the transaction, including:


Number of committed transactions total number of
committed transactions on the server.
Number of active load statements total number of
active load statements on the server.
Oldest active transaction time (minutes) elapsed
time, in minutes, since the oldest active transaction's
creation.

5. To display transaction statistics, in the right pane, click the Transaction Statistics tab.

248

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

4.1.6 Viewing Dbspaces Statistics


Display dbspace size and usage details, including shared temporary dbspaces, for the SAP IQ server.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Dbspaces.
3. In the right pane, in the Dbspaces area, select a dbspace name.
Details on the dbspace appear in the Dbspace Details, DB Files, and Db File Details panes.
4. If multiple DB files appear in the DB Files area, to display information on a specific DB file, select it in the
DB File area.

Results
Note
Click a column header to sort the data by that column.
To display the information in a chart or table in the full window, select the Maximize icon in the top right
of the area.
Hover the mouse pointer over any line or bar graph to display information for that graph.
Area

Description

Dbspaces

Lists all dbspaces for the selected sys


tem.

DB Files

Lists all db files for the selected


dbspace.

Dbspaces Details

Dbspaces Details displays size in


formation for the selected
dbspace in KBs and as a percent
age.
Size Details displays a pie chart
comparing dbspace size in use to
size available.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

249

Area

Description

Db File Details

DB File Details displays size infor


mation for the selected db file in
KBs and as a percentage.
Size Details displays a pie chart
comparing db file size in use to
size available.

4.1.7 Viewing Backup and Dependency Statistics


Display backup and dependency details for the SAP IQ server.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex or the coordinator node of a multiplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Backups.
3. In the right pane, in the Backups area, highlight a backup event.
Details on the backup and any dependencies appear in the Backup Details area.

Note
Click a column header to sort the data by that column.

250

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Area

Description

Backups

Time time the backup was initiated.


ID unique ID of the backup event.
Type type of backup. Valid entries are:

Full

Incremental since incremental

Incremental since full

PITR

Depends on ID for incremental backups, the ID of the


event it is dependant on.
Size size of the backup, in kilobytes.
Creator ID of the user who initiated the backup.
Comment optional text comment regarding the
backup.
Backup Details

Backup ID unique ID of the backup event.


Dbspace Name name of the dbspace where the
backup resides.
Dbspace RW mode of the dbspace.
Dbspace Online status of the dbspace.
Dbspace Size size of the dbspace, in kilobytes.
Dbspace Backup Size size of the backup on the
dbspace, in kilobytes.
DB File Name name of the DB file where the backup
resides.
DB File Size name of the DB file where the backup
resides.
DB File Backup Size size of the backup on the DB
file, in kilobytes.
DB File Path path to the DB file where the backup re
sides.

4. To view any dependencies on the selected backup even, click the Backup Dependencies tab.
Column

Description

Time

time the dependent backup was initiated.

ID

unique ID of the dependent backup event.

Type

type of the dependent backup. Valid entries are:

Full

Incremental since incremental

Incremental since full

Depends on ID

for incremental backups, the ID of the event it is depend


ant on.

Size

size of the dependent backup, in megabytes.

Creator

ID of the user who initiated the dependent backup.

Comment

optional text comment regarding the dependent backup.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

251

4.1.8 Viewing Store I/O Statistics


Display store I/O statistics for the selected SAP IQ server.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Store I/O.
Statistics on disk read and writes appear in the right pane.

Results
Note
To display the information in a chart or table in the full window, select the Maximize icon in the top right
of the area.
Hover the mouse pointer over any line or bar graph to display information for that graph.
Area

Description

Disk Reads

Number of disk reads per second on the IQ (catalog) system


store, IQ main store, and temporary store.

Disk Writes

Number of disk writes per second on the IQ (catalog) sys


tem store, IQ main store, and temporary store.

252

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

4.1.9 Viewing Cache Statistics


Display cache statistics for the SAP IQ server.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Caches.
3. In the right pane, select the tab to display details on the required information.

Results

Note
Hover the mouse pointer over any line or bar graph to display information for that graph.
Tab
Cache Size

Description
IQ (catalog) system store cache the megabyte alloca
tion for the IQ (catalog) system store cache, and the
number of megabytes in use.
IQ main store cache the megabyte allocation for the IQ
main store buffer cache, and the number of megabytes
in use.
Temporary cache the megabyte allocation for the tem
porary cache, and the number of megabytes in use.

Cache Reads

SAP IQ Cockpit
Monitor SAP IQ

Number of cache reads per second for a period of time. The


cache reads for the IQ (catalog) system store, IQ main store
buffer, and temporary caches appear.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

253

Tab

Description

Cache Statistics

Displays the cache statistics for the IQ (catalog) system


store, v buffer, and temporary caches. Each cache type in
cludes statistics for:
Size (mb) total size of the cache, in megabytes.
In use (%) percentage of the cache being used.
Reads (per second) number of cache reads per sec
ond.
Hits (per second) number of hits, per second, to the IQ
(catalog) system store, IQ main store buffer, and tem
porary caches.
Dirty pages (%) percentage of pages in the IQ (cata
log) system store, IQ main store, and temporary caches
where data has been modified and stored in the buffer
cache and has not yet been written to disk.
Pinned number of pinned IQ (catalog) system store, IQ
main store buffer, and temporary cache pages.
Pinned (%) percentage of the IQ (catalog) system
store, IQ main store buffer, and temporary caches pin
ned.

4.1.10 Viewing Table Version Statistics


Display table version details for the SAP IQ server.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Table Versions.
Details on table versions appear in the right pane.

254

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Results

Note
To display the information in a chart or table in the full window, select the Maximize icon in the top right of
the area.
Area

Description

Statistics

Number of committed versions the number of table


versions in the server.
Total version space used (MB) total space consumed
by all the table versions.
Oldest version ID the oldest version identifier on the
server.
Number of active versions total number of active write
table versions on the server.
Total active version space created (MB) amount of
data created by active write transactions.
Total active version space to be destroyed (MB)
amount of data destroyed by active write transactions.
If these transactions commit, the destroyed data be
comes an old version and is eventually dropped. If the
transactions roll back, the created data is released.

Table Versions

Version ID the table version identifier.


Server name the name of the server.
Connection ID the connection ID using this table ver
sion.
MinKBRelease the minimum amount of space returned
once this version is no longer in use.
MaxKBRelease the maximum amount of space re
turned once this version is no longer in use.
WasReported indicates whether the server has re
ceived usage information for this version.

4.1.11 Viewing Operations and Requests Statistics


Display operation and request details for the SAP IQ server.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

255

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Operations & Requests.
Details on operations and requests appear in the right pane.

Results

Note
To display the information in a chart or table in the full window, select the Maximize icon in the top right
of the area.
Hover the mouse pointer over any line or bar graph to display information for that graph.
Area

Description

Operations

Total operations the total number of IQ operations of


any type.
Active operations the number of active IQ operations.
Waiting operations the number of IQ operations wait
ing for the system governor.

Requests

Requests the number of times per second the server


has been accessed to handle a new request or continue
processing an existing request.
Active requests the number of active requests.
Unscheduled requests the number of requests that
are currently in the queue, waiting for an available
server thread.

4.1.12 Viewing Network Statistics


Display network statistics for the SAP IQ server.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex.

256

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Network.
Details on network and buffer usage as well as data transfer history appear in the right pane.

Results
Note
Click a column header to sort the data by that column.
To display the information in a chart or table in the full window, select the Maximize icon in the top right
of the area.
Hover the mouse pointer over any line or bar graph to display information for that graph.
Area
Network Usage

Description
Bytes received amount of data, in bytes, received by
the server.
Bytes received uncompressed amount of uncom
pressed data, in bytes, received by the server.
Bytes sent amount of data, in bytes, sent by the server.
Bytes sent uncompressed amount of uncompressed
data, in bytes, sent by the server.
Free communication buffers number of free commu
nication buffers.
Total communication buffers total number of commu
nication buffers.

Buffer Usage

Shows the total number of communication buffers, and a


graph displaying the number of used and free communica
tion buffers.

Data Transfer History

Displays the amount of data, in kilobytes, sent and received


by the server over time.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

257

4.1.13 Viewing Table Page Usage Statistics


Display page usage details for tables or materialized views for the SAP IQ server. Table Page Usage only
applies to system tables in the IQ (catalog) system store.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Table Pages.
3. In the right pane, in the Tables area, select the table or materialized view to display usage details about.
Details on the selected item appear in the Table Page Usage Details area.

Results
Note
Click a column header to sort the data by that column.
To display the information in a chart or table in the full window, select the Maximize icon in the top right
of the area.
Description

Area
Tables

Name name of the page.


Owner owner of the page
Type type of object.

258

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Area

Description

Table Page Usage Details

Name the name of the table or materialized view.


Owner the user with owner privileges for the table or
materialized view.
Type the type of table or materialized view.
Table Pages the number of pages in the table or mate
rialized view.
Table Pages Used Percentage the percentage of used
pages.
Index Pages the number of pages in the index of the ta
ble or materialized view.
Index Pages Used Percentage the percentage of used
index pages.
File Used Percentage the percentage of the file that is
used.

4.1.14 Viewing Table Lock Statistics


Display details of locked tables, views or materialized views for the SAP IQ server.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Table Locks.
3. In the right pane, in the Tables Locks pane, select the table you want lock details about.
Details on the selected item appear in the Table Page Usage Details pane.

Results
Note
Click a column header to sort the data by that column.
To display the information in a chart or table in the full window, select the Maximize icon in the top right
of the area.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

259

Area

Description

Table Locks

Connection Name name of the connection in use when


the table was locked.
User Name ID of the user who locked the table.
Table Name name of the locked table.
Lock Type type of lock on the table.

Table Lock Details

Connection ID identifies the locking connection.


Table Type indicates whether the lock is on a table or
materialized view.
Table Owner identifies the owner of the locked table or
materialized view.
Index ID identifies the index of the locked table or ma
terialized view.
Lock Class indicates the classification as Schema,
Row, Table, or Position..
Lock Duration indicates the duration as Transaction,
Position, or Connection.
Lock Type indicates the type (dependant on the lock
class).
Row ID identifies the row with an 8-byte row identifier
or NULL.

4.1.15 Viewing Deadlock Statistics


Display deadlock details for the SAP IQ server. You can specify how details are displayed and clear deadlock
information.

Prerequisites
Database Version

View Deadlock Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY USER system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a simplex.

Note
If you do not have the required pre-requisites, the deadlock details will be read-only.

260

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Context
Write locks maintain the reliability of information by preventing concurrent access to rows or tables by more
than one transaction. Transaction blocking and snapshot versioning manage statements until a lock becomes
available. However, deadlock can occur when a set of transactions arrive at a state where none of them can
proceed.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Deadlocks.
3. In the right pane, select the deadlock you want details about.

Note
Click a column header to sort the data by that column.
Area

Description

Waiter

The system (server) that the proxy table will be created


on.

Waiter Connection ID

The defined remote server containing the remote object


to be represented by the proxy table.

Owner Connection ID

The defined local user that will own the proxy table.

Deadlock details

Snapshot ID the snapshot version managing the


transaction.
Snapshot Time when the snapshot was created.
Object ID the table, materialized view or other object
causing the deadlock.
Record ID the record causing the deadlock, if one ex
ists.
Table Name the name of the deadlocked table in
owner.table format
Is Victim a boolean indicator showing whether this
connection was the victim of the deadlock
Primary Key the primary key for the deadlocked ta
ble.
Rollback Operation Count the number of times the
rollback command has been executed to resolve the
deadlock.
SQL Statement the SQL statement which caused
the deadlock.

4. (Optional) If you have the appropriate authority, select Clear Deadlock Information to remove all items
from the list.
5. (Optional) If you have the appropriate authority, select Deadlock Settings to modify how deadlock details
are collected and displayed.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

261

a. Specify whether to create a list of deadlocks with the Collect information check-box.
b. Specify whether to include the causal SQL statements in the list of deadlocks with the SQL statement
check-box.

4.1.16 Viewing RLV Memory Usage Statistics


Display RLV memory usage information at a system-wide and per-table levels for the SAP IQ server.

Prerequisites
Database Version

View RLV Memory Usage Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a simplex.

Note
The RLV Memory Usage Statistics page does not appear on the MONITOR workset for individual multiplex
servers.

Context
To write transactions to the RLV store requires a connection with SNAPSHOT_VERSIONING database option
set to row-level. By default, SNAPSHOT_VERSIONING is set to table-level, which writes transactions directly to
the IQ store. See Configure Snapshot Versioning in the SAP IQ Administration: In-Memory RLV Store
documentation.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select RLV Memory Usage.
A list of tables with RLV memory usage appears.

Note
Click a column header to sort the data by that column.

262

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

To display the information in a chart or table in the full window, select the Maximize icon in the top
right of the area.
Column

Description

Table Name

Name of each RLV-enabled table.

Fragments

Number of store fragments for the selected table.

Total

Total RLV store memory used by the selected table.

Data

RLV store memory used for the column fragments for the
selected table.

Dictionary

RLV store memory used for the dictionaries for the se


lected table.

Bitmap

RLV store memory used to store table-level bitmaps.

3. To view the RLV memory used and limit for a specific table, in the right pane, click the table in the RLV
Memory Usage Per Table area.

4.1.17 Viewing RLV Merge History Statistics


Display historical details on RLV merges for the SAP IQ server.

Prerequisites
Database Version

View RLV Merge History Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a simplex.

Note
The RLV Merge History Statistics page does not appear on the MONITOR page for individual multiplex
nodes.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select RLV Merge History.
A list of RLV-enabled tables that have been merged appears.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

263

Note
Click a column header to sort the data by that column.
To display the information in a chart or table in the full window, select the Maximize icon in the top
right of the area.
Column

Description

Table Name

Name of the RLV-enabled table.

Start Time

Time the RLV merge began.

End Time

Time the RLV merge finished.

Merge Type

The cause of the merge trigger. Available types are:

Status

AUTOMATIC

DML

DDL

SHUTDOWN

USER

Current status of the RLV merge. Available statuses are:

STARTED

COMPLETED

FAILED

3. To display details on a specific merge, in the right pane, select the merged table.

264

Column

Description

Merge ID

Unique log entry identifier of the merge.

Merge mode

Current mode of the merge. Available modes are:

BLOCKING

NON-BLOCKING

Return code

SQL code of the merge once completed.

Merge detail

Additional information, if provided, such as error informa


tion.

Rows inserted

Number of rows that were inserted as a result of the


merge.

Rows updated

Number of rows that were updated as a result of the


merge.

Rows deleted

Number of rows that were deleted as a result of the


merge.

Rows forwarded

Number of rows that were uncommitted at the time of the


merge.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

4.1.18 Viewing the Statistics Chart


To show performance trends, generate a graph for any set of performance counters over a specified period of
time.

Context

Tip
Data collections start running when the SAP IQ Cockpit server starts and systems running on the host are
auto discovered. However, recently discovered systems might not have accumulated enough data to make
a useful graph.
If you attempt to view data for a collection job that has not been created, No data was found for
statistic appears.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Statistics Chart.
3. Expand the folders in the Statistics tab and select the key performance indicator (KPI) you want to graph.
4. Click Graph Statistic or drag the KPI onto the Chart tab.
The Chart tab displays the graphed data, while the KPI with its corresponding value and the date and time
it was collected appear in the Data tab.
5. (Optional) Repeat to add KPIs to the graph.
6. (Optional) Use the slider at the bottom of the Chart tab to control the amount of time covered by the
graph, ranging from a minute to a year.
7. (Optional) Use <<, <, >, and >> to move the displayed graph to an earlier or later time. Increments depend
on how the slider is set.

Tip
The statistics chart displays data covering a fixed period of time, and that period does not change
automatically. If you are viewing the most recent statistics and want to keep the graph current, adjust
the displayed time period as new statistics are collected.
8. (Optional) You can click the date/time labels that appear above the slider. Use these to change the start
and end time and the chart time span.
9. (Optional) Click Clear Graph to remove all the graphed statistics and start anew.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

265

Results

Note
You can graph a maximum of five statistics with no more than two distinct units of measure. By default, only
24 hours of statistics are available; change the repository purge options to save statistics for a longer
period.

Related Information
Creating and Scheduling a Collection Job [page 198]

4.1.19 Changing Update Frequency for Simplex Monitoring


You can control the rate at which data on the MONITOR workset is refreshed, the amount of time covered by
charts.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Settings.
3. Modify the settings as needed.

266

Setting

Description

Screen refresh interval (Seconds)

Enter the number of seconds between refreshes. You can


also use the up and down arrows to select the appropriate
number of seconds. The default is 30 seconds.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Setting

Description

Chart Trend Period

Enter the number of minutes of data to appear in charts.


The minimum number of minutes is 5, and the maximum
number is 999999999. The default is 30 minutes. Since
data is added to a chart only when it is open, a chart con
tains data starting from when you opened it. Each refresh
interval adds new data to the end of the graph. A chart
trend period of 30 minutes shows the statistics trend over
the last 30 minutes, even if the view has been open longer
than 30 minutes.

4. Click Apply to update any changes.

Related Information
Modifying the Collection Interval for a Scheduled Job [page 202]

4.2

Multiplex Servers

Statistics allow you to monitor the availability and performance of multiplex servers.

Note
Your login policy governs server access. Use a login ID with access to the SERVER logical server to manage
a multiplex. SERVER logical server context requires the ACCESS SERVER LS system privilege. In the SAP IQ
documentation, see SAP IQ Administration: Multiplex for details on login policies and logical server
configuration.

Related Information
Viewing Multiplex Overview Statistics [page 268]
Multiplex Topology Statistics [page 270]
Viewing Multiplex Server Statistics [page 275]
Viewing Multiplex Connections Statistics [page 276]
Viewing Multiplex Transaction Statistics [page 277]
Viewing Multiplex Cache Statistics [page 278]
Viewing the Statistics Chart [page 279]
Changing Update Frequency for Multiplex Monitoring [page 281]

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

267

4.2.1 Viewing Multiplex Overview Statistics


Display the overall health of the SAP IQ multiplex.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a multiplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select, select Overview.
3. In the right pane, select the tab for the required information.

Results
Note
Click a column header to sort the data by that column.
To display the information in a chart or table in the full window, select the Maximize icon in the top right
of the area.
Hover the mouse pointer over any line or bar graph to display information for that graph.
Description

Tab
Multiplex

268

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Tab

Description
Servers

Server name of the server.


Host host name where the server is running.
Port port number where the server is running.
State current state of the server. Valid states include:

Unknown

Stopped

Running

Role role the server plays in the multiplex configuration.


Roles include:

Coordinator

Reader

Writer

Status current status of the server in the multiplex. Valid


states include:

Included

Excluded

CPU History

Percentage of total CPU usage over a period of time for each


server. The legend below the chart identifies the colored line as
sociated with each server.

IQ Memory

Allocation of the IQ memory between the main cache and tem


porary cache for each server in the multiplex.

Disk Usage

Available and used space for the IQ main store and temporary
store on each server in the multiplex.

Version Usage
Statistics

Number of committed versions the number of table ver


sions in the servers.
Total version space used (MB) total space consumed by
all the table versions.
Oldest version ID the oldest table version identifier on the
server.
Number of active versions total number of active write ta
ble versions on the servers.
Total active version space created (MB) amount of data
created by active write transactions.
Total active version space to be destroyed (MB) amount
of data destroyed by active write transactions. If these
transactions commit, the destroyed data becomes an old
version and is eventually dropped. If the transactions roll
back, the created data is released.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

269

Tab

Description
Multiplex Version Usage

Version ID the table version identifier.


Server name the name of the server where the table ver
sion exists.
Connection ID the connection ID using this table version.
WasReported indicates whether the server has received
usage information for this table version.
MinKBRelease the minimum amount of space returned
once this table version is no longer in use.
MaxKBRelease the maximum amount of space returned
once this table version is no longer in use.

4.2.2 Multiplex Topology Statistics


Display the topology view of the SAP IQ multiplex.
The topology view represents the entire multiplex grid environment, which consists of nodes and links. A node
represents a multiplex server, while a link represents the connection between two multiplex nodes. Only one
coordinator node appears, and links exist only between the coordinator node and a secondary node. There are
no links between two secondary nodes.

Related Information
Configuring the Multiplex Topology Display [page 270]
Viewing Topology Statistics of a Multiplex Node [page 271]
Displaying the Properties of a Multiplex Node [page 272]
Displaying Connection Properties [page 274]

4.2.2.1

Configuring the Multiplex Topology Display

Configure the display the topology view of the SAP IQ multiplex.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a multiplex.

270

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Topology.
3. Click View Controls.
Layout options include:
Autofit rearranges the nodes to ensure all nodes are visible.
Zoom increases or decreases the size of the view.
Reset restores the topology view to the default layout.
4. To view a list of the all nodes in the multiplex, and a list of the connections between the coordinator node
and its secondary nodes within the multiplex, click Details.
5. To reset the display to default layout, click Reset.

Related Information
Simplex Server [page 240]

4.2.2.2

Viewing Topology Statistics of a Multiplex Node

View a single node within the multiplex topology.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a multiplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Topology.
3. In the right pane, right-click the node in the topology view and select Monitor Node.
The MONITOR workset displays IQ node level details. For information on each statistic, see
SAP IQ

Monitor

Simplex Server .

4. To return the MONITOR workset to the multiplex view, left-click in the white space below Settings and
press Esc.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

271

4.2.2.3

Displaying the Properties of a Multiplex Node

View the server information for a single node in the multiplex environment.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a multiplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Topology.
3. In the right pane, right-click the node and select Properties.

Results
The Server Properties includes:

272

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Area
General

Description
Server name name of the server.
Host host name where the server is running.
Port port number where the server is running.
State current state of the server. Valid states include:

Unknown

Stopped

Running

INC state state of the internode communication be


tween the secondary node and the coordinator. Valid
values include:

Active

Timed out

N/A (not available)

Unknown

Note
When viewing the properties of the coordinator
node, the INC state always displays N/A.
Role role of the server within the multiplex. Valid roles
include:

Coordinator

Writer

Reader

Status current status of the server. Valid statuses in


clude:

Included

Excluded

Database Path location of the database file on the


server.
MIPC

Node multiplex node name.


Public Status current public status of each node. Sta
tus is set to Not responding if communication with
that node fails.
Private Status current private status of each node.
Status is set to Not configured or "Not responding" if
there is no Private TCP/IP configuration for that server.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

273

4.2.2.4

Displaying Connection Properties

View the details of the connection between the coordinator node and a secondary node.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a multiplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Topology.
3. In the right pane, right-click the line between the coordinator node and the secondary node and select
Properties.

Results
The internode communication properties includes:
Setting

Description

Link

Name of the linked coordinator node and secondary node.

INC state

State of the internode communication between the secondary node and the co
ordinator. Valid values include:

Active

Timed out

N/A (not available)

Unknown

Secondary server name

Name of the secondary server.

Heartbeat frequency

Number of seconds between polls to ensure the secondary server is connected.

Last successful heartbeat

Date and time the last successful heartbeat transmission was received.

Time not responding

Amount of time since the first failed heartbeat request.

Time until timeout

Amount of time until the server connection times out and the secondary node
becomes inactive.

Liveness timeout

Amount of time before the connection is terminated.

Auto exclude timeout

Amount of time before the secondary node is automatically excluded.

274

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Setting

Description

Max connection pool size

Maximum number of connections in the secondary node's pool of INC connec


tions.

Current connection pool size

Current number of connections in the secondary node's pool of INC connec


tions.

Number of idle connections

Current number of unused INC connections from the secondary node to the co
ordinator.

Number of connections in use

Current number of INC connections in use from the secondary node to the coor
dinator.

4.2.3 Viewing Multiplex Server Statistics


Display statistics for the servers in the SAP IQ multiplex.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a multiplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Servers.
3. In the right pane, select the server to display in the Server Details area.

Results

Note
Click a column header to sort the data by that column.
To display the information in a chart or table in the full window, select the Maximize icon in the top right
of the area.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

275

Area

Description

Multiplex Servers

Server name of the server.


Host host name where the server is running.
Port port number where the server is running.
State current state of the server. Valid states include:

Unknown

Stopped

Running

Role role of the server within the multiplex. Valid roles


include:

Coordinator

Writer

Reader

Status current status of the server. Valid states in


clude:

Server Details

Included

Excluded

Server name name of the server.


State current state of the server. Valid states include:

Unknown

Stopped

Running

Database name of the IQ database.


Database path location of the database file on the
server.
Server version version of the IQ server.
Platform operating system running on the host of the
server.

4.2.4 Viewing Multiplex Connections Statistics


Display connection statistics for all servers in an SAP IQ multiplex.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a multiplex.

Context
On the Connections tab the Multiplex Connections area displays all users currently connected to each server
and the User Connections/Disconnections Per Minute displays the number of user connections and

276

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

disconnections per minute for each server. The Active Connections tab displays a chart of the number of user,
internode incoming, and other connections to the selected server.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Connections.
3. To display a list of connections for a server in the Multiplex Connections area, in the right pane, click the
Connections tab and then expand the server.

Note
Click a column header to sort the data by that column.
Column

Description

Server

Name of the server.

User ID

ID of the connected user.

Connection ID

ID of the connection.

State

Current state of the selected connection. Possible states


include:
ACTIVE the connection is live.
SUSPENDED the connection and its corresponding
transaction are suspended, probably due to hard
ware or communication failure.

Name

Name of the connection.

Connection create time

Date and time the connection was established.

Client IP address

IP address of the client that made the connection.

Connection or cursor

Indicates a connection or an active cursor

4. To display the active connection details, in the right pane, click the Active Connections tab, and then click
the bar chart for a server.

4.2.5 Viewing Multiplex Transaction Statistics


Display transaction statistics for all servers in an SAP IQ multiplex.

Prerequisites
The SAP IQ system is running, registered, and authenticated.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

277

The logged in SAP IQ system is a multiplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Transactions.
3. To display a list of transactions for a server, in the right pane, click the Transactions tab and then expand
the server name.

Note
Click a column header to sort the data by that column.
Column

Description

Server

Name of the server.

Transaction ID

Unique identification number for the selected transaction.

Version ID

Version identification number for the selected transac


tion.

User ID

User name of the user that started the selected transac


tion.

State

Current state of the selected transaction. Possible states


include:
ACTIVE transaction is being processed.
COMMITTED transaction has completed processing.

Creation time

Date and time when the selected transaction was created.

4. To display the transaction statistics, in the right pane, click the Active Connections tab, then click the bar
chart for a server.

4.2.6 Viewing Multiplex Cache Statistics


Display cache statistics for all servers in an SAP IQ multiplex.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a multiplex.

278

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Caches.
3. In the right pane, select the tab for the cache type to show.
Each cache type tab provides a graph with colored lines for each selected server.

Results

Note
To display the information in a chart or table in the full window, select the Maximize icon in the top right
of the area.
Hover the mouse pointer over any line or bar graph to display information for that graph.
Area

Description

Cache Reads

Number of cache reads per second for a period of time. The


legend at the right of the chart identifies the colored line as
sociated with each server.

Cache Size

The megabyte allocation for the selected cache type on


each server in the multiplex, and the number of megabytes
in use.

4.2.7 Viewing the Statistics Chart


To show performance trends, generate a graph for any set of performance counters over a specified period of
time.

Context

Tip
Data collections start running when the SAP IQ Cockpit server starts and systems running on the host are
auto discovered. However, recently discovered systems might not have accumulated enough data to make
a useful graph.
If you attempt to view data for a collection job that has not been created, No data was found for
statistic appears.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

279

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Statistics Chart.
3. Expand the folders in the Statistics tab and select the key performance indicator (KPI) you want to graph.
4. Click Graph Statistic or drag the KPI onto the Chart tab.
The Chart tab displays the graphed data, while the KPI with its corresponding value and the date and time
it was collected appear in the Data tab.
5. (Optional) Repeat to add KPIs to the graph.
6. (Optional) Use the slider at the bottom of the Chart tab to control the amount of time covered by the
graph, ranging from a minute to a year.
7. (Optional) Use <<, <, >, and >> to move the displayed graph to an earlier or later time. Increments depend
on how the slider is set.

Tip
The statistics chart displays data covering a fixed period of time, and that period does not change
automatically. If you are viewing the most recent statistics and want to keep the graph current, adjust
the displayed time period as new statistics are collected.
8. (Optional) You can click the date/time labels that appear above the slider. Use these to change the start
and end time and the chart time span.
9. (Optional) Click Clear Graph to remove all the graphed statistics and start anew.

Results
Note
You can graph a maximum of five statistics with no more than two distinct units of measure. By default, only
24 hours of statistics are available; change the repository purge options to save statistics for a longer
period.

Related Information
Creating and Scheduling a Collection Job [page 198]

280

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

4.2.8 Changing Update Frequency for Multiplex Monitoring


You can control the rate at which data on the MONITOR workset is refreshed, the amount of time covered by
charts, and the multiplex nodes included in charts.

Prerequisites
The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a multiplex.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Settings.
3. Modify the settings as needed.
Setting

Description

Screen refresh interval (Seconds)

Enter the number of seconds between refreshes. You can


also use the up and down arrows to select the appropriate
number of seconds. The default is 30 seconds.

Chart Trend Period

Enter the number of minutes of data to appear in charts.


The minimum number of minutes is 5, and the maximum
number is 999999999. The default is 30 minutes. Since
data is added to a chart only when it is open, a chart con
tains data starting from when you opened it. Each refresh
interval adds new data to the end of the graph. A chart
trend period of 30 minutes shows the statistics trend over
the last 30 minutes, even if the view has been open longer
than 30 minutes.

Maximum Number of Nodes to Show in Chart

Enter the maximum number of nodes to include in any


monitoring charts. The default is 10 nodes.

Select Nodes

Choose the nodes to include in the monitoring charts. You


cannot select more than the maximum number of nodes.

4. Click Apply to update any changes.

Related Information
Modifying the Collection Interval for a Scheduled Job [page 202]

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

281

4.3

Logical Servers

Statistics allow you to monitor the availability and performance of logical servers.

Related Information
Viewing Logical Server Overview Statistics [page 282]
Viewing Logical Server Statistics [page 283]
Viewing the Statistics Chart [page 284]
Changing Update Frequency for Logical Server Monitoring [page 286]

4.3.1 Viewing Logical Server Overview Statistics


Display the overall health of the logical servers in an SAP IQ multiplex.

Prerequisites
The selected SAP IQ system supports authority-based security.
The logged in SAP IQ system is a logical server.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Overview.
3. In the right pane, select the tab for the required information.

Results
Note
Click a column header to sort the data by that column.
To display the information in a chart or table in the full window, select the Maximize icon in the top right
of the area.
Hover the mouse pointer over any line or bar graph to display information for that graph.

282

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Area

Description

CPU History

Percentage of total CPU usage over a period of time for


each logical server. The legend below the chart identifies the
colored line associated with each logical server.

IQ Memory

Allocation of the IQ memory between the main buffer cache


and temporary buffer cache for each logical server in the
multiplex.

4.3.2 Viewing Logical Server Statistics


Display statistics for logical servers in the SAP IQ multiplex.

Prerequisites
The selected SAP IQ system supports authority-based security.
The logged in SAP IQ system is a logical server.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Servers.
3. In the right pane, select the server to display in the Server Details area.

Results
Note
Click a column header to sort the data by that column.
To display the information in a chart or table in the full window, select the Maximize icon in the top right
of the area.
Table 5: Logical Server Nodes
Property

Description

Server

Name of the server.

Host

Host name where the server is running.

Port

Port number where the server is running.

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

283

Property

Description

State

Current state of the server. Valid states include:

Role

Unknown

Stopped

Running

Role the server plays in the multiplex configuration. Roles in


clude:

Status

Coordinator

Reader

Writer

Current status of the server in the multiplex. Valid states in


clude:

Included

Excluded

Table 6: Server Details


Property

Description

Server name

Name of the server.

State

Current state of the server. Valid states include:

Unknown

Stopped

Running

Database

Name of the IQ database.

Database path

Location of the database file on the server.

Server version

Version of the IQ server.

Platform

Operating system running on the host of the server.

4.3.3 Viewing the Statistics Chart


To show performance trends, generate a graph for any set of performance counters over a specified period of
time.

Context
Tip
Data collections start running when the SAP IQ Cockpit server starts and systems running on the host are
auto discovered. However, recently discovered systems might not have accumulated enough data to make
a useful graph.

284

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

If you attempt to view data for a collection job that has not been created, No data was found for
statistic appears.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Statistics Chart.
3. Expand the folders in the Statistics tab and select the key performance indicator (KPI) you want to graph.
4. Click Graph Statistic or drag the KPI onto the Chart tab.
The Chart tab displays the graphed data, while the KPI with its corresponding value and the date and time
it was collected appear in the Data tab.
5. (Optional) Repeat to add KPIs to the graph.
6. (Optional) Use the slider at the bottom of the Chart tab to control the amount of time covered by the
graph, ranging from a minute to a year.
7. (Optional) Use <<, <, >, and >> to move the displayed graph to an earlier or later time. Increments depend
on how the slider is set.

Tip
The statistics chart displays data covering a fixed period of time, and that period does not change
automatically. If you are viewing the most recent statistics and want to keep the graph current, adjust
the displayed time period as new statistics are collected.
8. (Optional) You can click the date/time labels that appear above the slider. Use these to change the start
and end time and the chart time span.
9. (Optional) Click Clear Graph to remove all the graphed statistics and start anew.

Results

Note
You can graph a maximum of five statistics with no more than two distinct units of measure. By default, only
24 hours of statistics are available; change the repository purge options to save statistics for a longer
period.

Related Information
Creating and Scheduling a Collection Job [page 198]

SAP IQ Cockpit
Monitor SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

285

4.3.4 Changing Update Frequency for Logical Server


Monitoring
You can control the rate at which data on the MONITOR workset is refreshed, the amount of time covered by
charts, and the logical servers included in charts.

Prerequisites
The selected SAP IQ system supports authority-based security.
The logged in SAP IQ system is a logical server.

Procedure
1. In SAP IQ Cockpit, click the MONITOR workset.
2. In the left pane, select Settings.
3. Modify the settings as needed.
Setting

Description

Screen refresh interval (Seconds)

Enter the number of seconds between refreshes. You can


also use the up and down arrows to select the appropriate
number of seconds. The default is 30 seconds.

Chart Trend Period

Enter the number of minutes of data to appear in charts.


The minimum number of minutes is 5, and the maximum
number is 999999999. The default is 30 minutes. Since
data is added to a chart only when it is open, a chart con
tains data starting from when you opened it. Each refresh
interval adds new data to the end of the graph. A chart
trend period of 30 minutes shows the statistics trend over
the last 30 minutes, even if the view has been open longer
than 30 minutes.

Maximum Number of Nodes to Show in Chart

Enter the maximum number of nodes to include in any


monitoring charts. The default is 10 nodes.

Select Nodes

Choose the nodes to include in the monitoring charts. You


cannot select more than the maximum number of nodes.

4. Click Apply to update any changes.

Related Information
Modifying the Collection Interval for a Scheduled Job [page 202]

286

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Monitor SAP IQ

Administer SAP IQ

Manage a single-node or multiplex server in the SAP IQ environment.


Administration at the logical server level is not currently available. You must log in to the multiplex that
contains the logical server to administer it.

Related Information
Executing a SQL Query [page 288]
Simplex [page 288]
Multiplex [page 306]
Logical Servers [page 378]
Logical Server Policies [page 389]
Remote Servers [page 396]
External Logins [page 405]
Databases [page 412]
Tables [page 428]
Views [page 593]
Materialized Views [page 626]
Domains [page 674]
Text Configuration Objects [page 684]
Text Indexes [page 693]
Sequence Generators [page 711]
Spatial Support [page 722]
Security and User Management [page 742]
Dbspaces [page 1047]
Dbfiles [page 1064]
Events [page 1077]
External Environments [page 1095]
Functions [page 1138]
Procedures [page 1154]
Web Services [page 1173]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

287

5.1

Executing a SQL Query

Execute an ad hoc SQL query or a stored procedure against one or more SAP IQ servers.

Prerequisites
The SAP IQ system is running, registered, and authenticated.

Context
Queries execute with your current permissions. If you lack the appropriate authority (15.3, 15.4) or system
privilege (16.0), the query returns an error.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, click IQ Servers.
3. In the right pane, select an item, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Execute SQL.
5. In the SQL Statements box, enter a query or the name of a stored procedure and click Execute.
The query runs on all the SAP IQ servers you selected and results appear in the bottom portion of the view.
If you selected multiple servers, the view includes a results tab for each simplex or multiplex node. On the
tabs,
A green check indicates a successful query.
A red X indicates an error.

5.2

Simplex

Start, or stop a server, view properties, change server configuration, or generate administration scripts.

288

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Editing the Simplex Server Configuration File [page 289]
Starting a Simplex Server [page 294]
Stopping a Simplex Server [page 295]
Converting a Multiplex to a Simplex [page 296]
Generating an Administration Script for a Simplex Server [page 297]
Upgrading a Simplex Database [page 298]
Viewing or Modifying Simplex Server Properties [page 301]
Simplex Privilege Summary [page 304]

5.2.1 Editing the Simplex Server Configuration File


Change simplex server configuration settings including administrative, memory, connection, and debugging
settings.

Prerequisites
Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a simplex.

Context
Editing the configuration file edits the params.cfg file located in the database directory for the server. You
cannot edit a custom configuration file. If params.cfg does not exist, the SAP IQ Cockpit agent automatically
generates it when you adjust any configuration values and click OK or Apply.

Note
The Start Server wizard starts the server using the params.cfg file. You cannot start a server from SAP IQ
Cockpit using a custom configuration file with a different name.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

289

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, click IQ Servers.
3. In the right pane, select the simplex, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Edit Configuration File.
5. Adjust the configuration values.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Table 7: Admin
Property

Description

Disable triggers

Select to disable firing of triggers.

Checkpoint timeout period

Maximum length of time, in minutes, that the database


server runs without doing a checkpoint.

Maximum recovery time

Maximum length of time, in minutes, that the database


server takes to recover from system failure.

Start database permission

Permission required to start the database. Valid values


are:

Stop database permission

Load/unload permission

Utility permission

290

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

dba

all

none

Permission required to stop the database. Valid values


are:

dba

all

none

Set LOAD/UNLOAD permission. Valid values are:

dba

all

none

Set utility commands (e.g., DROP DATABASE) permis


sion. Valid values are:

utility_db

dba

all

none

SAP IQ Cockpit
Administer SAP IQ

Table 8: Memory
Property

Description

Display cache sizing statistics

Select to display cache size changes.

Disable automatic cache resizing

Select to enforce a static cache size and disable auto


matic cache resizing.

Initial cache size

Initial memory reserved for caching database pages and


other server information. The size is the amount of mem
ory. Select Kilobytes, Megabytes, Gigabytes. Select % to
specify a percentage either of the physical system mem
ory, or of the maximum non-AWE cache size, whichever is
lower.

Minimum cache size

Minimum cache size as a lower limit to automatic cache


resizing. The size is the amount of memory, in bytes. Se
lect Kilobytes, Megabytes, Gigabytes. Select % to spec
ify a percentage either of the physical system memory, or
of the maximum non-AWE cache size, whichever is lower.

Maximum cache size

Maximum cache size, as a limit to automatic cache


growth. The size is the amount of memory, in bytes. Se
lect Kilobytes, Megabytes, Gigabytes. Select % to spec
ify a percentage either of the physical system memory, or
of the maximum non-AWE cache size, whichever is lower.

Engine thread stack size

Server thread stack size. The size is the amount of mem


ory, in bytes. Select Kilobytes or Megabytes.

Number of engine threads

Number of execution threads used for the IQ (catalog)


system store and connectivity while running with multiple
users. Recommended value is 1.5 times the maximum
number of concurrent connections to the server; mini
mum of 25.

Number of concurrent OS threads

Maximum number of physical processors to use (up to li


censed maximum).

External DLL thread stack size

Stack size for threads running external functions, in


bytes. The default is 32 KB.

Large Memory

Maximum amount of memory, in megabytes, that SAP IQ


can dynamically request from the operating system for
temporary use.

RLV Memory

Amount of memory, in megabytes, available to the RLV


store.

Maximum page size

Maximum page size in KB.

Table 9: Connections
Property

Description

Shut down after last database closes

Select to automatically shut down after the last database


is closed.

Encrypt communication messages

Select to enable packet encryption on the network server.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

291

Property

Description

Enable client-server character translation

Character set translation is enabled by default. There is a


performance cost associated with character set transla
tion. If you can set up an environment such that no char
acter set translation is required, then you do not have to
pay this cost, and your setup is simpler to maintain.

Maximum connections

Maximum number of concurrent user connections.

Communication packet size

Maximum packet size. If you want to send small amounts


of data over the network, keep the default network packet
size small. The default is 512 bytes.

Idle time before disconnect

Amount of client idle time before the connection is termi


nated. If a client runs for the idle timeout period without
submitting a request, the connection is severed.

Liveness timeout

A liveness packet is sent across a client/server to confirm


that a connection is intact. If the client runs for the liven
ess timeout period without detecting a liveness packet,
the communication will be severed. This parameter works
only with network server and TCP/IP communications
protocols. The default is 120 seconds.

Quitting time

Time when the database server is to shut down.

Broadcast level

How the server reacts to broadcasts. (Ignore All) causes


the server not to start up any UDP broadcast listeners.
(dblocate) causes the server to not respond to broad
casts from dblocate, while leaving connection logic unaf
fected.

Table 10: Database


Property

Description

Set database read-only

Select to force all databases that start on the database


server to be read-only. No changes to the databases are
allowed: the database server doesn't modify the database
files or transaction log files.

Truncate xact log after checkpoint

select to cause the transaction log to be truncated after


each checkpoint for all databases.

Table 11: Debug

292

Property

Description

Generate debug information

Select to display debugging information.

Remember last statement on each connection

Select to instruct the database server to capture the most


recently prepared SQL statement for each connection to
a database on the server.

Debug level

Enables request-level logging of operations. Valid values


are:

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

all

sql

one

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Debug output file name

Field to redirect HTTP Web service client procedure de


bug log to a file.

Max output file size

Maximum size of file for server request loggin.

Table 12: Debug


Property

Description

Generate debug information

Select to display debugging information.

Remember last statement on each connection

Select to instruct the database server to capture the most


recently prepared SQL statement for each connection to
a database on the server.

Debug level

Enables request-level logging of operations. Valid values


are:

all

sql

one

Debug output file name

Field to redirect HTTP Web service client procedure de


bug log to a file.

Max output file size

Maximum size of file for server request loggin.

Table 13: Misc


Property

Description

Quiet mode

Select to run Interactive SQL in quiet mode.

Run as a daemon

Select to run the server so that it continues running after


the current user session ends.

Use buffered disk I/O

Select to use buffered disk I/O [Windows, UNIX].

Syslog facility ID

Valid values are:

Output message file name


Output message file size

none

user

daemon

local0,...,local7

Filename for copy of message window. File is truncated


first.
Appends .old to the log file name and starts a new file
with the original name when log reaches the specified
size.

Touch temporary file timer (UNIX servers only)

Causes the server to touch IQ (catalog) system store


temporary files at intervals specified in minutes.

Temporary Files Directory

Directory where temporary files are stored.

Request Log Copies

Number of request log file copies to retain.

Message Log Size

Maximum size of the message log, in megabytes.

Message Log Archives

Number of old message logs maintained by the server.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

293

Property

Description

User specified

Enables advanced users to specify configuration options


not shown in the Config file editor window. Enter multiple
parameters using the space character as a separator.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.2.2 Starting a Simplex Server


Start a simplex server.

Prerequisites
Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

SERVER OPERATOR system privilege

The SAP IQ system is not running.


The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, click IQ Servers.
3. In the right pane, select the simplex, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Start Server.
5. Click Finish.

294

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.2.3 Stopping a Simplex Server


Stop a simplex server.

Prerequisites
Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

SERVER OPERATOR system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, click IQ Servers.
3. In the right pane, select the simplex, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Stop Server.
5. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

295

5.2.4 Converting a Multiplex to a Simplex


Drop all secondary servers convert a multiplex to a simplex.

Prerequisites
Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Multiplex Servers.

3. In the right pane, select all multiplex servers, except the designated failover node, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Drop Secondary Node.
5. (Optional) Select Delete server files (database, log, scripts, etc.). This cleans up the database directory
by removing any files that belong to the server being dropped.

Caution
Use caution in selecting the option to delete files. If any of the files to be deleted are shared main files,
data can be lost, and servers might not start correctly afterwards.
6. Click Finish.
7. Click Yes at the confirmation prompt to continue.
8. Click Close.
9. In the right pane, select the remaining secondary (failover) node, and do one of:

296

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Click the arrow to the right of the name.


Click the Actions button.
10. Select Drop Secondary Node.
11. (Optional) Select Delete server files (database, log, scripts, etc.).
12. Click Finish, then Yes, then Close.

Note
As part of the conversion, the remaining server is stopped and restarted. This may result in an error
message indicating a server is not running or reachable. Click OK to acknowledge the message.
13. Log out of SAP IQ Cockpit. Log back in, selecting the SAP IQ simplex system.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.2.5 Generating an Administration Script for a Simplex


Server
Generate the configuration file and scripts for starting, stopping, and synchronizing a simplex server.

Prerequisites
Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, click IQ Servers.
3. In the right pane, select the simplex, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

297

4. Select Generate Administration Scripts.


5. Click Finish to generate the scripts.
6. Click Close.

Results
The following scripts are generated:
params.cfg
start_server.sh / start_server.bat
stop_server.sh / stop_server.bat

Note
The stop_server script requires your username and password. For example: stop_server.bat myname
mypwd

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.2.6 Upgrading a Simplex Database


Upgrade an SAP IQ 15.x simplex database to the current version.

Prerequisites
Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

Not supported

SAP IQ server is version 16.0 SP2 or later.


The logged in SAP IQ system is a simplex.
The SAP IQ system is version 15.3 or 15.4 and is running.

298

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, click IQ Servers.
3. In the right pane, select the simplex, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Upgrade Database.
You cannot modify the information about the database and agent for the selected system that appears on
the Welcome page.
5. Select the system procedure security model to be used by the database after the upgrade and click Next.
For details of the security models, see Managing Privileged System Procedure Execution in the SAP IQ
Reference: Building Blocks, Tables, and Procedures guide.
6. On the Prepare for Upgrade page, click Prepare.
Task status messages appear in the Preparation Status window as each task progresses. Additional
messages appear in the Messages window. If a status of "Failed" is encountered during the preparation
phase, the upgrade process terminates. You must manually fix the underlying cause of the failure outside
SAP IQ Cockpit before the wizard can resume.
7. Click:
Close to terminate the upgrade and exit the Database Upgrade wizard. See Resolving Errors During a
Simplex Upgrade.
Next to continue.
8. On the Upgrade Database page, click Upgrade.
Again, status messages track the upgrade's progress. If a status of "Failed" is encountered, the upgrade
terminates.
9. Click:
Close to exit the Database Upgrade wizard.
(Optional) Next to verify that the upgraded database is functioning properly.
10. On the Validate Upgrade page, click Validate. This runs the sp_iqcheckdb stored procedure with the
allocation database parameter. Results appear in the scrollable Validate Upgrade window.
11. Click Close.

Related Information
Resolve Errors During a Simplex Upgrade [page 300]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

299

5.2.6.1

Resolve Errors During a Simplex Upgrade

The Database Upgrade wizard terminates if it fails to complete a prepare or upgrade task. Resolve the error
according to the type of error it is.

Related Information
Resolving Preparation Task Errors During a Simplex Upgrade [page 300]
Resolving Upgrade Task Errors During a Simplex Upgrade [page 300]

5.2.6.1.1

Resolving Preparation Task Errors During a


Simplex Upgrade

Preparation tasks involve the dropping of user connections and indexes.

Procedure
1. Note the reason for the wizard termination.
2. Close the Database Upgrade wizard. You need not exit SAP IQ Cockpit.
3. (Optional) Depending on the severity of the issue, consider restoring the database from backup. Start the
restored database using SAP IQ 15.3 or 15.4.
4. Start Interactive SQL, connect to the database, and resolve the issue.
5. Log out of the database, but leave it running.
6. In SAP IQ Cockpit, restart the Database Upgrade wizard.

5.2.6.1.2

Resolving Upgrade Task Errors During a Simplex


Upgrade

Upgrade tasks include the stopping and restarting of the database using the new SAP IQ 16.0 server, as well as
altering the database structure.

Context
The Database Upgrade wizard stops the 15.3 or 15.4 database and restarts it using SAP IQ 16.0. Before you
can begin resolving any upgrade task errors, you must restart the database using the 15.x software.

300

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. Note the reason for the wizard termination.
2. Close the Database Upgrade wizard. You need not exit SAP IQ Cockpit.
3. Stop the simplex database.
4. (Optional) Depending on the severity of the issue, consider restoring the database from backup.
5. Restart the database using SAP IQ 15.3 or 15.4. Do not restart the database using SAP IQ Cockpit.
6. Start Interactive SQL, connect to the database, and resolve the issue.
7. Log out of the database, but leave it running.
8. In SAP IQ Cockpit, restart the Database Upgrade wizard.

5.2.7 Viewing or Modifying Simplex Server Properties


View or change general, configuration, and agent information, and options and values of properties for the
selected simplex server.

Prerequisites
Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

View any simplex property page none


Modify any simplex property DBA authority

SAP IQ 16.0

View any simplex property page none


Modify any property on the Configuration or Options property page SERVER OPERA
TOR system privilege
Modify any property on the Request Logging property page one of:

MANAGE PROFILING system privilege

SERVER OPERATOR system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, click IQ Servers.
3. In the right pane, select the simplex, and do one of:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

301

Click the arrow to the right of the name.


Click the Actions button.
4. Select Properties.
5. View or modify the server properties.
Configuration changes may take several minutes to complete.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode..
Page

Property

Description

General (Read-only)

Server name

Name of the server.

Host

Host name where the server is running.

Port

Port where the server is running.

Database

Database name.

Server version

Server version number.

Platform

Platform the server is running on.

Platform version

Version of the operating system where


the server is running.

Type

Single Server.

Server name

Name of the server.

Host

Information about the host used.

Port

Information about the port used.

Database file path

Location of the .db file. For example, /

Configuration

<hostname>/sample/
mytestdb.db
Agent (Read-only)

Cockpit agent registered

Indicates if the SAP IQ Cockpit agent is


registered: true or false.

Cockpit agent authenti


cated

Indicates if the SAP IQ Cockpit agent is


authenticated: true or false.

Cockpit agent status

Status of the SAP IQ Cockpit agent: Run


ning, Stopped, Unknown.

Cockpit agent host

Name of the host machine on which the


SAP IQ Cockpit agent is running.

Cockpit agent port

Port number on the host machine the


SAP IQ Cockpit agent is running. Default
is 9999.

Cockpit agent user

User name for authentication of the


agent. Default is uafadmin or

sccadmin.
Cockpit agent process
owner

302

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

User who owns the agent process.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Cockpit agent home

Home directory of the SAP IQ Cockpit


agent.

Cockpit agent version

Version of the SAP IQ Cockpit agent.

Cockpit agent plugin ver


sion

Agent plugin version of the SAP IQ Cock


pit agent.

IQ directory

Installation directory of the SAP IQ server


with which the SAP IQ Cockpit agent is
associated.

IQ version

Version of the SAP IQ server with which


the SAP IQ Cockpit agent is associated.

Server Properties (Read-only)

Name, value, and description of all server properties.

Request Logging

Enable request logging

Select to enable request logging.

All connections to this


server

Select to log requests from all connec


tions to the server. If not selected:
All connections to the following da
tabase select the name of a data
base to log all connection requests.
The following connections select
the connections to log.

Select type of requests to


log

Options

SAP IQ Cockpit
Administer SAP IQ

Select the type of requests to log:

All

SQL

Include host variables

Procedures

Triggers

Plan

Connections blocked from proceed


ing

Log file name

Specify the path and file name of the log


file.

Maximum log file size

Specify the maximum size of the log file


in KB.

Maximum number of log


files

Specify the maximum number of log files.

Overwrite the request log


file if it already exists

Specify whether to overwrite an existing


log file.

Current time

Current time.

Refresh

Click to update the current time.

Quitting time

Specify a time for the database server to


shut down. Use the same format as the
current time: YYYY-MM-DD
HH:NN:SS.SS

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

303

Page

Property

Description

Disable new connections

Select to prevent other users from con


necting to the database. This may be use
ful for some maintenance operations.

Remember last statement

Retain the last SQL statement for each


connection to a database on the server.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.2.8 Simplex Privilege Summary


A list of the system privileges and object permissions required to complete the various simplex server tasks

Editing the Simplex Server Configuration File


Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Starting or Stopping a Simplex Server


Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

SERVER OPERATOR system privilege

304

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Converting a Simplex to a Multiplex


Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

Generating an Administration Script for a Simplex Server


Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Upgrading a Simplex Server


Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

Not supported

Viewing or Modifying Simplex Server Properties


Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

View any simplex property page none


Modify any simplex property DBA authority

SAP IQ 16.0

View any simplex property page none


Modify any property on the Configuration or Options property page SERVER OPERA
TOR system privilege
Modify any property on the Request Logging property page one of:

SAP IQ Cockpit
Administer SAP IQ

MANAGE PROFILING system privilege

SERVER OPERATOR system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

305

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.3

Multiplex

Change a multiplex configuration, manage the coordinator, secondary and failover nodes, and configure
logical servers, start and stop servers. Statistics let you monitor multiplex availability and performance.

Note
Your login policy governs server access. Use a login ID with access to the SERVER logical server to manage
a multiplex. SERVER logical server context requires the ACCESS SERVER LS system privilege. In the SAP IQ
documentation, see SAP IQ Administration: Multiplex for details on login policies and logical server
configuration.

Related Information
Editing the Multiplex Server Configuration File [page 307]
Starting a Multiplex Server [page 312]
Stopping a Multiplex Server [page 313]
Including an Excluded Secondary Server [page 314]
Excluding a Secondary Server [page 315]
Synchronizing a Secondary Server [page 317]
Adding a Secondary Server [page 318]
Dropping a Secondary Server [page 320]

306

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Generating Administration Scripts for a Multiplex Server [page 321]


Upgrading a Multiplex Server [page 323]
Converting a Simplex to Multiplex [page 326]
Reconfiguring a Multiplex Server [page 329]
Enabling and Disabling an RLV Store [page 330]
Enabling and Disabling High Availability [page 331]
Viewing or Modifying Multiplex Properties [page 332]
Viewing or Modifying Multiplex Server Properties [page 334]
Failover [page 339]
Shared-Nothing Multiplex [page 342]
Multiplex Privilege Summary [page 372]
Create a Multiplex with DQP [page 346]
Converting a Simplex to Multiplex [page 326]
Viewing or Modifying Multiplex Properties [page 332]
Viewing or Modifying Multiplex Server Properties [page 334]

5.3.1 Editing the Multiplex Server Configuration File


Change multiplex server configuration settings including administrative, memory, connection, and debugging
settings.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Context
Editing the configuration file edits the params.cfg file located in the database directory for the server. You
cannot edit a custom configuration file. If params.cfg does not exist, the SAP IQ Cockpit agent automatically
generates it when you adjust any configuration values and click OK or Apply.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

307

Note
The Start Server wizard starts the server using the params.cfg file. You cannot start a server from SAP IQ
Cockpit using a custom configuration file with a different name.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Multiplex Servers.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Edit Configuration File.
5. Adjust the configuration values.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Table 14: Admin
Property

Description

Disable triggers

Select to disable firing of triggers.

Checkpoint timeout period

Maximum length of time, in minutes, that the database


server runs without doing a checkpoint.

Maximum recovery time

Maximum length of time, in minutes, that the database


server takes to recover from system failure.

Start database permission

Permission required to start the database. Valid values


are:

Stop database permission

Load/unload permission

308

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

dba

all

none

Permission required to stop the database. Valid values


are:

dba

all

none

Set LOAD/UNLOAD permission. Valid values are:

dba

all

none

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Utility permission

Set utility commands (e.g., DROP DATABASE) permis


sion. Valid values are:

utility_db

dba

all

none

Table 15: Memory


Property

Description

Display cache sizing statistics

Select to display cache size changes.

Disable automatic cache resizing

Select to enforce a static cache size and disable auto


matic cache resizing.

Initial cache size

Initial memory reserved for caching database pages and


other server information. The size is the amount of mem
ory. Select Kilobytes, Megabytes, Gigabytes. Select % to
specify a percentage either of the physical system mem
ory, or of the maximum non-AWE cache size, whichever is
lower.

Minimum cache size

Minimum cache size as a lower limit to automatic cache


resizing. The size is the amount of memory, in bytes. Se
lect Kilobytes, Megabytes, Gigabytes. Select % to spec
ify a percentage either of the physical system memory, or
of the maximum non-AWE cache size, whichever is lower.

Maximum cache size

Maximum cache size, as a limit to automatic cache


growth. The size is the amount of memory, in bytes. Se
lect Kilobytes, Megabytes, Gigabytes. Select % to spec
ify a percentage either of the physical system memory, or
of the maximum non-AWE cache size, whichever is lower.

Engine thread stack size

Server thread stack size. The size is the amount of mem


ory, in bytes. Select Kilobytes or Megabytes.

Number of engine threads

Number of execution threads used for the IQ (catalog)


system store and connectivity while running with multiple
users. Recommended value is 1.5 times the maximum
number of concurrent connections to the server; mini
mum of 25.

Number of concurrent OS threads

Maximum number of physical processors to use (up to li


censed maximum).

External DLL thread stack size

Stack size for threads running external functions, in


bytes. The default is 32 KB.

Large Memory

Maximum amount of memory, in megabytes, that SAP IQ


can dynamically request from the operating system for
temporary use.

RLV Memory

Amount of memory, in megabytes, available to the RLV


store.

Maximum page size

Maximum page size in KB.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

309

Table 16: Connections


Property

Description

Shut down after last database closes

Select to automatically shut down after the last database


is closed.

Encrypt communication messages

Select to enable packet encryption on the network server.

Enable client-server character translation

Character set translation is enabled by default. There is a


performance cost associated with character set transla
tion. If you can set up an environment such that no char
acter set translation is required, then you do not have to
pay this cost, and your setup is simpler to maintain.

Maximum connections

Maximum number of concurrent user connections.

Communication packet size

Maximum packet size. If you want to send small amounts


of data over the network, keep the default network packet
size small. The default is 512 bytes.

Idle time before disconnect

Amount of client idle time before the connection is termi


nated. If a client runs for the idle timeout period without
submitting a request, the connection is severed.

Liveness timeout

A liveness packet is sent across a client/server to confirm


that a connection is intact. If the client runs for the liven
ess timeout period without detecting a liveness packet,
the communication will be severed. This parameter works
only with network server and TCP/IP communications
protocols. The default is 120 seconds.

Quitting time

Time when the database server is to shut down.

Broadcast level

How the server reacts to broadcasts. (Ignore All) causes


the server not to start up any UDP broadcast listeners.
(dblocate) causes the server to not respond to broad
casts from dblocate, while leaving connection logic unaf
fected.

Table 17: Database


Property

Description

Set database read-only

Select to force all databases that start on the database


server to be read-only. No changes to the databases are
allowed: the database server doesn't modify the database
files or transaction log files.

Truncate xact log after checkpoint

select to cause the transaction log to be truncated after


each checkpoint for all databases.

Table 18: Debug

310

Property

Description

Generate debug information

Select to display debugging information.

Remember last statement on each connection

Select to instruct the database server to capture the most


recently prepared SQL statement for each connection to
a database on the server.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Debug level

Enables request-level logging of operations. Valid values


are:

all

sql

one

Debug output file name

Field to redirect HTTP Web service client procedure de


bug log to a file.

Max output file size

Maximum size of file for server request loggin.

Table 19: Debug


Property

Description

Generate debug information

Select to display debugging information.

Remember last statement on each connection

Select to instruct the database server to capture the most


recently prepared SQL statement for each connection to
a database on the server.

Debug level

Enables request-level logging of operations. Valid values


are:

all

sql

one

Debug output file name

Field to redirect HTTP Web service client procedure de


bug log to a file.

Max output file size

Maximum size of file for server request loggin.

Table 20: Transport layer Security


Property

Description

Use Transport Layer Security

Select to secure communications between a client and


the SAP IQ server or between an SAP IQ client and the da
tabase server. SAP IQ supports only the RSA encryption
algorithm. Check this box to enable other components on
this page.

Identity file

Server's public certificate, private key and, for certificates


that are not self-signed, all the signing certificates, includ
ing the encryption certificate. The password for the certif
icate must be specified with the Identity_Password pa
rameter.

Private key password

Must match the password supplied during encryption cer


tificate creation. There is no default password.

Table 21: Misc


Property

Description

Quiet mode

Select to run Interactive SQL in quiet mode.

Run as a daemon

Select to run the server so that it continues running after


the current user session ends.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

311

Property

Description

Use buffered disk I/O

Select to use buffered disk I/O [Windows, UNIX].

Syslog facility ID

Valid values are:

Output message file name

none

user

daemon

local0,...,local7

Filename for copy of message window. File is truncated


first.
Appends .old to the log file name and starts a new file

Output message file size

with the original name when log reaches the specified


size.
Touch temporary file timer (UNIX servers only)

Causes the server to touch IQ (catalog) system store


temporary files at intervals specified in minutes.

Temporary Files Directory

Directory where temporary files are stored.

Request Log Copies

Number of request log file copies to retain.

Message Log Size

Maximum size of the message log, in megabytes.

Message Log Archives

Number of old message logs maintained by the server.

User specified

Enables advanced users to specify configuration options


not shown in the Config file editor window. Enter multiple
parameters using the space character as a separator.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.3.2 Starting a Multiplex Server


Start a multiplex node.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

SERVER OPERATOR system privilege

312

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

The SAP IQ system is not running.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Multiplex Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Start Server.
5. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.3.3 Stopping a Multiplex Server


Stop a multiplex node.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

SERVER OPERATOR system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

313

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Multiplex Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Stop Server.
5. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.3.4 Including an Excluded Secondary Server


Include a previously excluded secondary server when the excluded server's shutdown period is over.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

All of these authorities:

MULTIPLEX ADMIN authority

BACKUP authority

All of:

MANAGE MULTIPLEX system privilege

SERVER OPERATOR system privilege

BACKUP DATABASE system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
The server you are including has Excluded status.

314

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Multiplex Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Include Server.
5. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.3.5 Excluding a Secondary Server


To save disk space, exclude any secondary server that will be shut down for an extended period.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

315

Context
Servers that are shut down are still included in the multiplex. For each included server, the coordinator uses
disk space to preserve all old versions of IQ objects changed since the server was shut down. Excluding a
server allows the coordinator to ignore it during version cleanup.

Note
You cannot exclude the designated failover server, or the coordinator. Excluding a running server shuts it
down.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Multiplex Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Exclude Server.
5. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

316

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.3.6 Synchronizing a Secondary Server


Synchronization updates a secondary server with respect to the coordinator.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

All of:

SERVER OPERATOR system privileges

BACKUP DATABASE system privileges

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Multiplex Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Synchronize Server.
5. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

317

5.3.7 Adding a Secondary Server


Add a secondary server to the multiplex server.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

All of these authorities:

MULTIPLEX ADMIN authority

SPACE ADMIN authority

BACKUP authority

All of:

SERVER OPERATOR system privilege

MANAGE MULTIPLEX system privilege

MANAGE ANY DBSPACE system privilege

BACKUP DATABASE system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Multiplex Servers.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Add Secondary Server.
5. On the Server Definitions page, click Add and specify:
Property

Description

Server name

Secondary server name.

Host

The host name and port number for the new secondary
server.

318

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Database path

The path to the database file.

SAP IQ Cockpit agent port

Port number for the SAP IQ Cockpit agent.

SAP IQ Cockpit agent user

User ID for the SAP IQ Cockpit agent.

SAP IQ Cockpit agent password

Password for the SAP IQ Cockpit agent.

Public host/port pairs

Host/port pairs in the format

host1:port1,host2:port2, and so on.


Private host/port pairs

Host/port pairs in the format

host1:port1,host2:port2, and so on.


Role

Reader or writer.

Status

Included or excluded.

Local temp dbspace path

Temporary store path.

Local temp dbspace size (MB)

Size, in megabytes, of the temporary IQ store. 0 if you se


lect a raw device.

Local temp dbspace reserve (MB)

The amount of space, in megabytes, to reserve for future


expansion in the temporary IQ store.

Raw device

Indicates a raw disk.

6. Click OK.
The server definition appears on the list and the definition is validated. If the definition contains any error,
a red "X" appears. To determine the cause of the errors, position the mouse over the red "X." Details of the
error appear. To correct the errors, select the definition and click Edit. Correct the errors and click OK; the
definition is revalidated. When the definition is error free, a green check mark appears and the Next button
becomes available.
7. (Optional) Import server definitions from a CSV file.
a. On the Server Definitions page, click Import and specify:
Property

Description

File Name

File name of the CSV file containing delimited list of


server definitions.

Browse

Opens a window where you locate the CSV file.

Field Delimiter

The default field delimiter is a vertical bar "|". If your


CSV file uses a different field delimiter, enter it in this
field.

b. Click OK.
c. (optional) Repeat these steps to import additional server definition CSV files.
8. (Optional) Export your server definitions to a CSV file for safekeeping.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

319

a. On the Server Definitions page, click Export.


b. Specify a field delimiter and click OK. The default field delimiter is a vertical bar "|".

Note
If multiple server definitions are listed, all definitions are exported to the same CSV file.
9. Click Next.
10. On the Execution page, click Execute.
Progress messages appear in the Messages area. The Close button becomes available when the process
is complete.
11. Click Close.
The new secondary server appears on the server list.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.3.8 Dropping a Secondary Server


Remove a secondary server from a multiplex server. You can drop the designated failover server only if it is the
only secondary server in the multiplex.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

All of these authorities:

MULTIPLEX ADMIN authority

SPACE ADMIN authority

BACKUP authority

MANAGE MULTIPLEX system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

320

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Multiplex Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Drop Secondary Node.
5. (Optional) Select Delete server files (database, log, scripts, etc.. This cleans up the database directory
by removing any files that belong to the server being dropped.

Caution
Use caution in selecting the option to delete files. If any of the files to be deleted are shared main files,
data can be lost, and servers might not start correctly afterwards.
6. Click Finish.
7. Click Yes at the confirmation prompt to continue.
8. Click Close.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.3.9 Generating Administration Scripts for a Multiplex


Server
Generate the configuration file and scripts for starting, stopping, and synchronizing a multiplex server.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

321

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Multiplex Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate Administration Scripts.
5. Click Finish to generate the scripts.
6. Click Close.

Results
The following scripts are generated:
Windows

UNIX or Linux

params.cfg

params.cfg

start_server.bat

start_server.sh

stop_server.bat

stop_server.sh

sync_server.bat

sync_server.sh

Note
The stop_server and sync_server scripts require your user name and password. For example:
stop_server.bat myname mypwd

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

322

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.3.10 Upgrading a Multiplex Server


Upgrade an SAP IQ 15.x multiplex server to the current 16.0 version.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

Not supported

SAP IQ server is version 16.0 SP2 or later.


The SAP IQ system is running, registered, and authenticated.
The logged in SAP IQ system is a multiplex.
The SAP IQ system is version 15.3 or 15.4 and is running.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).
Each node in the multiplex environment is running.
All JOIN indexes are dropped.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, click IQ Servers.
3. In the right pane, select an item, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Upgrade Database.
5. Select the system procedure security model to be used by the database after the upgrade and click Next.
For details of the security models, see Managing Privileged System Procedure Execution in the SAP IQ
Reference: Building Blocks, Tables, and Procedures guide.
6. On the Prepare for Upgrade page, click Prepare.
Task status messages appear in the Preparation Status window as each task progresses. Additional
messages appear in the Messages window. If a status of "Failed" is encountered during the preparation
phase, the upgrade process terminates. You must manually fix the underlying cause of the failure outside
SAP IQ Cockpit before the wizard can resume.
7. Click:
Close to terminate the upgrade and exit the Database Upgrade wizard. See Resolving Errors During a
Multiplex Upgrade.
Next to continue.
8. On the Upgrade Database page, click Upgrade.
Again, status messages track the upgrade's progress. If a status of "Failed" is encountered, the upgrade
terminates.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

323

9. Click:
Close to exit the Database Upgrade wizard.
(Optional) Next to verify that the upgraded database is functioning properly.
10. On the Validate Upgrade page, click Validate. This runs the sp_iqcheckdb stored procedure with the
allocation database parameter. Results appear in the scrollable Validate Upgrade window.
11. Click Close.

Related Information
Resolve Errors During a Multiplex Upgrade [page 324]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.3.10.1 Resolve Errors During a Multiplex Upgrade


The Database Upgrade wizard terminates if it fails to complete a prepare or upgrade task. Resolve the error
according to the type of error it is.

Related Information
Resolving JOIN Index Errors During a Multiplex Upgrade [page 324]
Resolving Preparation Errors During a Multiplex Upgrade [page 325]
Resolving Upgrade Task Errors During a Multiplex Upgrade [page 326]

5.3.10.1.1 Resolving JOIN Index Errors During a Multiplex


Upgrade
You must drop JOIN indexes before you can upgrade a multiplex.

Procedure
1. Note the JOIN indexes to be dropped.
2. Exit SAP IQ Cockpit and stop the SAP IQ Cockpit server.
3. Stop the coordinator node. You do not need to be shut down the SAP IQ Cockpit agent on the SAP IQ
server.

324

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

4. Restart the coordinator using SAP IQ 15.3 or 15.4. Specify an explicit path to the coordinator's database
file. To start the coordinator in single-node mode, use the -iqmpx_sn 1 startup flag.
5. Start Interactive SQL, connect to the coordinator, and drop the JOIN indexes.
6. Stop the coordinator and restart it in normal mode, using SAP IQ 15.3 or 15.4. Specify an explicit path to
the coordinator's database file.
7. Start the SAP IQ Cockpit server.
8. Open a browser and log in to SAP IQ Cockpit.
9. Restart the Database Upgrade wizard.

5.3.10.1.2 Resolving Preparation Errors During a Multiplex


Upgrade
Preparation tasks involve the dropping of user connections, indexes (excluding JOIN indexes), and logical
servers.

Context
Caution
These steps pertain to resolving any preparation task errors except JOIN index errors. Do not proceed if the
error involves a JOIN index as it may cause you to no longer be able to manage the multiplex in SAP IQ
Cockpit. See Resolving JOIN Index Errors During a Multiplex Upgrade.

Procedure
1. Note the reason for the wizard termination.
2. Close the Database Upgrade wizard. You need not exit SAP IQ Cockpit.
3. (Optional) Depending on the severity of the issue, consider restoring the coordinator from backup. Start
the restored database using SAP IQ 15.3 or 15.4.
4. Start Interactive SQL, connect to the coordinator, and resolve the issue.
5. Log out of the coordinator, but leave it running.
6. In SAP IQ Cockpit, restart the Database Upgrade wizard.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

325

5.3.10.1.3 Resolving Upgrade Task Errors During a Multiplex


Upgrade
Upgrade tasks include the stopping and restarting of the database using the new SAP IQ 16.0 server, as well as
altering the database structure.

Context
The Database Upgrade wizard stops the 15.3 or 15.4 database and restarts it using SAP IQ 16.0. Before you
can begin resolving any upgrade task errors, you must restart the database using SAP IQ 15.x.

Procedure
1. Note the reason for the wizard termination.
2. Close the Database Upgrade wizard. You need not exit SAP IQ Cockpit.
3. Stop the coordinator node.
4. (Optional) Depending on the severity of the issue, consider restoring the coordinator from backup. Start
the restored database using SAP IQ 15.3 or 15.4.
5. Restart the coordinator using SAP IQ 15.3 or 15.4. Specify an explicit path to the coordinator's database
file.
6. Start Interactive SQL, connect to the coordinator, and resolve the issue.
7. Log out of the coordinator, but leave it running.
8. In SAP IQ Cockpit, restart the Database Upgrade wizard.

5.3.11 Converting a Simplex to Multiplex


Add a secondary server to a simplex to convert it to a multiplex.

Prerequisites
Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

326

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a simplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, click IQ Servers.
3. In the right pane, select the simplex, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Add Secondary Servers.
5. On the Server Definitions page, enter a name in the Multiplex Name field.
6. Click Add and specify:
Property

Description

Server name

Secondary server name.

Host

The host name and port number for the new secondary
server.

Database path

The path to the database file.

SAP IQ Cockpit agent port

Port number for the SAP IQ Cockpit agent.

SAP IQ Cockpit agent user

User ID for the SAP IQ Cockpit agent.

SAP IQ Cockpit agent password

Password for the SAP IQ Cockpit agent.

Public host/port pairs

Host/port pairs in the format

host1:port1,host2:port2, and so on.


Private host/port pairsRole

Host/port pairs in the format

host1:port1,host2:port2, and so on.


Status

Reader or writer.
Included or excluded.

Local temp dbspace path

Temporary store path.

Local temp dbspace size (MB)

Size, in megabytes, of the temporary IQ store. 0 if you se


lect a raw device.

Local temp dbspace reserve (MB)

The amount of space, in megabytes, to reserve for future


expansion in the temporary IQ store.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

327

Property

Description

Raw device

Indicates a raw disk.

7. Click OK.
The server definition appears on the list and the definition is validated. If the definition contains any error,
a red "X" appears. To determine the cause of the errors, position the mouse over the red "X." Details of the
error appear. To correct the errors, select the definition and click Edit. Correct the errors and click OK; the
definition is revalidated. When the definition is error free, a green check mark appears and the Next button
becomes available.
8. (Optional) Import server definitions from a CSV file.
a. On the Server Definitions page, click Import and specify:
Property

Description

File Name

File name of the CSV file containing delimited list of


server definitions.

Browse

Opens a window where you locate the CSV file.

Field Delimiter

The default field delimiter is a vertical bar "|". If your


CSV file uses a different field delimiter, enter it in this
field.

b. Click OK.
c. (optional) Repeat these steps to import additional server definition CSV files.
9. (Optional) Export your server definitions to a CSV file for safekeeping.
a. On the Server Definitions page, click Export.
b. Specify a field delimiter and click OK. The default field delimiter is a vertical bar "|".

Note
If multiple server definitions are listed, all definitions are exported to the same CSV file.
10. Click Next.
11. On the Execution page, click Execute.
Progress messages appear in the Messages area. The Close button becomes available when the process
is complete.
12. Click Close.
13. Log out of SAP IQ Cockpit. Log back in, selecting the SAP IQ multiplex system.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]
Create a Multiplex with DQP [page 346]
Multiplex [page 306]

328

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.3.12 Reconfiguring a Multiplex Server


Change the name, host, port, or database file location for the selected multiplex server.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

Change server name, port or database location all of:

MULTIPLEX ADMIN authority

BACKUP authority

All other changes require DBA authority


SAP IQ 16.0

All of:

SERVER OPERATOR system privilege

BACKUP DATABASE system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Multiplex Servers.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Configuration.
6. Modify the configuration settings:
Property

Description

Server Name

Specify a new name for the server.

Host

Double-click the host name and enter a new host name.

Port

Double-click the port and enter a new port number.

Database file path

Specify a new location for the .db file.

a. (Optional) Click Add to add a new host name and port number.
b. (Optional) Select an existing host and port combination and click Drop to drop it.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

329

7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.3.13 Enabling and Disabling an RLV Store


Enable or disable an RLV store.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

MANAGE MULTIPLEX system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Context
A multiplex can have only one RLV store, and it must reside on the coordinator. Enabling and disabling the RLV
store requires a stop and restart of the coordinator.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, click IQ Servers.
3. In the right pane, select an item, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select General, then click Change beside RLV store node.

330

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

6. Click Yes at the confirmation prompt.

Note
The coordinator automatically shuts down and restarts. This may take a few minutes to complete.
7. Click OK to close the Properties dialog box.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.3.14 Enabling and Disabling High Availability


High availability must be enabled for every server in the multiplex, to implement high availability.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

Requires one of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Multiplex Servers.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select High Availability and then select Enable multiplex high availability in the right
pane.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

331

6. Specify:
Property

Description

Cockpit agent TDS port

Port number of the Tabular Data Stream (TDS) port used


for SAP IQ Cockpit server and agent communication. You
must enable the TDS port to allow high availability. See
Configuring Ports and SAP IQ Cockpit Command.

Cockpit agent username

User name for registering the SAP IQ Cockpit agent for


the multiplex server.

Password

Password for authenticating the SAP IQ Cockpit agent for


the multiplex server.

7. Click OK to update any changes to the database and close the page.

Next Steps
Using Interactive SQL or another SQL command tool, connect to the coordinator and execute:
ALTER LS POLICY root ENABLE_AUTOMATIC_FAILOVER=ON

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.3.15 Viewing or Modifying Multiplex Properties


View or change the properties for the selected multiplex.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

View multiplex properties none


Modify multiplex properties one of:

332

DBA authority

MULTIPLEX ADMIN authority

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Multiplex Privileges Required

SAP IQ 16.0

View multiplex properties none


Modify any property on the Configuration page MANAGE MULTIPLEX system privi
lege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, click IQ Servers.
3. In the right pane, select the multiplex, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the multiplex properties.
Configuration changes may take several minutes to complete.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Server name

Name of the multiplex.

Number of physical nodes (Readonly)

The number of physical nodes in the multiplex.

Coordinator (Read-only)

The name of the coordinator of the multiplex.

Designated Failover Node

The node to be become the coordinator in the event


the current coordinator becomes unavailable. Click
Change to designate a different failover node.

RLV store node

Indicates the existence of the RLV store in th multi


plex. If enabled, the name of the coordinator ap
pears. If not enabled, None appears. Click Change
to enavle the RLV store.

Note
Change is unavailable if the RLV dbspace does
not exist.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

333

Page

Property

Description

State (Read-only)

Current state of the multiplex. Valid states are:

Running

Stopped

Number of logical servers (Readonly)

Number of logical servers in the multiplex.

Number of shared main dbspaces


(Read-only)

Nnumber of shared main dbspaces in the multiplex.

Number of shared temporary DB files Nnumber of shared temporary db files in the multi
(Read-only)
plex.
Logical Servers

See Viewing or Modifying Logical Server Properties [page 385]

Multiplex Servers

See Viewing or Modifying Multiplex Server Properties [page 332]

Shared Main Dbspaces

See Viewing or Modifying Dbspace Properties [page 1057]

Shared Temp Dbspaces

See Viewing or Modifying DB File Properties [page 1071]

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]
Create a Multiplex with DQP [page 346]
Multiplex [page 306]

5.3.16 Viewing or Modifying Multiplex Server Properties


View or change the properties for the selected multiplex server.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

View multiplex properties none


Modify multiplex properties one of:

334

DBA authority

MULTIPLEX ADMIN authority

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Multiplex Privileges Required

SAP IQ 16.0

View multiplex properties none


Modify any property on the Configuration page all of:

SERVER OPERATOR system privilege

BACKUP DATABASE system privilege

MANAGE MULTIPLEX system privilege

Modify any property on the Options property page SERVER OPERATOR system privi
lege
Modify any property on the Request Logging property page one of:

MANAGE PROFILING system privilege

SERVER OPERATOR system privilege

Modify any property on the High Availability property page MANAGE MULTIPLEX
system privilege and the coordinator is running. The SAP IQ Cockpit agent for the mul
tiplex server for which the Properties page is open must also be running.

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Multiplex Servers.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the multiplex node properties.
Configuration changes may take several minutes to complete.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General (Read-only)

Server name

Name of the server.

Host

Host name where the server is running.

Port

Port where the server is running.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

335

Page

Property

Description

Database

Database name.

Server version

Server version number.

Platform

Platform the server is running on.

Platform version
Type

Type of node: Reader, Writer, Coordinator. Click Change


to change the node type. Possible new values are Reader
and Writer.

Note
This option is unavailable on the coordinator node.
Status

Status of node: Include, Excluded.

Designated Failover
Node

True indicates the server is the designated failover node.

RLV store node

(Coordinator only) Status of RLV store. Valid statuses are:


True RLV store enabled.
False RLV store disabled.

Configuration

Server name

Name of the server.

Public Host/Ports

Information about the port used.

Private Host/Ports

Information about private hosts and ports to be used.

Database file path

Location of the .db file. For example, /<hostname>/

sample/mytestdb.db
Agent (Read-only)

Cockpit agent regis


tered

Indicates if the SAP IQ Cockpit agent is registered: true or


false.

Cockpit agent au
thenticated

Indicates if the SAP IQ Cockpit agent is authenticated: true


or false.

Cockpit agent status Status of the SAP IQ Cockpit agent: Running, Stopped, Un
known.

336

Cockpit agent host

Name of the host machine on which the SAP IQ Cockpit


agent is running.

Cockpit agent port

Port number on the host machine the SAP IQ Cockpit


agent is running. Default is 9999.

Cockpit agent user

User name for authentication of the agent. Default is


uafadmin or sccadmin.

Cockpit agent proc


ess owner

User who owns the agent process.

Cockpit agent home

Home directory of the SAP IQ Cockpit agent.

Cockpit agent ver


sion

Version of the SAP IQ Cockpit agent.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Cockpit agent plugin Agent plugin version of the SAP IQ Cockpit agent.
version
IQ directory

Installation directory of the SAP IQ server with which the


SAP IQ Cockpit agent is associated.

IQ version

Version of the SAP IQ server with which the SAP IQ Cock


pit agent is associated.

Server Properties (Read-only)

Name, value, and description of all server properties.

Request Logging

Enable request log


ging

Select to enable request logging.

All connections to
this server

Select to log requests from all connections to the server. If


not selected:
All connections to the following database select the
name of a database to log all connection requests.
The following connections select the connections to
log.

Select type of re
quests to log

Options

Select the type of requests to log:

All

SQL

Include host variables

Procedures

Triggers

Plan

Connections blocked from proceeding

Log file name

Specify the path and file name of the log file.

Maximum log file


size

Specify the maximum size of the log file in KB.

Maximum number
of log files

Specify the maximum number of log files.

Overwrite the re
quest log file if it al
ready exists

Specify whether to overwrite an existing log file.

Current time

Current time.

Refresh

Click to update the current time.

Quitting time

Specify a time for the database server to shut down. Use


the same format as the current time: YYYY-MM-DD
HH:NN:SS.SS

Disable new connec Select to prevent other users from connecting to the data
tions
base. This may be useful for some maintenance opera
tions.

Options

SAP IQ Cockpit
Administer SAP IQ

Remember last
statement

Retain the last SQL statement for each connection to a da


tabase on the server.

Current time

Current time.

Refresh

Click to update the current time.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

337

Page

Property

Description

Quitting time

Specify a time for the database server to shut down. Use


the same format as the current time: YYYY-MM-DD
HH:NN:SS.SS

Disable new connec Select to prevent other users from connecting to the data
tions
base. This may be useful for some maintenance opera
tions.

INC (Read-only)

Remember last
statement

Retain the last SQL statement for each connection to a da


tabase on the server.

Link

Describes the INC connection shown, in the format <sec


ondary node> => <coordinator node>.

Note
This page does not appear for
the coordinator node.
INC state

Current state of internode communication.

Secondary server
name

Name of secondary server.

Heartbeat fre
quency

Interval until the heartbeat thread wakes and cleans up the


connection pool on the secondary node.

Last successful
heartbeat

Date and time of the last successful heartbeat.

Time not responding Elapsed time since the last successful heartbeat.

MIPC (Read-only)

338

Time until timeout

Time remaining until timeout occurs due to no response.

Liveness timeout

Time, in seconds, before a heartbeat on a secondary


server declares the coordinator offline if the heartbeat fails
to reconnect to the coordinator after the first disconnect.
This option also determines how long the coordinator
keeps a global transaction in a suspended state.

Auto exclude time


out

Tmeout for autoexcluding a secondary node on the coordi


nator node. 0 indicates that the nodes are not autoex
cluded. This option does not apply to the designated fail
over node.

Maximum connec
tion pool size

Maximum number of connections allowed in the connec


tion pool on a secondary node. Values can be 1 to 1000.
Default is 10.

Current connection
pool size

Current number of connections in the connection pool.

Number of idle con


nections

Current number of idle connections.

Number of connec
tions in use

Number of connections currently in use.

Refresh

Click to update the current display.

Node

Name of the multiplex node.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

High Availability (For 16.0 SP2 or


later only)

Property

Description

Public Status

Current public status of each node. Status is Not re


sponding if communication with that node fails.

Private Status

Current private status of each node. Status is Not config


ured if there is no private TCP/IP configuration for that
server.

Enable multiplex
high availability

Select to enable high availability for the server. You must


select the option for every server in the multiplex, to imple
ment high availability. Unselect to disable high availability.

Cockpit agent host

Name of the host machine on which the SAP IQ Cockpit


agent is running.

Cockpit agent TDS


port

Port number of the Tabular Data Stream (TDS) port used


for SAP IQ Cockpit server and agent communication. You
must enable the TDS port to allow high availability. See
Configuring Ports and SAP IQ Cockpit Command.

Cockpit agent user


name

User name for registering the SAP IQ Cockpit agent for the
multiplex server.

Password

for authenticating the SAP IQ Cockpit agent for the multi


plex server.

6. Click OK to update any changes to the database and close the page.

Related Information
Configuring Ports [page 226]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]
Create a Multiplex with DQP [page 346]
Multiplex [page 306]

5.3.17 Failover
Manual failover promotes a server to act as the coordinator in the event of coordinator node failure or
maintenance shutdown.

Related Information
Designating the Failover Node [page 340]
Performing Coordinator Node Failover [page 341]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

339

5.3.17.1 Designating the Failover Node


Designate the secondary server that will become the new coordinator in a failover.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
The multiplex coordinator is running.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Context
The designated failover node defaults to the first multiplex server added to the multiplex. If the default is not
acceptable, designate a different failover node.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, click IQ Servers.
3. In the right pane, select an item, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select General, then in the right pane click Change next to the Designated Failover Node
field.
Change and Apply are disabled if the coordinator is not running.
6. Select a failover node.
7. Click Finish.

340

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.3.17.2 Performing Coordinator Node Failover


Manually switch the coordinator role to the designated failover node.

Prerequisites
Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

All of:

MANAGE MULTIPLEX system privilege

SERVER OPERATOR system privilege

BACKUP DATABASE system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
The former coordinator process is not running.
If you plan to drop the old coordinator in the failover, and the coordinator is configured for high availability,
you must disable high availability for that node before starting the wizard. (To disable, see Viewing or
Modifying Multiplex Server Properties.)
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Caution
Performing failover while the former coordinator process is alive may cause database corruption.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, click IQ Servers.
3. In the right pane, select an item, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Failover.
5. Click the Action to take dropdown arrow and select the new role for the currently unavailable coordinator.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

341

Action to take

Description

Drop it

Indicate if the server files are to be deleted when the coordinator is dropped.

Keep it as reader

Indicate if the reader is to be included or excluded (the default) as a secondary server. Default
is to exclude. Indicate whether to perform synchronization after failover.

Keep it as writer

Indicate if the writer is to be included or excluded (the default) as a secondary server. Default is
to exclude. Indicate whether to perform synchronization after failover.

If the coordinator and designated failover node are both down, select a new coordinator and a new failover
node from the eligible nodes. A node that is selected to be a coordinator cannot be the new failover node.
If the new failover node is not running, you see a warning because that node may not be available if the
coordinator fails.
6. Click the Identify the new failover node dropdown arrow and select a new failover node.
7. Click Finish.
8. At the prompt to check whether the new coordinator server is running, click Yes.
9. At the confirmation prompt, if the coordinator is confirmed to not be running, click Yes to perform the
failover.

Related Information
Viewing or Modifying Multiplex Server Properties [page 334]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.3.18 Shared-Nothing Multiplex


Shared-nothing multiplex is a storage architecture for Massively Parallel Processing (MPP) of big data,
wherein primary data is stored on a set of direct-attached storage (DAS) devices spread across a set of
servers, rather than on a shared storage area network (SAN). The SAP IQ database can concurrently support
both shared-disk storage and shared-nothing storage.
Shared nothing storage design is a three-tiered process where you create a shared-nothing logical server, a
DAS dbspace, and DAS dbfiles. DAS dbfile mirroring is recommended for high availability. Mirroring creates
one or more mirror copies of a DAS dbfile on another physical server in the logical server.
Shared-nothing storage and SAN storage use different affinity spaces. Data affinity in shared-nothing storage
uses a persistent DAS dbspace affinity map, local to the logical server, to distribute work across the nodes.
The affinity map represents physical servers present in the DAS dbspace's logical server.
Do not confuse DAS dbspaces with cache dbspaces. The DAS dbspace is a primary data store, whereas the
cache dbspace caches temporary data. The cache dbspace is a high-speed buffer pool extension dbspace
composed of one or more DAS devices attached to a simplex or multiplex node. The cache dbspace caches
copies of locally-used IQ main store read-only pages, reducing access requests to the IQ main store devices.
The cache dbspace, however, is compatible with shared-nothing storage, and can improve data access
performance for any data violating affinity. DAS dbfile data with affinity is never written to the cache dbspace
file.

342

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Design Shared-Nothing Storage [page 343]
Manage Shared-Nothing Storage [page 356]
Troubleshooting Shared-Nothing Multiplexes [page 368]
DAS Dbspaces [page 352]
DAS Dbfiles [page 353]

5.3.18.1 Design Shared-Nothing Storage


Designing shared-nothing storage is a six-step process.

1. Review Sizing and Technical Prerequisites [page 343]


Familiarize yourself with sizing information and prerequisites, such as required internet protocols,
before proceeding.
2. Create a Multiplex with DQP [page 346]
Before you can create DAS dbspaces and DAS dbfiles, you require a properly distributing multiplex.
Ensure your multiplex is configured to allow distributed query processing (DQP) in order to take
advantage of the scale-out properties of shared-nothing multiplex.
3. Creating a Shared-Nothing Logical Server [page 347]
You must create a logical server to group physical servers used in the shared-nothing multiplex. This
document uses the term shared-nothing logical server to mean a logical server designed for a sharednothing multiplex.
4. Enable DQP in the Logical Server Policy [page 348]
The logical server policy ensures consistent DQP settings for all nodes in your shared-nothing logical
server. Enable DQP over the network.
5. Add Logical Servers to the Login Policy [page 349]
Add all shared-nothing logical servers to the login policy. Login policies define the rules that SAP IQ
follows to establish user connections.
6. Creating a DAS Dbspace and DAS Dbfiles [page 350]
Shared-nothing multiplex requires a DAS dbspace and its component DAS dbfiles.

5.3.18.1.1 Review Sizing and Technical Prerequisites


Familiarize yourself with sizing information and prerequisites, such as required internet protocols, before
proceeding.

Parent topic: Design Shared-Nothing Storage [page 343]


Next task: Create a Multiplex with DQP [page 346]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

343

Related Information
Technical Prerequisites [page 344]
Sizing Shared-Nothing Storage [page 345]

5.3.18.1.1.1 Technical Prerequisites


Check network infrastructure prerequisites for a shared-nothing multiplex.

IPv4
Shared-nothing multiplex requires IPv4 and is not compatible with IPv6.
The DAS listener port opens using IPv4 protocols. If your TCPIP has IPv6 only, you will be unable to create DAS
dbspaces. If your TCPIP contains both IPv6 and IPv4, then SAP IQ ignores IPv6 and opens the DAS listener
port using IPv4 protocols.
For information on the DAS listener port, see DAS Internode Communication [page 344].

Firewall and Port Prerequisites


Confirm that your existing firewall rules will not block communication between the physical servers in your
multiplex.
Confirm that the DAS listener port is not blocked. See CREATE DBSPACE Error: "Error opening DBFILE" [page
369] in the Troubleshooting topics for more information.

Related Information
DAS Internode Communication [page 344]

5.3.18.1.1.1.1 DAS Internode Communication


DAS Internode Communication is a high speed extension of Internode Communication (INC), used only for
shared-nothing multiplexes. Primary and mirror nodes in a shared-nothing multiplex communicate over DAS
INC, using the DAS listener port.

344

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.3.18.1.1.2 Sizing Shared-Nothing Storage


Sizing guidelines for a shared-nothing multiplex.
Size of ...

Value

Recommended memory

4GB per core

IQ_SYSTEM_TEMP dbspace

At least twice the physical memory size. If using DQP_Enabled_Over_Net


work, usage depends on working sets and number of concurrent users. Multi
ply largest table size by maximum number of concurrent users to get a start
ing point.

IQ_SHARED_TEMP dbspace

Only required if not using DQP_Enabled_Over_Network. Usage depends on


working sets and number of concurrent users. Multiply largest table size by
maximum number of concurrent users to get a starting point.

Nbit sizing

Use the default sizing unless you have a specific reason for adjusting the set
tings. Changes may improve compression, but may reduce performance.

DAS dbfile disk throughput

100 MB/second/core aggregate bandwidth.

Cluster machines

Number of cores

Speed of...

Mid-size rack units with sufficient SATA, SAS, or PCI-E slots for DAS to
facilitate 100 MB/sec per core.

Balanced configuration: core count is balanced with IO requirement. If IO


capacity is limited, it may be better to use fewer cores to avoid inefficient
parallel processing.

Less than 40 cores/machine. An excessive number of cores per machine may


make it difficult to achieve a balanced configuration.
Value

SAN (Assuming you have chosen DQP using 100 MB/second/core aggregate bandwidth.
IQ_SHARED_TEMP)
High-speed TCP network (Assuming you
have chosen DQP using the network)

Minimum 10GbE. 40 GbE or infiniband recommended.

Number of...

Description

Multiplex nodes

We recommend a multiplex size of four nodes and higher. Multiplexes


smaller than four nodes are unlikely to yield performance benefits.
At the other end of the scale, extremely large multiplexes (dozens of no
des) may be too large for their workload, and may lose efficiency.
For optimal efficiency, size your multiplex between these extremes.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

345

5.3.18.1.2 Create a Multiplex with DQP


Before you can create DAS dbspaces and DAS dbfiles, you require a properly distributing multiplex. Ensure
your multiplex is configured to allow distributed query processing (DQP) in order to take advantage of the
scale-out properties of shared-nothing multiplex.

Context
The SAP IQ manuals Quick Start for UNIX and Linux and Quick Start for Windows contain a tutorial that uses
the iqdemo database to show you how to:
Create a single server and convert it to a multiplex
Set up the multiplex for distributed query processing (DQP)
Review the query plan to ensure the query is distributing correctly
Use the tutorial as a guideline when creating your multiplex with DQP.

Procedure
1. Create a multiplex.
2. Test DQP. Run a distributed query and review the query plan to ensure that query fragments are
distributing as expected. See the tutorial in the manual Quick Start for UNIX and Linux or Quick Start for
Windows.
3. Correct any DQP problems. Your shared-nothing multiplex will fail if queries are not distributing correctly.

Task overview: Design Shared-Nothing Storage [page 343]


Previous: Review Sizing and Technical Prerequisites [page 343]
Next task: Creating a Shared-Nothing Logical Server [page 347]

Related Information
Multiplex [page 306]
Converting a Simplex to Multiplex [page 326]
Viewing or Modifying Multiplex Properties [page 332]
Viewing or Modifying Multiplex Server Properties [page 334]

346

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.3.18.1.3 Creating a Shared-Nothing Logical Server


You must create a logical server to group physical servers used in the shared-nothing multiplex. This
document uses the term shared-nothing logical server to mean a logical server designed for a shared-nothing
multiplex.

Prerequisites
You reviewed sizing and technical prerequisites.
You created a multiplex with DQP.
You have the MANAGE MULTIPLEX system privilege.

Context
The logical server groups one or more physical servers, and limits the scope of DQP processing to members of
the shared-nothing logical server.

Procedure
1. Ensure the logical server is either an OPEN or user-defined logical server. Built-in logical servers other than
OPEN (ALL or SERVER, for example) are not allowed. See Creating a Logical Server [page 379].
2. Assign nodes to the logical server. See Creating a Logical Server [page 379].
3. Ensure the designated failover node is not part of the logical server.

Note
In this release, the coordinator node can be a logical server member only if the coordinator is a logical
member of the logical server, and not a physical member of the logical server. You specify the
coordinator as a logical member using the FOR LOGICAL COORDINATOR checkbox. Check your
memberships to ensure the coordinator node is not a physical member of your logical server.

Task overview: Design Shared-Nothing Storage [page 343]


Previous task: Create a Multiplex with DQP [page 346]
Next task: Enable DQP in the Logical Server Policy [page 348]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

347

Related Information
Shared-Nothing Logical Server Restrictions and Recommendations [page 348]
Creating a Logical Server [page 379]
Creating a Logical Server [page 379]
Viewing or Modifying Logical Server Properties [page 385]
Logical Server Privilege Summary [page 386]

5.3.18.1.3.1 Shared-Nothing Logical Server Restrictions and


Recommendations
Restrictions and recommended best practices for working with logical servers in a shared-nothing multiplex
environment.
Violating these restrictions will result in errors:
Each writer node in the logical server requires a primary DAS dbfile. A logical server writer node without a
primary DAS dbfile causes an OUT OF SPACE error.
Logical server members cannot be shared with other logical servers.
Follow these recommended best practices for optimal performance. Violating a recommendation will not
cause errors:
Selecting FOR LOGICAL COORDINATOR is not recommended.
You can access a DAS dbfile from another logical server within the same DAS dbspace, but there will be a
performance penalty.

5.3.18.1.4 Enable DQP in the Logical Server Policy


The logical server policy ensures consistent DQP settings for all nodes in your shared-nothing logical server.
Enable DQP over the network.

Prerequisites
You reviewed sizing and technical prerequisites.
You created a multiplex with DQP.
You created a shared-nothing logical server.
You have the MANAGE MULTIPLEX system privilege.

348

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Context
This procedure assumes your shared-nothing logical server uses the root logical server policy. If you do not
want to use root, create a user-defined logical server policy. See Creating a Logical Server Policy [page 389].

Procedure
1. Modify the logical server policy. See Viewing or Modifying Logical Server Policy Properties [page 393].
2. Set DQP Enabled to Enable DQP over the network.

Task overview: Design Shared-Nothing Storage [page 343]


Previous task: Creating a Shared-Nothing Logical Server [page 347]
Next task: Add Logical Servers to the Login Policy [page 349]

5.3.18.1.5 Add Logical Servers to the Login Policy


Add all shared-nothing logical servers to the login policy. Login policies define the rules that SAP IQ follows to
establish user connections.

Prerequisites
You reviewed sizing and technical prerequisites.
You created a multiplex with DQP.
You created a shared-nothing logical server.
You enabled DQP in the logical server policy.
You have the MANAGE ANY LOGIN POLICY system privilege.

Context
Do not confuse login policy with logical server policy.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

349

Procedure
1. Alter the login policy. See Viewing or Modifying Login Policy Properties [page 1028].
2. Add all shared-nothing logical servers to the login policy. Modify the Logical Server Assignment depending
on how you have configured your ROOT login policy:
Option

Description

CUSTOM

Allows access to user defined logical server(s), including OPEN.

DEFAULT

Inherits logical server assignment of ROOT login policy.

Task overview: Design Shared-Nothing Storage [page 343]


Previous task: Enable DQP in the Logical Server Policy [page 348]
Next task: Creating a DAS Dbspace and DAS Dbfiles [page 350]

Related Information
Login Policies [page 1018]
Viewing or Modifying Login Policy Properties [page 1028]
Login Policy Privilege Summary [page 1032]

5.3.18.1.6 Creating a DAS Dbspace and DAS Dbfiles


Shared-nothing multiplex requires a DAS dbspace and its component DAS dbfiles.

Prerequisites
Database Version

Dbspace and Dbfile Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).
A shared-nothing logical server exists.
All DAS device file paths are valid, and DAS storage is locally mounted to each node.

350

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

All DAS devices associated with each node are in read-write mode.
You have checked DAS device storage sizes. If you are using mirroring, all mirror devices are as large as
primary storage.
You are familiarize with DAS Dbspace restrictions and recommendations.
You are familiarize with DAS Dbfile restrictions and recommendations.

Procedure
1. Create the DAS Dbspace. See Creating a Dbspace [page 1048]. Make sure you specify parameters specific
to DAS dbspaces:
Property

Description

Logical server

The logical server to associate with the DAS dbspace.

Store

Choose DAS.

2. Determine your high-availability requirements. Mirror copies of DAS dbfiles are recommended.
Property

Description

Enforce write safe (Optional) Provides high availability in a shared-nothing multiplex environment. Indicates that all
DAS dbfiles in this DAS dbspace require writeable mirror copies on other servers.

3. Create DAS dbfiles. See Creating a Dbfile [page 1065]. Make sure you specify these parameters specific to
primary and mirror DAS dbfiles:
Property

Description

Primary server

Specify a writer node where the primary DAS dbfile will be stored.

Mirror name

Applicable only if you selected Enforce write safe for the DAS dbspace. The logical name of the
mirror DAS dbfile.

Path to mirror file


on disk

Applicable only if you selected Enforce write safe for the DAS dbspace. Specify a path to a
writer node. The file path must be visible to the writer node you specified in Path to physical file
on disk.

Mirror server

Applicable only if you selected Enforce write safe for the DAS dbspace. Specify a writer node
where the mirror DAS dbfile will be stored. Cannot be the same writer node where the primary
DAS dbfile is stored.

4. Add additional DAS dbfiles. Each writer node in the logical server requires a primary DAS dbfile.

Task overview: Design Shared-Nothing Storage [page 343]


Previous task: Add Logical Servers to the Login Policy [page 349]

Related Information
DAS Dbspaces [page 352]
DAS Dbfiles [page 353]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

351

Mirroring [page 356]


Registering and Authenticating an SAP IQ Cockpit Agent [page 36]
DAS Dbspace Restrictions and Recommendations [page 352]
DAS Dbfile Restrictions and Recommendations [page 354]
Creating a Dbspace [page 1048]
Creating a Dbfile [page 1065]
Adding a Shared File System DAS Dbfile [page 358]

5.3.18.1.6.1 DAS Dbspaces


A DAS dbspace is an IQ main store dbspace for shared-nothing storage of primary data, where the data is
stored on a set of DAS devices. A DAS dbspace is associated with one logical server, and contains a set of DAS
dbfiles, and their mirror files, within the logical server.
You can create multiple DAS dbspaces for the multiplex. Each DAS dbspace, however, must be associated
with only one shared-nothing logical server. Do not overlap logical serversthe DAS dbspace (and DAS dbfile
members) of the logical server must be excluded from other shared-nothing logical servers. The size and
speed of DAS devices in the DAS dbspace should be nearly identical across all physical servers to ensure even
data distribution, and consistent performance.
Disk striping is compatible with DAS dbspace data distribution. The shared-nothing multiplex distributes data
across all nodes in the multiplex. When disk striping is enabled, the system distributes data within each node
using striping. Disk striping does not extend beyond the node. This is different than disk striping in SAN
storage, where the system stripes pages across all files within a dbspace.
You can partition a table so that parts of the table are in the DAS dbspace, and other parts are in a SAN
dbspace or another DAS dbspace. If a table resides in a DAS dbspace, the table columns are excluded from
affinity-based work allocation. Since a table column may or may not reside in the DAS dbspace, columns are
not affinitized.

Related Information
DAS Dbspace Restrictions and Recommendations [page 352]
Shared-Nothing Multiplex [page 342]
Creating a DAS Dbspace and DAS Dbfiles [page 350]

5.3.18.1.6.1.1 DAS Dbspace Restrictions and


Recommendations
Restrictions exist when using DAS dbspaces in a shared-nothing multiplex environment.
Violating these restrictions will result in errors:

352

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

The DAS dbspace must be associated with only one logical server.
You cannot transfer a DAS dbspace from one logical server to another.
Mirroring must be consistent. The DAS dbspace must contain either:
All DAS dbfiles with mirror copies.
All DAS dbfiles without mirror copies.
If a writer node in the DAS dbspace is changed to a reader node, you can no longer create any objects in
the DAS dbspacean I/O error results. All nodes in the DAS dbspace should be writer nodes.
If ENFORCE WRITE SAFE is enabled, the DAS dbspace is offline and read-only until all primary and mirror
DAS files are available.
If you create a table on a DAS dbspace, and the table is range partitioned on other DAS dbspaces, make
sure the configuration of the DAS dbspace for the range partitioned tables is identical to the configuration
of the original tables DAS dbspace. Affinity exists at the table level. If you use a range partitioned table,
any dbspaces used in the range partitioning should have identical configurations; otherwise the affinity
may not be consistent across the partitions.
Follow these recommended best practices for optimal performance. Violating a recommendation will not
cause errors:
Do not set the default dbspace to a DAS dbspace. You set the default dbspace using the
DEFAULT_DBSPACE database option. Specify explicitly which database objects belong in a DAS dbspace.
Certain objects should be created in a shared dbspace, not the DAS dbspace. Performance may be
suboptimal if you create these objects in a DAS dbspace:
BIT data type column
LOB columns
For optimal performance, place large secondary indexes in shared dbspaces. Small indexes on small
tables in the DAS dbspace should not degrade performance.
For large tables that you plan to place in a DAS dbspace, hash partition the table and choose a hash
partitioning key that improves parallel processing, such as a join column on a fact table. If hash
partitioning creates data skew, let SAP IQ partition the table automatically for you using row range
partitioning instead.
For optimal performance, place large non-partitioned tables in shared dbspaces.
Ensure the DAS dbspace spans all nodes of the logical server.

Related Information
Adding a Shared File System DAS Dbfile [page 358]
Creating a Dbfile [page 1065]
Viewing or Modifying Dbfile Properties [page 1071]

5.3.18.1.6.2 DAS Dbfiles


A DAS dbfile is an IQ main store dbfile that is physically located on a DAS device attached to one server. It can
be a raw partition, or an operating system file. A DAS dbfile is always contained within a DAS dbspace.
DAS dbfile mirroring is optional but recommended. Mirroring ensures high availability in a shared-nothing
environment by creating one or more redundant copies of a DAS dbfile on other physical servers in the logical

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

353

server. When mirroring exists, the original file is known as the primary DAS dbfile; the redundant copy is known
as the mirror DAS dbfile.

Note
In an Enforce write safe dbspace all DAS dbfilesprimary and mirrorsmust be writable. If a DAS dbfile is
read-only, the DAS dbspace is also read-only.
Unlike shared dbspaces where you must specify a logical name for each dbfile you add to a dbspace, logical
names are not required for DAS dbfiles. You need not generate and keep track of logical names. Instead, you
reference DAS dbfiles using the path used when managing the devices.
It is possible to create a DAS dbfile on a shared file system.

Related Information
DAS Dbfile Restrictions and Recommendations [page 354]
DAS Dbfile Backup Considerations [page 355]
Shared File System Files in DAS Dbspaces [page 355]
Shared-Nothing Multiplex [page 342]
Mirroring [page 356]
Creating a DAS Dbspace and DAS Dbfiles [page 350]

5.3.18.1.6.2.1 DAS Dbfile Restrictions and Recommendations


Restrictions and recommended best practices for working with DAS dbfiles in a shared-nothing multiplex
environment.
Violating these restrictions will result in errors:
You must place a primary DAS dbfile on every writer node in the logical server. A logical server writer node
without a primary DAS dbfile causes an OUT OF SPACE error.
Certain loading scenarios can result in a DAS dbfile growing in size. If this occurs, ensure all DAS dbfiles in
the DAS dbspace are equally sized. Failure to do so can cause an OUT OF SPACE error.
Each primary DAS dbfile must be associated with only one node within the logical server.
The primary DAS dbfile and each of its mirror files must be stored on different nodes within the logical
server. You cannot place a mirror copy on another logical server within the same DAS dbspace.
You cannot set the IQ SIZE or IQ RESERVE size of a mirror DAS dbfile.
If a DAS dbfile is added to an Enforce write safe dbspace without a mirror, then the DAS dbfile is read-only
until a mirror is added.
Follow these recommended best practices for optimal performance. Violating a recommendation will not
cause errors:
Do not enter SAN file pathnames when specifying a DAS dbfile path. The system will allow you to enter a
SAN device path as a DAS device path, but it is not recommended.

354

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Do not place a mirror file on the same server as the primary file.
Create DAS dbfiles on all writer nodes of the logical server.

Related Information
Adding a Shared File System DAS Dbfile [page 358]
Creating a Dbfile [page 1065]
Viewing or Modifying Dbfile Properties [page 1071]

5.3.18.1.6.2.2 DAS Dbfile Backup Considerations


Database backup creates a local archive of DAS dbfile data on each physical server in the DAS dbspace. All
servers create their local archives concurrently. Mirror DAS dbfiles are not backed up.
DAS dbspace restore occurs after multiplex recovery, synchronization, and restart. All physical servers
restore their local archives concurrently.
For information on how to perform DAS dbspace backup and restore, see SAP IQ Administration: Backup,
Restore, and Data Recovery.

Related Information
Adding a Shared File System DAS Dbfile [page 358]
Creating a Dbfile [page 1065]
Viewing or Modifying Dbfile Properties [page 1071]

5.3.18.1.6.2.3 Shared File System Files in DAS Dbspaces


DAS dbspaces support both shared-nothing and shared file system files.
You can combine shared file system (SFS) DAS dbfiles, and non-SFS DAS dbfiles, in the same DAS dbspace.
Non-SFS DAS dbfiles reside only on their respective local nodes, and cannot be moved to other nodes in the
DAS dbspace. SFS DAS dbfiles, on the other hand, can be reassigned to other nodes in the DAS dbspace. Both
SFS DAS dbfiles and non-SFS DAS dbfiles use the same type of "hard" affinity mapping, where you use the
SERVER keyword to specify the physical server associated with a DAS dbfile. You can combine SFS and nonSFS DAS dbfiles in your shared-nothing multiplex, which gives you design flexibility.

Note
Currently, SFS is supported for primary DAS dbfiles only.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

355

Related Information
Adding a Shared File System DAS Dbfile [page 358]
Creating a Dbfile [page 1065]
Viewing or Modifying Dbfile Properties [page 1071]
Adding a Shared File System DAS Dbfile [page 358]

5.3.18.1.6.3 Mirroring
Mirroring is an optional feature that creates one or more mirror copies of a DAS dbfile, ensuring high
availability in a shared-nothing multiplex. You can add any number of mirror DAS dbfiles to the DAS dbspace.
A mirror DAS dbfile must be stored on a different physical server than the primary DAS dbfile, but in the same
DAS dbspace and same logical server. You can add a mirror at the same time as creating the primary DAS
dbfile, or you can add a mirror to an existing primary DAS dbfile at a later time.
You can enforce mirroring in the DAS dbspace during dbspace creation. When ENFORCE WRITE SAFE mode is
enabled, all DAS dbfiles in the DAS dbspace must have at least one mirror copy. Each primary and mirror DAS
dbfile must be writable, or else the DAS dbspace is not writabletransactions attempting to write to the DAS
dbspace will roll back. You cannot change the ENFORCE WRITE SAFE mode of an existing DAS dbspace.
The primary DAS dbfile and its mirrors are logically identical. Use the SYSIQDBFILE view to determine if a file is
a primary or mirror file. If the mirror_of_dbfile_id column of SYSIQDBFILE is null, then the file is a
primary DAS dbfile. If is not null, then the file is a mirror file. The value of mirror_of_dbfile_id identifies
the primary DAS dbfile for this mirror.
If you use a raw device as a mirror, the system checks that the mirror DAS dbfile's physical device size is
greater than or equal to the primary DAS dbfile's file IQ SIZE, plus primary file IQ RESERVE size. Any space
beyond these capacities is unusable on the mirror device.
You cannot set the IQ SIZE or IQ RESERVE size of a mirror DAS dbfile.

5.3.18.2 Manage Shared-Nothing Storage


Add and drop DAS dbfiles, add and drop shared-nothing logical server nodes, manage high availability, and
rebalance DAS dbspace storage.

Related Information
Adding a DAS Dbfile [page 357]
Adding a Shared File System DAS Dbfile [page 358]
Dropping a DAS Dbfile [page 360]
Manage DAS Dbfile High Availability [page 361]

356

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Rebalance DAS Dbspace Data [page 365]


Adding a New Node to the Shared-Nothing Logical Server [page 366]
Dropping a Node from the Shared-Nothing Logical Server [page 367]

5.3.18.2.1 Adding a DAS Dbfile


Add a new DAS dbfile to an existing DAS dbspace. If using mirroring, add a new mirror DAS dbfile.

Prerequisites
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).
The coordinator is running.
The dbspace is online.
A logical server exists.
You are familiarize with DAS Dbfile restrictions and recommendations.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click DB Files.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Click New.
5. Select the multiplex resource, multiplex node, and the DAS dbspace.
6. Add DAS dbfile parameters. See Creating a Dbfile [page 1065]. Make sure you specify these parameters
specific to primary (and optional mirror) DAS dbfiles:
Property

Description

Primary server

Specify a writer node where the primary DAS dbfile will be stored.

Shared path

Indicates that the file is a shared file system (SFS) DAS dbfile.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

357

Property

Description

Note
In this release, SFS is supported for primary DAS dbfiles only, not mirror DAS dbfiles.
Mirror name

Applicable only if you selected Enforce write safe for the DAS dbspace. The logical name of the
mirror DAS dbfile.

Path to mirror file


on disk

Applicable only if you selected Enforce write safe for the DAS dbspace. Specify a path to a writer
node. The filepath must be visible to all secondary nodes in the multiplex.

Mirror server

Applicable only if you selected Enforce write safe for the DAS dbspace. Select a server where
the mirror DAS dbfile will be stored. Cannot be the same server where the primary DAS dbfile is
stored.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.3.18.2.2 Adding a Shared File System DAS Dbfile


Add a new shared file system (SFS) DAS dbfile to an existing DAS dbspace.

Prerequisites
Database Version

Dbspace and Dbfile Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).
A shared-nothing logical server exists.
All DAS device file paths are valid, and DAS storage is locally mounted to each node.
All DAS devices associated with each node are in read-write mode.
You have checked DAS device storage sizes. If you are using mirroring, all mirror devices are as large as
primary storage.
You are familiarize with DAS Dbspace restrictions and recommendations.
You are familiarize with DAS Dbfile restrictions and recommendations.

358

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click Dbspaces.

3. In the right pane, select a DAS dbspace and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select DB Files. The DB files properties view displays.
6. In the right pane, click the New button above the DB files properties view.
7. On the Details page, specify:
Property

Description

Logical name

User-defined name of the dbfile.

Path to physical file on disk

Specify the path to a writer node.

Primary server

Specify the writer node where the primary DAS dbfile will be stored.

Shared path

A check mark indicates the file is a shared file system (SFS) DAS dbfile.

Raw device

A check mark indicates the file is on a raw device. Cache dbspaces and DAS
dbspaces normally use raw device files.

File size

(Not available on raw devices.) Current size of the file partition you allocate to
the dbfile in kilobytes (KB), megabytes (MB), gigabytes (GB), or terabytes
(TB). Minimum file size is 8 MB.

Reserve size

(Optional, but not applicable to cache dbspace or DAS dbspace mirror


dbfiles.)
Default is 0. Extra space you allocate to the dbfile in kilobytes (KB), mega
bytes (MB), gigabytes (GB), or terabytes (TB). Default is 0. You can use this
space to increase the file size if the file grows. Guideline: reserve size should
be about 30% of file size.

Mirror name

(For DAS dbfile only if you selected Enforce write safe on DAS dbspace.) The
name of the mirror DAS dbfile.

Path to mirror file on disk

(For DAS dbfile only if you selected Enforce write safe on DAS dbspace.)
Specify a path to a writer node.

Mirror server

(For DAS dbfile only if you selected Enforce write safe on DAS dbspace.)
Specify a writer node where the mirror DAS dbfile will be stored. Cannot be
the same writer node where the primary DAS dbfile is stored.

8. Click OK.

Related Information
DAS Dbfile Backup Considerations [page 355]
Shared File System Files in DAS Dbspaces [page 355]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

359

DAS Dbspace Restrictions and Recommendations [page 352]


DAS Dbfile Restrictions and Recommendations [page 354]
Creating a Dbfile [page 1065]
Viewing or Modifying Dbfile Properties [page 1071]
Shared File System Files in DAS Dbspaces [page 355]

5.3.18.2.3 Dropping a DAS Dbfile


Drop a DAS dbfile to remove it from shared-nothing storage, taking the ENFORCE WRITE SAFE setting of the
DAS dbspace into account.

Prerequisites
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).
The coordinator is running.
The dbspace is online.
You are familiarize with DAS Dbfile restrictions and recommendations.

Procedure
1. If Enforce write safe is specified for the DAS dbspace:
a. Drop all mirror DAS dbfiles for the DAS dbfile to be deleted.
b. If the primary DAS dbfile is not empty, create a copy on another server node.
c. Empty the primary DAS dbfile.
2. If Enforce write safe is not specified for the DAS dbspace:
a. Set the DAS dbfile to read-only.
b. Create a new DAS dbfile on the same node.
c. Rebalance DAS dbspace data.
3. Delete the DAS dbfile from the dbspace.

360

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]
Deleting a Dbfile [page 1068]
Emptying a Dbfile [page 1069]
Rebalance DAS Dbspace Data [page 365]
Creating a DAS Dbspace and DAS Dbfiles [page 350]

5.3.18.2.4 Manage DAS Dbfile High Availability


Mirroring is an optional feature that creates one or more mirror copies of a DAS dbfile, ensuring high
availability in a shared-nothing multiplex. Use mirroring in conjunction with the ENFORCE WRITE SAFE mode
to design your high availability solution.
We recommend placing your mirror DAS dbfile on a different physical server than the primary DAS dbfile, but
in the same DAS dbspace and same logical server. You can add a mirror at the same time you create the
primary DAS dbfile, or you can add a mirror to an existing primary DAS dbfile at a later time. You can add any
number of mirror DAS dbfiles to the DAS dbspace.
By enabling ENFORCE WRITE SAFE mode, you can enforce mirroring in the DAS dbspace either during
dbspace creation, or when altering an existing dbspace. When ENFORCE WRITE SAFE mode is enabled, all
DAS files in the DAS dbspace must have at least one mirror copy. Each primary and mirror DAS dbfile must be
writable, or else the DAS dbspace is not writabletransactions attempting to write to the DAS dbspace will roll
back.
You can create mirror DAS dbfiles even when ENFORCE WRITE SAFE mode is disabled.
If you disable ENFORCE WRITE SAFE mode, you cannot enable it again unless all primary DAS dbfiles and
mirrors are available. If a file is unavailable, an error will occur.
The primary DAS dbfile and its mirrors are logically identical. Use the mirror_of_dbfile_id column of the
SYSIQDBFILE view to see the file identifier of a mirror's primary DAS dbfile.
If you use a raw device as a mirror, the system checks that the mirror DAS dbfile's physical device size is
greater than or equal to the primary DAS dbfile's file IQ SIZE, plus primary file IQ RESERVE size. Any space
beyond these capacities is unusable on the mirror device.

Related Information
Adding a Mirror DAS Dbfile [page 362]
Recovering your Multiplex When a Primary DAS Dbfile Goes Offline [page 363]
Reassigning Shared File System DAS Dbfiles [page 364]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

361

5.3.18.2.4.1 Adding a Mirror DAS Dbfile


Add a mirror file to an existing DAS dbfile.

Prerequisites
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
The dbspace is online.
A logical server exists.
You are familiarize with DAS Dbfile restrictions and recommendations.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click DB Files.

3. In the right pane, select a DAS dbfile, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. On the General Properties page, click Add.
6. Specify properties for the mirror file:
Property

Description

Mirror name

The logical name of the mirror DAS dbfile.

Path to mirror file on


disk

Specify a path to a writer node. The file path must be visible to the writer node you speci
fied in Path to physical file on disk.

Mirror server

Select a server where the mirror DAS dbfile will be stored. Cannot be the same server
where the primary DAS dbfile is stored.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

362

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.3.18.2.4.2 Recovering your Multiplex When a Primary DAS


Dbfile Goes Offline
If a device failure impacts a primary DAS dbfile, take the primary offline and promote a mirror to a primary.

Prerequisites
Database Version

Dbspace and Dbfile Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

A logical server exists.


A DAS dbspace and DAS dbfile exist.
A mirror DAS dbfile exists.

Context
Changing a mirror to primary causes the files to swap roles. The original mirror file becomes the new primary,
and the original primary becomes the new mirror.

Tip
You can promote a mirror to primary even if you're not troubleshooting an error. In such a scenario, you do
not need to disable ENFORCE WRITE SAFE, and do not need to take the primary offline.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. If a device failure impacts the primary DAS dbfile, disable ENFORCE WRITE SAFE mode:
a. In the left pane, expand

IQ Servers

Space Management , and then click Dbspaces.

b. In the right pane, select a DAS dbspace, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
c. Select Properties.
d. Change Enforce write safe to Off.
3. Take the primary DAS dbfile offline.
a. In the left pane, right-click the multiplex server and select Execute SQL.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

363

b. Execute this command:


ALTER DBSPACE <dbspace_name> ALTER FILE <primary_DAS_dbfile_name> OFFLINE;
c. Click Close.
4. In the left pane, expand

IQ Servers

Space Management , and then click DB Files.

5. In the right pane, select a mirror DAS dbfile. Mirrors show "No" in the Primary column. Do one of:
Click the arrow to the right of the name.
Click the Actions button.
6. Select Properties.
7. Click Convert to Primary and confirm when prompted.
8. Click OK.

5.3.18.2.4.3 Reassigning Shared File System DAS Dbfiles


DAS dbfiles on shared file systems automatically provide a degree of high availability. However, if a shared file
system fails, you can reassign primary DAS dbfiles to another writer server.

Prerequisites
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

View any dbfile property page none


Modify any dbfile property One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

View any dbfile property page none


Modify any dbfile property MANAGE ANY DBSPACE system privilege

At least one primary DAS dbfile exists on a shared file system.


If the target server is the multiplex coordinator, the coordinator node must be either a physical or logical
member of the shared-nothing logical server. Physical membership is controlled by the multiplex server
name. Logical membership is controlled by the FOR LOGICAL COORDINATOR checkbox.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. Do one of:

364

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

In the left pane, expand

IQ Servers

Space Management , and then click DB Files.

In the left pane, expand IQ Servers Space Management , and then click Dbspaces. Select a
shared-nothing dbspace and click the arrow to the right of the name. Select Properties > DB Files.
3. In the right pane, select an item, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. Click the Reassign button. Select the writer server you want to reassign the shared DB file to and click OK.
6. Click Apply. Click OK.

5.3.18.2.5 Rebalance DAS Dbspace Data


Rebalance the DAS dbspace when a node is created, dropped or replaced with the same node name, but with a
new configuration. Rebalancing redistributes data across all active servers in the logical server, optimizing
performance.

Prerequisites
Requires EXECUTE privilege on the system procedure.

Procedure
To rebalance, open your Interactive SQL client and call stored procedure sp_iqrebalance. See
sp_iqrebalance Procedure in Reference: Building Blocks.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

365

5.3.18.2.6 Adding a New Node to the Shared-Nothing Logical


Server
When adding a multiplex node to the shared-nothing logical server, you must create new DAS dbfiles, and
rebalance data. If you add multiplex nodes to the logical server without performing these steps, the multiplex
node will not participate in shared-nothing storage.

Prerequisites
Database Version

Dbspace and Dbfile Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. If Enforce write safe is specified for the DAS dbspace:
a. Create DAS dbfiles on the new node.
b. Create new mirror DAS dbfiles on other servers in the logical server.
c. Rebalance DAS dbspace data. See Rebalance DAS Dbspace Data [page 365].
2. If Enforce write safe is not specified for the DAS dbspace:
a. Create DAS dbfiles on the new node.
b. Rebalance DAS dbspace data.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]
Rebalance DAS Dbspace Data [page 365]
Adding a Mirror DAS Dbfile [page 362]
Creating a DAS Dbspace and DAS Dbfiles [page 350]

366

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.3.18.2.7 Dropping a Node from the Shared-Nothing Logical


Server
When dropping a multiplex secondary node from the shared-nothing logical server, you need to consider the
status of the secondary server, and the Enforce write safe setting of the DAS dbspace.

Prerequisites
Database Version

Dbspace and Dbfile Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. If Enforce write safe is specified for the DAS dbspace:
a. Move all DAS dbfiles from this node to another node on the logical server.
b. If the node is stopped, it is ready to be dropped.
If the node is running, ensure one of these conditions is true:
There is no DAS dbfile, or
All DAS dbfiles are empty, or
There are at least two copies of the DAS dbfile in the logical server (a primary and a mirror)
2. If Enforce write safe is not specified for the DAS dbspace:
a. Set all DAS dbfiles on the node to read-only.
b. Rebalance DAS dbspace data.
3. Drop the node.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]
Rebalance DAS Dbspace Data [page 365]
Dropping a Secondary Server [page 320]
Viewing or Modifying Dbfile Properties [page 1071]
Viewing or Modifying Multiplex Properties [page 332]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

367

5.3.18.3 Troubleshooting Shared-Nothing Multiplexes


Solutions to common problems you may encounter when using shared-nothing storage.

Related Information
Offline DAS Dbspace Error when Executing sp_iqcheckdb [page 368]
Offline DAS Dbspace With Unavailable Mirror File [page 369]
CREATE DBSPACE Error: "Error opening DBFILE" [page 369]
CREATE DBSPACE Error: "Could not execute statement" [page 370]
CREATE DBSPACE Error: Coordinator is Not a Member [page 371]
Logical Server: Error When Creating [page 372]
Logical Server: Error When Adding Server [page 372]

5.3.18.3.1 Offline DAS Dbspace Error when Executing


sp_iqcheckdb
Issue:An offline DAS dbspace error occurs when executing sp_iqcheckdb on the database.
The error returned when executing sp_iqcheckdb on the database is similar to:
(DBA)> sp_iqcheckdb 'dropleaks database' Could not execute statement. Operation not
permitted on an OFFLINE DBSpace das_dsp4. -- (slib/s_db.cxx 2827) SQLCODE=-1009173,
ODBC 3 State="HY000" Line 1, column 1 sp_iqcheckdb 'dropleaks database' Press ENTER
to continue...

Solution:
The multiplex coordinator was started in single-node mode (-iqmpx_sn -1).
Starting the coordinator in single-node mode takes all DAS dbspaces OFFLINE. Executing a database-wide
sp_iqcheckdb procedure such as sp_iqcheckdb 'dropleaks database' will cause the above error when
it encounters an OFFLINE DAS dbspace.
If the coordinator was started in single-node mode, do not execute sp_iqcheckdb at the database level.
Instead, execute sp_iqcheckdb on individual servers, or non-DAS (shared) dbspaces.

368

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.3.18.3.2 Offline DAS Dbspace With Unavailable Mirror File


Issue: A mirror DAS dbfile of an ENFORCE WRITE SAFE OFF DAS dbspace is altered to an OFFLINE status and
made unavailable (either by corruption, or by renaming the file). The DAS dbspace becomes OFFLINE after
restarting all multiplex servers.
Normally in an ENFORCE WRITE SAFE OFF DAS dbspace, the dbspace remains ONLINE, even if the offline
mirror file cannot be opened.

Solution:
Drop the corrupted (or renamed) mirror DAS dbfile.
Once you drop the bad mirror DAS dbfile, the DAS dbspace comes back ONLINE.

Related Information
Deleting a Dbfile [page 1068]

5.3.18.3.3 CREATE DBSPACE Error: "Error opening DBFILE"


Issue: An "Error opening DBFILE" message occurs during DAS dbspace creation.
You execute a CREATE DBSPACE statement to create a DAS dbspace, specifying a primary and mirror:
CREATE DBSPACE das_w1w2w3 USING
FILE iqdas1 PATH '/server11/users/machine/devices/s19091461/iqmpx_2/iqdas1.iq'
SIZE 1 GB RESERVE 10 MB SERVER LAMD0_10411_IQ_mpx2
MIRROR iqdas1_mrr PATH '/server11/users/machine/devices/s19091461/iqmpx_3/
iqdas1_mrr.iq' SERVER LAMD0_10411_IQ_mpx3,
FILE iqdas2 PATH '/server11/users/machine/devices/s19091461/iqmpx_3/iqdas2.iq'
SIZE 1 GB RESERVE 10 MB SERVER LAMD0_10411_IQ_mpx3
MIRROR iqdas2_mrr PATH '/server11/users/machine/devices/s19091461/iqmpx_2/
iqdas2_mrr.iq' SERVER LAMD0_10411_IQ_mpx2
ON LOGICAL SERVER Ls_w1w2w3
ENFORCE WRITE SAFE;
An error message displays, stating that the system could not communicate with the mirror DAS dbfile:
Error opening DBFILE 'server11/users/machine/devices/s19091461/iqmpx_3/
iqdas1_mrr.iq'

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

369

Solution:
Ensure the DAS listener port is open, and not blocked by a firewall. Each time the SAP IQ server starts, it
assigns a random free port for the DAS listener.
1. Open the stderr logfile at:
$IQDIR16/logfiles/<servername>.nnnn.stderr
2. Locate the port used by the DAS listener. Verify that the port is free.
Example:
Started DAS listener on 0.0.0.0:55590
3. Telnet to the DAS listener port to see if it is reachable:
telnet <hostname> <port number>
4. If an error occurs, firewall rules may be blocking communication. Firewall rules are often stored in:
/etc/sysconfig/iptables
/etc/sysconfig/ip6tables
/etc/init.d
Add the port number for the DAS listener. Example:
-A INPUT -p tcp -m state --state NEW -m tcp --dport 45035 -j ACCEPT
5. Telnet to the DAS listener port again to verify the port is reachable.

5.3.18.3.4 CREATE DBSPACE Error: "Could not execute


statement"
Issue: A "Could not execute statement" error message occurs during DAS dbspace creation.
You create a shared-nothing logical server and add the coordinator node as a physical member. You execute a
CREATE DBSPACE statement to create a DAS dbspace.
An error message displays, stating that the system could not create the DAS dbspace:
Could not execute statement. Server dsi not a member of current logical server
SQLCODE=-1747, ODBC 3 State="HY000" Line 1, column 1 create dbspace DAS using file
dcn_das_dsp1 path '/work2/dbs/dsi/dcn_das_dsp1.q' size 1000 server dsi mirror
dcn_das_dsp1m path '/work2/dbs/dsi/w1/dcn_das_dsp1m.iq' server dsiw1 on logical
server ls1 enforce write safe

Solution:
The coordinator cannot be a physical member of the shared-nothing logical server. The coordinator must be a
logical member of the shared-nothing logical server in order for the coordinator to be included in a DAS
dbspace on the logical server.
Do not include the coordinator in the DAS dbspace
or,

370

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Include the coordinator in the DAS dbspace by:


Altering the shared-nothing logical server to exclude the physical membership of the coordinator from
the logical server
Adding the coordinator as a logical member of the shared-nothing logical server using the FOR
LOGICAL COORDINATOR clause

5.3.18.3.5 CREATE DBSPACE Error: Coordinator is Not a


Member
Issue: An error states the coordinator node is not a member of the shared-nothing logical server.
Assume you have a two-node multiplex with a coordinator named dbsrv23381_nc14071, and a writer named
nw26365_dbsrv23381.
Assume you create the logical server pm_ls, specifying the coordinator as a physical member:
CREATE LOGICAL SERVER pm_ls MEMBERSHIP(dbsrv23381_nc14071, nw26365_dbsrv23381);
Assume you create a DAS dbspace, specifying the coordinator dbsrv23381_nc14071 in the SERVER clause:
CREATE DBSPACE pm_das USING
FILE pm_f1 PATH '/test/mympx/nc14071/pm_f1.iq' SERVER dbsrv23381_nc14071
MIRROR pm_m1 PATH '/test/mympx/nw26365/pm_m1.iq' SERVER nw26365_dbsrv23381
ON LOGICAL SERVER pm_ls;
An error occurs, stating that coordinator dbsrv23381_nc14071 is not part of logical server pm_ls.

Solution:
Do not specify the coordinator as a physical member of the logical server. When creating the logical server,
use the FOR LOGICAL COORDINATOR clause to add the coordinator node as a logical member of the logical
server.
CREATE LOGICAL SERVER lm_ls MEMBERSHIP(FOR LOGICAL COORDINATOR,
nw26365_dbsrv23381);
Create the DAS dbspace, specifying the coordinator dbsrv23381_nc14071 in the SERVER clause:
CREATE DBSPACE lm_das USING
FILE lm_f1 PATH '/test/mympx/nc14071/lm_f1.iq' SERVER dbsrv23381_nc14071
MIRROR lm_m1 PATH '/test/mympx/nw26365/lm_m1.iq' SERVER nw26365_dbsrv23381
ON LOGICAL SERVER lm_ls;
The DAS dbspace is created without errors.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

371

5.3.18.3.6 Logical Server: Error When Creating


Issue: An error occurs when creating a USER shared-nothing logical server.

Solution:
Creating a USER shared-nothing logical server will fail if the server being added is a member of the built-in
OPEN logical server, and has a DAS dbfile on it. Remove the overlapping memberships.

5.3.18.3.7 Logical Server: Error When Adding Server


Issue: An error occurs when adding a server to a shared-nothing logical server.
Adding a server to a shared-nothing logical server will fail if the server is a member of the built-in OPEN logical
server and has a DAS dbfile on it.

Solution:
Remove the overlapping memberships.

5.3.19 Multiplex Privilege Summary


A list of the system privileges and object permissions required to complete the various multiplex server tasks.

Editing the Multiplex Server Configuration File


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

372

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Starting or Stopping a Multiplex Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

SERVER OPERATOR system privilege

Including a Secondary Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

All of these authorities:

MULTIPLEX ADMIN authority

BACKUP authority

All of:

MANAGE MULTIPLEX system privilege

SERVER OPERATOR system privilege

BACKUP DATABASE system privilege

Excluding a Secondary Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

Synchronizing a Secondary Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

All of:

SAP IQ Cockpit
Administer SAP IQ

SERVER OPERATOR system privileges

BACKUP DATABASE system privileges

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

373

Adding a Secondary Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

All of these authorities:

MULTIPLEX ADMIN authority

SPACE ADMIN authority

BACKUP authority

All of:

SERVER OPERATOR system privilege

MANAGE MULTIPLEX system privilege

MANAGE ANY DBSPACE system privilege

BACKUP DATABASE system privilege

Dropping a Secondary Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

All of these authorities:

MULTIPLEX ADMIN authority

SPACE ADMIN authority

BACKUP authority

MANAGE MULTIPLEX system privilege

Generating an Administration Script for a Multiplex Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Upgrading a Multiplex Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

374

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Multiplex Privileges Required

SAP IQ 16.0

Not supported

Converting a Simplex to a Multiplex


Database Version

Simplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

Reconfiguring a Multiplex Server


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

Change server name, port or database location all of:

MULTIPLEX ADMIN authority

BACKUP authority

All other changes require DBA authority


SAP IQ 16.0

All of:

SERVER OPERATOR system privilege

BACKUP DATABASE system privilege

Enabling and Disabling an RLV Store Node


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

MANAGE MULTIPLEX system privilege

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

375

Enabling and Disabling High Availability


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

Requires one of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

Viewing or Modifying Multiplex Server Properties


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

View multiplex properties none


Modify multiplex properties one of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

View multiplex properties none


Modify any property on the Configuration page all of:

SERVER OPERATOR system privilege

BACKUP DATABASE system privilege

MANAGE MULTIPLEX system privilege

Modify any property on the Options property page SERVER OPERATOR system privi
lege
Modify any property on the Request Logging property page one of:

MANAGE PROFILING system privilege

SERVER OPERATOR system privilege

Modify any property on the High Availability property page MANAGE MULTIPLEX
system privilege and the coordinator is running. The SAP IQ Cockpit agent for the mul
tiplex server for which the Properties page is open must also be running.

376

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Viewing or Modifying Multiplex Properties


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

View multiplex properties none


Modify multiplex properties one of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

View multiplex properties none


Modify any property on the Configuration page MANAGE MULTIPLEX system privi
lege

Designating the Failover Node


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

All of:

MANAGE MULTIPLEX system privilege

SERVER OPERATOR system privilege

BACKUP DATABASE system privilege

Performing Coordinator Node Failover


Database Version

Multiplex Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

377

Adding Permissions on a View or Materialized View to a User or Role [page 916]


Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.4

Logical Servers

A logical server allows you to group a subset of physical hardware resources together as a logical entity that
appears as a single multiplex server, when it is actually one or more servers within the physical multiplex.
In the SAP IQ documentation, see SAP IQ Administration: Multiplex > Logical Servers for logical server
concepts and logical server policy concepts.

Related Information
Creating a Logical Server [page 379]
Deleting a Logical Server [page 380]
Configuring Logical Server Node Membership [page 381]
Altering a Logical Server Assignment [page 382]
Generating DDL Commands for a Logical Server [page 384]
Viewing or Modifying Logical Server Properties [page 385]
Logical Server Privilege Summary [page 386]

378

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.4.1 Creating a Logical Server


Create a logical server to group multiple physical multiplex servers into a single logical entity.

Prerequisites
Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Logical Servers.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Click New.
5. On the Logical Server Name page, specify:
Property

Description

Select the resource on which the logical server will be cre Select a multiplex.
ated.
What do you want to name the new logical server?

Unique name for the logical server.

What would you like the comment to be for this logical


server?

Text field for adding optional comments.

6. On the Logical Server Node Membership page, select the multiplex nodes you want to add to the logical
server. You can select the coordinator node, or secondary nodes.

Note
Select the FOR LOGICAL COORDINATOR checkbox to add the current coordinator as a member. This
ensures the coordinator is always available to the logical server as its member, regardless of which
multiplex node plays the coordinator role. In the SAP IQ documentation, see SAP IQ Administration:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

379

Multiplex > Manage Multiplex Servers > High Availability > Coordinator Failure for information on
failover.
7. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]
Creating a Shared-Nothing Logical Server [page 347]
Logical Server Privilege Summary [page 386]

5.4.2 Deleting a Logical Server


Delete a logical server from the database. Deleting a logical server does not delete its component multiplex
nodes from the database.

Prerequisites
Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Logical Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

380

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Click Yes to confirm deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.4.3 Configuring Logical Server Node Membership


Add or remove multiplex nodes to or from the logical server.

Prerequisites
Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).
Be familiar with the restrictions and rules regarding which coordinator, reader, and writer nodes you can
add to a logical server. In the SAP IQ documentation, see SAP IQ Administration: Multiplex > Manage
Resources Through Logical Servers.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Logical Servers.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

381

Click the Actions button.


4. Select Properties.

Note
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in
read-only mode.
5. In the left pane, click Multiplex Nodes.
6. Select or clear multiplex nodes to modify the logical server configuration.

Note
Select the FOR LOGICAL COORDINATOR node to add the current coordinator as a member. This
ensures the coordinator is always available to the logical server as its member, regardless of which
multiplex node plays the coordinator role. In the SAP IQ documentation, see SAP IQ Administration:
Multiplex > Manage Multiplex Servers > High Availability > Coordinator Failure for information on
failover.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.4.4 Altering a Logical Server Assignment


Add one or more user-defined logical servers to a login policy. A check prevents membership overlap among
the logical servers assigned to the login policy.

Prerequisites
Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

The SAP IQ system is running, registered, and authenticated.

382

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

The logged in SAP IQ system is a multiplex.


You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click Login Policies.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.

Note
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in
read-only mode.
5. (Optional) On the General Properties page, enter a comment for this login policy.
6. In the left pane, click Logical Server Assignment and specify:
Property
Assignment Type

Description
CUSTOM allows access to OPEN and user-defined
logical servers.
DEFAULT inherits the logical server assignment of
the root login policy.
NONE disallows access to all logical servers.
SERVER allows access to any multiplex node. MPX
authority is required to connect.

Modify logical server assignment for a login policy

(CUSTOM only) Select the logical servers to add to the


login policy.

7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

383

5.4.5 Generating DDL Commands for a Logical Server


Display the SQL data description language for creating a new logical server. The SQL code can be a useful
reference and training tool.

Prerequisites
Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Logical Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view opens, showing the SQL code used to create the selected logical servers.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

384

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.4.6 Viewing or Modifying Logical Server Properties


View or change the properties of the multiplex nodes associated with a logical server.

Prerequisites
Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

View logical server properties none


Modify logical server properties one of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

View any logical server property page none


Modify any logical server property MANAGE MULTIPLEX system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Logical Servers.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Readonly)

Name of the logical server.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

385

Page

Multiplex Nodes

Property

Description

LS Policy (Readonly for the coor


dinator and open
nodes)

Available logical server policies.

Comment

Text field for adding optional comments.

Lists the available multiplex nodes. Nodes included in the current logical server are selected.
Change selections to change member nodes.

Note
The properties on
this page are readonly for the Coordi
nator and Open no
des.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]
Creating a Shared-Nothing Logical Server [page 347]
Logical Server Privilege Summary [page 386]

5.4.7 Logical Server Privilege Summary


A list of the system privileges and object permissions required to complete the various logical server tasks

Creating a Logical Server


Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

386

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Deleting a Logical Server


Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

Configuring Logical Server Node Membership


Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

Altering a Logical Server Assignment


Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

MANAGE MULTIPLEX system privilege

Generating DDL Commands for a Logical Server


Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

387

Viewing or Modifying Logical Server Properties


Database Version

Logical Server Privileges Required

SAP IQ 15.3 and 15.4

View logical server properties none


Modify logical server properties one of:

SAP IQ 16.0

DBA authority

MULTIPLEX ADMIN authority

View any logical server property page none


Modify any logical server property MANAGE MULTIPLEX system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]
Creating a Shared-Nothing Logical Server [page 347]
Creating a Logical Server [page 379]
Viewing or Modifying Logical Server Properties [page 385]

388

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.5

Logical Server Policies

A logical server policy is associated with each logical server. Configure logical server policy options to control
behavior of all associated logical servers.

Related Information
Creating a Logical Server Policy [page 389]
Deleting a Logical Server Policy [page 391]
Generating DDL Commands for a Logical Server Policy [page 392]
Viewing or Modifying Logical Server Policy Properties [page 393]
Logical Server Policy Privilege Summary [page 395]

5.5.1 Creating a Logical Server Policy


Control behavior of all logical servers associated with a new logical server policy.

Prerequisites
Database Version

Logical Server Policy Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE MULTIPLEX system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Logical Server Policies.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

389

5. In the Logical Server Policy wizard, specify:


Property

Description

Select the resource on which the logi


cal server policy will be created.

Select a system.

What do you want to name the new


logical server policy?

Specify a unique name for the logical server policy.

What options would you like to set for


this logical server policy?

(Optional)
Login Redirection

ON enables login redirection for logi


cal servers governed by specified
login policy. OFF (the default) disa
bles login redirection.

Temp Data in Shared Temp

When ON (the default), all temporary


table data and eligible scratch data
writes to the shared temporary store
if it is not empty. (If the shared tem
porary store contains no read-write
file, data instead writes to IQ_SYS
TEM_TEMP.) When OFF, all tempo
rary table data and scratch data
writes to the local temporary store.
If you change the value of Temp Data
in Shared Temp, you must restart all
servers that belong to this logical
server. After the restart, each server
that is part of the logical server begins
putting temporary table data in the
appropriate store.

DQP Enabled

Specify DQP disabled, Enable DQP


with shared temp (the default), or En
able DQP over the network.
You can reset this option dynamically.
Distributed query processing (DQP)
over the network keeps data in mem
ory in the temporary cache instead of
in the IQ_SHARED_TEMP dbspace.
The option that provides the best per
formance may vary by query, and de
pends on the performance of the net
work relative to the I/O system.

Redirection Waiters Threshold

390

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Defaults to 5. Positive integer value


that specifies how many connections
can queue before SAP IQ redirects a
connection to this logical server to an
other server.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

What would you like the comment to


be for this logical server?

Text field for adding optional comments.

6. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.5.2 Deleting a Logical Server Policy


Delete a logical server policy from the database.

Prerequisites
Database Version

Logical Server Policy Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE MULTIPLEX system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
No logical servers currently use the policy
The target is not the root logical server policy
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Logical Server Policies.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

391

4. Select Delete
5. Click Yes to confirm deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.5.3 Generating DDL Commands for a Logical Server Policy


Display the SQL data description language for creating one or more logical server policies. The SQL code can
be a useful reference and training tool.

Prerequisites
Database Version

Logical Server Policy Privileges Required

SAP IQ15.3 and 15.4

Not supported

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Logical Server Policies.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view opens, showing the SQL code used to create the selected logical server policies.

392

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.5.4 Viewing or Modifying Logical Server Policy Properties


View or change behavior such as distributed query processing for servers associated with a logical server
policy.

Prerequisites
Database Version

Logical Server Policy Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

View any logical server policy property page none


Modify any logical server policy property MANAGE MULTIPLEX system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.
You are licensed for the Multiplex Grid option (IQ_MPXNODE).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Multiplex Management , and then click Logical Server Policies.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Read-only)

Name of the logical server policy.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

393

Page

Property

Description

Options
Allow Coordinator
As Member (Root
policy only)

When ON (the default), the coordinator can be a member of any user-defined


logical server. OFF prevents the coordinator from being a member of any
user-defined logical servers.

Login Redirection

ON enables login redirection for logical servers governed by specified login


policy. OFF (the default) disables login redirection.

Temp Data in
Shared Temp

When ON (the default), all temporary table data and eligible scratch data
writes to the shared temporary store if it is not empty. (If the shared tempo
rary store contains no read-write file, data instead writes to IQ_SYS
TEM_TEMP.) When OFF, all temporary table data and scratch data writes to
the local temporary store.
If you change the value of Temp Data in Shared Temp, you must restart all
servers that belong to this logical server. After the restart, each server that is
part of the logical server begins putting temporary table data in the appropri
ate store.

DQP Enabled

Specify DQP disabled, Enable DQP with shared temp (the default), or Enable
DQP over the network.
You can reset this option dynamically. Distributed query processing (DQP)
over the network keeps data in memory in the temporary cache instead of in
the IQ_SHARED_TEMP dbspace. The option that provides the best perform
ance may vary by query, and depends on the performance of the network rel
ative to the I/O system.

Redirection Wait
ers Threshold

Defaults to 5. Positive integer value that specifies how many connections can
queue before SAP IQ redirects a connection to this logical server to another
server.

Comment

Text field for adding optional comments.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

394

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.5.5 Logical Server Policy Privilege Summary


A list of the system privileges and object permissions required to complete the various logical server policy
tasks

Creating a Logical Server Policy


Database Version

Logical Server Policy Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE MULTIPLEX system privilege

Deleting a Logical Server Policy


Database Version

Logical Server Policy Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE MULTIPLEX system privilege

Generating DDL Commands for a Logical Server Policy


Database Version

Logical Server Policy Privileges Required

SAP IQ15.3 and 15.4

Not supported

SAP IQ 16.0

None

Viewing or Modifying Logical Server Policy Properties


Database Version

Logical Server Policy Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

View any logical server policy property page none


Modify any logical server policy property MANAGE MULTIPLEX system privilege

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

395

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.6

Remote Servers

A remote server allows you to set up access to remote database objects, using external logins, proxy tables
and remote procedures.
For some systems, including SAP IQ and SQL Anywhere, each data source describes a database; therefore,
you must define a separate remote server definition for each database.

Related Information
Creating a Remote Server [page 397]
Testing a Remote Server Connection [page 399]
Deleting a Remote Server [page 400]
Generating Remote Server DDL Commands [page 401]
Viewing or Modifying Remote Server Properties [page 402]
Remote Server Privilege Summary [page 404]
Creating a Remote Procedure [page 1157]
Creating a Proxy Table [page 453]
Creating an External Login [page 406]

396

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.6.1 Creating a Remote Server


Before you can map remote objects to a local proxy table, you must define the remote server where the
remote object is located.

Prerequisites
Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

SERVER OPERATOR system privilege

The SAP IQ system is running, registered, and authenticated.

Context
For some systems, including SAP IQ and SQL Anywhere, each data source describes a database; therefore,
you must define a separate remote server definition for each database.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Networks , and then click Remote Servers.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Name and Type page, specify:
Property

Description

Resource

The local server to contain the remote server definition.


(The system from which you want to access the database
housed on the remote server).

Remote server name

The local name used for connecting to the server where


the remote database is located.

Type of remote server

Type of server where the remote database is located.

6. On the Connection Details page, specify:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

397

Property

Description

Connection Type

Select Open Database Connectivity (ODBC) or Java Data


base Connectivity (JDBC). The Remote Server Type you
specify may limit the connection type. The only server
types allowing a JDBC connection are SAP IQ, SAP SQL
Anywhere and SAP Adaptive Server Enterprise servers.
However, for IQ server versions 16.0 and above, JDBC is
not supported.

Connection Information

The data source name (ODBC) or host:port/db con


nection string (JDBC).

Note
The Remote Server Type you specified on the Name and Type page may limit the connection type. The
only server types allowing a JDBC connection are SAP IQ, SQL Anywhere and Adaptive Server servers.
However, for IQ server versions 16.0 and above, JDBC is not supported.
7. On the Read-Only Option page, select the check-box if you want to define the remote server as a read-only
data source.
8. On the External Login page, select the check-box if you want to enter an alternate login name and
password for your user ID (recommended).
Property

Description

Login name

The alternate user ID to be used on the remote server.

Password

The password for validating the alternate user ID on the remote server. The password is
optional, but recommended.

Confirm password

If you enter a password, re-type it as verification.

Note
You can create external logins for other locally defined users with the Create External Login wizard.
9. Click Finish.

Related Information
Creating a Remote Procedure [page 1157]
Creating a Proxy Table [page 453]
Creating an External Login [page 406]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

398

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.6.2 Testing a Remote Server Connection


Test the physical connection to one or more remote servers.

Prerequisites
Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Networks , and then click Remote Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Test Connection.

Results
The physical connection to each selected remote server is tested, and connection status displays.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

399

5.6.3 Deleting a Remote Server


Remove one or more existing Remote Server definitions, along with all associated proxy tables, remote
procedures and external login definitions.

Prerequisites
Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

SERVER OPERATOR system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Networks , and then click Remote Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Click Yes to confirm deletion.

Results

Note
The remote server definition is deleted, along with all associated proxy tables, remote procedures and
external login definitions.

400

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.6.4 Generating Remote Server DDL Commands


Generate data description language for one or more remote servers. The DDL can be a useful resource and
training tool.

Prerequisites
Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Networks , and then click Remote Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view opens, showing the SQL code used to create the selected remote server.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

401

5.6.5 Viewing or Modifying Remote Server Properties


Display or change the properties of the selected remote server definition.

Prerequisites
Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

View remote server properties none


Modify remote server properties DBA authority

SAP IQ 16.0

View any remote server property page none


Modify any remote server property SERVER OPERATOR system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Networks , and then click Remote Servers.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the server properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.

402

Page

Property

Description

General

Name (Read-only)

Local name used for connecting to the server where the remote data
base is located, as specified when the remote server was created.

Read-Only (Read-only)

Indicates whether the remote server is a read-only data source, as


specified when the remote server was created.

Server Type

Type of server where the remote database is located.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Connection Type

Select Open Database Connectivity (ODBC) or Java Database Connec


tivity (JDBC). The Remote Server Type you specify may limit the con
nection type. The only server types allowing a JDBC connection are
SAP IQ, SAP SQL Anywhere and SAP Adaptive Server Enterprise
servers. However, for IQ server versions 16.0 and above, JDBC is not
supported.

Connection Information

Click the Test Connection to validate the connection information.

Text Connection
Proxy tables

Remote proce
dures

External logins

Name

Local name used for the object on the remote database

Owner

ID of the user who owns the object.

Location

Server on which the remote database resides.

Comment

Text field for adding optional comments.

Name

Local name used for the procedure on the remote database.

Owner

ID of the user who owns the procedure.

Comment

Text field for adding optional comments.

User

Local user for whom the alternate login name and password (external
login) was created

Login Name

The alternate user ID to be used on the remote server.

6. Click OK to update any changes to the database and close the page.

Related Information
Creating a Remote Procedure [page 1157]
Creating a Proxy Table [page 453]
Creating an External Login [page 406]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

403

5.6.6 Remote Server Privilege Summary


A list of the system privileges and object permissions required to complete the various remote server tasks

Creating a Remote Server


Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

SERVER OPERATOR system privilege

Testing a Remote Server Connection


Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Deleting a Remote Server


Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

SERVER OPERATOR system privilege

Generating Remote Server DDL Commands


Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

404

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Viewing or Modifying Remote Server Properties


Database Version

Remote Server Privileges Required

SAP IQ 15.3 and 15.4

View remote server properties none


Modify remote server properties DBA authority

SAP IQ 16.0

View any remote server property page none


Modify any remote server property SERVER OPERATOR system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.7

External Logins

External logins are alternate login names and passwords to be used when communicating with a remote server
(in order to set up access to remote database objects).
By default, IQ uses the names and passwords of its clients whenever it connects to a remote server or
directory access server on behalf of those clients. However, you can override this default by creating external
logins.

Note
You must define a remote server before you can create an external login.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

405

When you create a remote server definition, you have the option of creating an external login for your user ID.
Using the Create External Login wizard, you can create external logins for other user IDs

Related Information
Creating an External Login [page 406]
Deleting an External Login [page 408]
Generating External Login DDL Commands [page 409]
Viewing External Login Properties [page 410]
External Login Privilege Summary [page 411]
Creating a Proxy Table [page 453]
Creating a Remote Server [page 397]
Creating a Remote Procedure [page 1157]

5.7.1 Creating an External Login


Define an alternate login name and password by specifying the remote server to create an external login for,
and the local user the external login applies to.

Prerequisites
Database Version

External Login Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

MANAGE ANY USER system privilege

The SAP IQ system is running, registered, and authenticated. (The system on which you are creating the
external login).

Note
You must define a remote server before you can create an external login.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.

406

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

2. In the left pane, expand

IQ Servers

Networks , and then click External Login.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Server and User page, specify:
Property

Description

Select a resource on which the external login will be cre


ated

Select a system.

To which remote server do you want to create an external


login?

Select the remote server on which the external login will


be used to connect to.

For which user do you want to create an external login?

Select the local user for whom the alternate login name
and password (external login) will be created.

6. On the External Login page, specify:


Property

Description

Login name

The user ID to be used on the remote server by the previ


ously selected locally defined user.

Password

The password for validating the user ID on the remote


server. If the user has no password on the remote server,
leave it blank.

Confirm password

If you enter a password, re-type it as verification.

7. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

407

5.7.2 Deleting an External Login


Delete one or more external login definitions.

Prerequisites
Database Version

External Login Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

MANAGE ANY USER system privilege

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Networks , and then click External Login.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Click Yes to confirm deletion.

Related Information
Creating a Remote Procedure [page 1157]
Creating a Proxy Table [page 453]
Creating an External Login [page 406]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

408

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.7.3 Generating External Login DDL Commands


Generate data description language for one or more external login. The DDL can be a useful resource and
training tool.

Prerequisites
Database Version

External Login Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Networks , and then click External Login.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view opens, showing the SQL code used to create the selected external login(s).

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

409

5.7.4 Viewing External Login Properties


Display the properties of an existing external login definition.

Prerequisites
Database Version

External Login Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Networks , and then click External Login.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View the properties of the external login.
Page

Property

Description

General

Remote Server

Local name used for connecting to the server where the remote database is
located.

Local User Name

Defined local user for whom the alternate login name and password (exter
nal login) was created

Remote Login
Name

The user ID used on the remote server by the local user.

(Read-only)

6. Click OK.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

410

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.7.5 External Login Privilege Summary


A list of the system privileges and object permissions required to complete the various external login tasks

Creating an External Login


Database Version

External Login Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

MANAGE ANY USER system privilege

Deleting an External Login


Database Version

External Login Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

MANAGE ANY USER system privilege

Generating External Login DDL Commands


Database Version

External Login Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing External Login Properties


Database Version

External Login Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

411

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.8

Databases

Create a database and view database options and properties.

Note
An SAP IQ server cannot have multiple databases. Attempting to manage, monitor, or administer an SAP IQ
server connected to multiple databases may cause unexpected results.

Related Information
Creating a Database [page 413]
Creating a Database Using a CSV File [page 416]
Setting Database Options [page 418]
Configuring Point-in-Time Recovery Options [page 419]
Purging Backup History [page 421]
Viewing or Modifying Database Properties [page 422]
Database Privilege Summary [page 425]

412

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.8.1 Creating a Database


Use the Create Databases wizard to create an SAP IQ database.

Prerequisites
Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

DBA authority. The account under which the server is running must have write permis
sions on the directories where files are created.

SAP IQ 16.0

The account under which the server is running must have write permissions on the di
rectories where files are created. No other system privilege is required.

You are logged in to an SAP IQ server which is running, registered, and authenticated.

Note
For new SAP IQ installations, where no SAP IQ discoverable server exists on the SAP IQ Cockpit host,
log in to the SAP IQ utility server. See SAP IQ Utility Server.
The SAP IQ Cockpit server or agent is running on the new database host.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Databases.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Database Definitions page, click Add, and specify:
Property

Description

Host

The name of the host system where the new database is


created.

Cockpit agent port

Port number on the host machine the SAP IQ Cockpit


agent is running. Default is 9999.

Cockpit agent user

User name for authentication of the agent. Default is


uafadmin or sccadmin.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

413

Property

Description

Cockpit agent password

Password for the SAP IQ Cockpit agent user. Default is:


15.3 and 15.4 no passwordleave the field blank.
16.0 Sybase4me

Utility server user

User ID for the utility database. Default is DBA.

Utility server password

Password for the utility database. Default is sql.

IQ Server Name

Name of the IQ server to be created.

IQ Server Port

Port number for the new IQ server.

IQ user

User ID for the new IQ server.

IQ password

User password for the IQ user.

Database path

Location of the .db file. For example, /<hostname>/

sample/mytestdb.db
IQ page size

Page size of the database, in kilobytes. If you do not make


a selection, the application chooses a page size. Default is
128.

IQ (catalog) system store page size

Database page size for the IQ (catalog) system store, in


kilobytes. If you do not make a selection, the application
automatically chooses a page size. Default is 4.

IQ main store dbspace path

Path to the IQ main store dbspace physical file on disk.


For example, /<hostname>/sample/sample/

mytestdb.iq.
For a multiplex, all files in IQ_SYSTEM_MAIN and shared
user dbspaces must be accessible in exactly the same
way using the same file paths from all nodes. IQ main
dbspace paths are shared and temporary and .iqmsg
dbspace paths are only valid on the owning node.
IQ main (IQ main store) dbspace size (MB)

(Disabled if Raw Device is selected.) The amount of


space, in megabytes, for the IQ main store dbspace.
Specify at least 100. Default is 1000

IQ main store dbspace reserve (MB)

(Disabled if Raw Device is selected.) The amount of


space, in megabytes, to reserve for future expansion in
the IQ main store. Default is 300.

Raw device (IQ main store dbspace)

Indicates a raw disk. Default is selected.

Local temporary dbspace path

Path to the IQ temporary store physical file on disk. For


example: /<hostname>/sample/sample/

mytestdb.iqtmp.

414

Local temporary dbspace size (MB)

(Disabled if Raw Device is selected.) Size, in megabytes,


for the IQ temporary store. Default is 1000.

Local temporary dbspace reserve (MB)

The amount of space, in megabytes, to reserve for future


expansion in the IQ temporary store. Default is 300.

Raw device (Local temp dbspace)

Indicates a raw disk. Default is selected.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Transaction log

File name of the IQ transaction log that records changes


to the database. If you leave this field blank, the applica
tion automatically assigns a log name:
<database_name>.log.

Transaction mirror log

File name of the copy of the default transaction log,


stored on another device, for additional security. The de
fault mirror log name is <database_name>.mlg

CHAR collation

Click Select to open the Select CHAR Collation dialog box.


(Select is disabled until all required fields are filled.) In the
diaolog box, select the CHAR collation sequence used by
the database to perform alphanumeric sorting. The de
fault is ISO_BINENG. If you select UCA (Unicode Collation
Algorithm), you are prompted to specify how the data
base should treat accents.

NCHAR collation

Click Select to open the Select NCHAR Collation dialog


box. (Select is disabled until all required fields are filled.)
In the diaolog box, select the NCHAR collation sequence
used by the database to perform alphanumeric sorting on
NCHAR data. The default is UCA. If you select UCA (Uni
code Collation Algorithm) you are prompted to specify
how the database should treat accents.

6. (Optional) Click Settings and specify:


Property

Description

Encryption

Specify whether to create the database with no encryp


tion, simple encryption or strong encryption. Default is
Simple encryption.

Algorithm

(Available for Strong encryption only) Specify an encryp


tion algorithm. Default is AES-128

Encryption Key

If you select strong encryption, enter and confirm an en


cryption key.

Case Insensitivity

Specify whether the database should have case insensi


tivity when comparing strings. Default is enabled.

Create Views

Specify whether the database should create SYSCOL


UMN and SYSINDEXES views. Default is enabled.

Ignore Trailing Blanks

Specify whether the database should ignore blank spaces


at the end of strings. Default is selected. Default is not dis
abled.

Include Checksum

Specify whether the database should include checksum


with each database page. Default is disabled.

SQL Anywhere Defaults

Select to have the options default to SQL Anywhere set


tings.

Emulate ASE

Select to have the options default to Adaptive Server En


terprise settings.

7. Click OK to close the Options view.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

415

8. Click OK to close the Add Database Definition view.


The new database appears in the Data Definitions pane. If your database definition values are valid, a
check mark appears in the Validation column. If any input for the database definition is invalid, an X
appears. Hover the mouse over the X to see error information. To correct the error, select the applicable
database definition and click Edit. Once the database definition is deemed valid (check mark appears),
Next becomes available.
9. (Optional) Export your existing database definitions to a .CSV file for safekeeping or future import. On the
Database Definitions page of the Create Database wizard, click Export, specify the field delimiter, and click
OK.
10. On the Execution page, click Execute to start the database creation process.
11. Click Close.

Next Steps
Run the COCKPIT_MONITOR script to create the SAP IQ Cockpit COCKPIT_ADMIN and
COCKPIT_MONITOR roles.
Create the technical user account for the new database.
If using the SAP IQ utility server to create the new server, stop the utility server.

Related Information
Logging On to the SAP IQ Utility Server [page 35]
COCKPIT_MONITOR Script [page 30]
Technical User [page 38]
SAP IQ Utility Server [page 34]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.8.2 Creating a Database Using a CSV File


Use a CSV file in the Create Databases wizard to create an SAP IQ database on the same host as the SAP IQ
Cockpit agent.

Prerequisites
Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

DBA authority. The account under which the server is running must have write permis
sions on the directories where files are created.

416

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Database Privileges Required

SAP IQ 16.0

The account under which the server is running must have write permissions on the di
rectories where files are created. No other system privilege is required.

A CSV file containing the required database values exists.


You are logged in to an SAP IQ server which is running, registered, and authenticated.

Note
For new SAP IQ installations, where no SAP IQ discoverable server exists on the SAP IQ Cockpit host,
log in to the SAP IQ utility server. See SAP IQ Utility Server.
The SAP IQ Cockpit server or agent is running on the new database host.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Databases.

3. In the left pane, do one of: Databases and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Database Definitions page, click Import.
6. Specify the .CSV file and path, and the file field delimiter, and click OK.
The new database appears in the Data Definitions pane. If your database definition values are valid, a
check mark appears in the Validation column. If any input for the database definition is invalid, an X
appears. Hover the mouse over the X to see error information. To correct the error, select the applicable
database definition and click Edit. Once the database definition is deemed valid (check mark appears),
Next becomes available. See Creating a Database for details on the individual properties.
7. On the Execution page, click Execute to start the database creation process.
8. Click Close.

Next Steps
Run the COCKPIT_MONITOR script to create the SAP IQ Cockpit COCKPIT_ADMIN and
COCKPIT_MONITOR roles.
Create the technical user account for the new database.
If using the SAP IQ utility server to create the new server, stop the utility server.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

417

Related Information
Logging On to the SAP IQ Utility Server [page 35]
COCKPIT_MONITOR Script [page 30]
Technical User [page 38]
SAP IQ Utility Server [page 34]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.8.3 Setting Database Options


Adjust the configurable settings of a database to change the way the database behaves or performs.

Prerequisites
Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

View database options only none


Modify database options DBA authority

SAP IQ 16.0

View database options only none


Modify database options Depending on the option being modified, one of:

SET ANY PUBLIC OPTION system privilege

SET ANY SECURITY OPTION system privilege

SET ANY SYSTEM OPTION system privilege

The SAP IQ system is running, registered, and authenticated.

Context
Some database options can only be set at one level, be it database (PUBLIC) or user, while others can be set at
either level.
For database options that can be set at either level, when set at the user level, the setting overrides the current
value for that user only. When set it at the database level, the value becomes the new default, and is applied to
any existing users who have not had the option overridden at the user level.
For information on the level at which each option can be set and the system privilege required, in the SAP IQ
16.x documentation, see the alphabetical list of Database options in SAP IQ Reference: Statements and
Options.

418

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Databases.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Options.
5. Click in the Setting column to modify an option value.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.8.4 Configuring Point-in-Time Recovery Options


Enable or disable point-in-time (PITR) recovery logging and define available options.

Prerequisites
Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Set PITR database options SET ANY SYSTEM OPTION system privilege
Set PITR logging options MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Databases.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

419

Click the Actions button.


4. Select PITR Configuration.
5. Configure the PITR settings, as needed:
Property

Description

IQ Point-In-Time Recovery Logging

Select to enable or disable logging. Valid settings are ON and OFF


(default). (IQ_POINT_IN_TIME_RECOVERY_LOGGING)

IQ Log Backup Interval

The frequency of the PITR log backup in minutes. Minimum interval is


5 minutes. Set to zero (0) or leave empty to disable PITR log backup
interval. Default is disabled. (IQ_LOG_BACKUP_INTERVAL)

IQ Log Maximum Size

The maximum size of the log file in megabytes.

IQ PITR Log Directory

A fully qualified path to the SAP IQ PITR log file directory. Default is
empty which places the PITR log file in the same directory as the da
tabase.

IQ PITR Log Prefix

A log file prefix for the PITR log file. Default prefix is the name of the
database.

6. Click OK to update any changes to the database and close the page.

Results
Note
The PITR database options can also be set when configuring any database option. See Setting Database
Options.
The PITR log settings can also be set under Space Management. See Configuring Point-in-Time
Recovery Logging Options.

Related Information
Configuring Point-in-Time Recovery Logging Options [page 1055]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

420

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.8.5 Purging Backup History


Remove select backup events from the backup history log file, including all related details.

Prerequisites
Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

BACKUP DATABASE system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Databases.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Purge Backup History.
5. Select one or more backup events to be purged and click Purge.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click OK to confirm purge.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

421

5.8.6 Viewing or Modifying Database Properties


View editable and non-editable properties for the database.

Prerequisites
Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

View database license management property page EXECUTE permission on the

sp_iqlmconfig system procedure to display the content of the page.


View any other database property page none
Modify the following properties on the Settings page:

Include SQL statement information option EXECUTE permission on the

sa_server_option system procedure to modify this setting.

Collect Information about deadlocks option DBA authority

Clear Deadlock Information Now option DBA authority

Modify any other database property DBA authority


SAP IQ 16.0

View database license management property page EXECUTE permission on the

sp_iqlmconfig system procedure along with the SERVER OPERATOR system priv
ilege to display the content of the page.
View any other database property page none
Modify the following properties on the Settings page:

Refresh button SERVER OPERATOR or ALTER DATABASE system privilege

Collect Information about deadlocks option SET ANY SYSTEM OPTION system
privilege

Include SQL statement information option EXECUTE permission on the

sa_server_option system procedure along with the SERVER OPERATOR


system privilege to modify this setting.

Clear Deadlock Information Now option SERVER OPERATOR system privilege

Modify properties on the license management page SERVER OPERATOR system


privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

422

IQ Servers

Schema Objects , and then click Databases.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Database

Name of the database.

ID

A unique number assigned by the server to each database that is started on


it. The ID number lets you distinguish between databases running on the
same server.

Capability ID

Capability bits enabled for the database. You can view a list of the capabili
ties that are enabled for the database on the Extended Information tab of the
Database property sheet.

Java location

Path to the JRE executable file.

(Read-only)

Java main user ID Main Java user ID.


Page size

Page size of the database, in bytes.

Database file

Root database file for the database.

Log file

Name and location of the transaction log file for the database.

Mirror log file

Name and location of the mirror log file for the database.

Temporary file

Location of the temporary database file.

Current user

User ID of the user connected to the database.

Connection ID

Connection ID for the database connection from SAP IQ Cockpit.

Connection name Connection name for the user connected to this database. Naming your con
nections allows multiple connections to the same database, or multiple con
nections to the same or different database server, to be easily identified.
Communication
link

Type of communications link used by the user's connection. If the connec


tion is between a client and network server, the link type represents the net
work protocol being used.

Total connections Total number of current connections to the database from all users, includ
ing the SAP IQ Cockpit connection.
System proce
dure security
model (16.0 only)

Security model under which privileged system procedures execute. Valid val
ues are:
Invoker all privileged system procedures run with the privileges of the
person executing the procedure (invoker).
Definer all pre-16.0 privileged system procedures run with the privileges
of the owner of the procedure (definer).All privileged system procedures
introduced in 16.0 (or later) run with the privileges of the invoker.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

423

Page

Property

Description

Settings

Encryption type

Type of database encryption: Simple or AES. If encryption is not supported in


the database, the value is None.

Encryption scope

Scope of the encryption.

Ignore trailing
blanks

Database ignores trailing blanks in comparisons.

CHAR collation
sequence

Set of separators for the collation sequence of CHAR values.

CHAR collation
character set en
coding

Character set used for CHAR values.

(Read-only)

CHAR case sensi CHAR values in the database are case-sensitive. This property applies to the
tivity
data in the database, and to passwords, but not to table names, column
names, and other identifiers.
NCHAR collation
sequence

Separators for the collation sequence of NCHAR values.

NCHAR collation
character set en
coding

Character set used for NCHAR values.

NCHAR case sen NCHAR values in the database are case-sensitive. This property applies to
sitivity
the data in the database, and to passwords, but not to table names, column
names, and other identifiers.
Checkpoint ur
gency(%)

Time elapsed since the last checkpoint as a percentage of the checkpoint


time setting of the database.

Recovery ur
gency(%)

Estimate of the amount of time required to recover the database.

Refresh

Click to update the checkpoint urgency and recovery urgency values.

Collect informa
tion about dead
locks that occur
in this database

Information is collected on deadlocked connections to the database.

Include SQL
statement infor
mation for dead
locked connec
tions

Select to include SQL statement information is with the deadlock connection


information.

Clear deadlock in Select remove all deadlock information from the system.
formation now
Database Proper
ties

A list of all database properties, including the property value and the description of the property.

(Read-only)
License manage
ment

A list the name and value of the properties for the various licenses.

6. Click OK to update any changes to the database and close the page.

424

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.8.7 Database Privilege Summary


A list of the system privileges and object permissions required to complete the various database tasks.

Creating a Database
Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

DBA authority. The account under which the server is running must have write permis
sions on the directories where files are created.

SAP IQ 16.0

The account under which the server is running must have write permissions on the di
rectories where files are created. No other system privilege is required.

Creating a Database Using CSV File


Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

The account under which the server is running must have write permissions on the di
rectories where files are created. No other system privilege is required.

Setting Database Options


Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

View database options only none


Modify database options DBA authority

SAP IQ 16.0

View database options only none


Modify database options Depending on the option being modified, one of:

SAP IQ Cockpit
Administer SAP IQ

SET ANY PUBLIC OPTION system privilege

SET ANY SECURITY OPTION system privilege

SET ANY SYSTEM OPTION system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

425

Configuring Point-in-Time Recovery Options


Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Set PITR database options SET ANY SYSTEM OPTION system privilege
Set PITR logging options MANAGE ANY DBSPACE system privilege

Purging Backup History


Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

BACKUP DATABASE system privilege

Viewing or Modifying Database Properties


Database Version

Database Privileges Required

SAP IQ 15.3 and 15.4

View database license management property page EXECUTE permission on the

sp_iqlmconfig system procedure to display the content of the page.


View any other database property page none
Modify the following properties on the Settings page:

Include SQL statement information option EXECUTE permission on the

sa_server_option system procedure to modify this setting.

Collect Information about deadlocks option DBA authority

Clear Deadlock Information Now option DBA authority

Modify any other database property DBA authority

426

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Database Privileges Required

SAP IQ 16.0

View database license management property page EXECUTE permission on the

sp_iqlmconfig system procedure along with the SERVER OPERATOR system priv
ilege to display the content of the page.
View any other database property page none
Modify the following properties on the Settings page:

Refresh button SERVER OPERATOR or ALTER DATABASE system privilege

Collect Information about deadlocks option SET ANY SYSTEM OPTION system
privilege

Include SQL statement information option EXECUTE permission on the

sa_server_option system procedure along with the SERVER OPERATOR


system privilege to modify this setting.

Clear Deadlock Information Now option SERVER OPERATOR system privilege

Modify properties on the license management page SERVER OPERATOR system


privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

427

5.9

Tables

Create, delete, and display tables (including global temporary tables and proxy tables), and manage their
properties, in SAP IQ.
Tables consist of rows and columns. Each column carries a particular kind of information, such as a phone
number or a name, while each row specifies a particular entry.
When a database is first created, the only tables in the database are the system tables, which hold the
database schema. You can create new tables to hold your actual data.

Related Information
Creating an IQ (Catalog) System Store Table [page 429]
Creating an IQ Main Store Table with No Partitions [page 432]
Creating a Table with a Hash Partition [page 436]
Creating a Table with a Range Partition [page 440]
Creating a Table with a Hash-Range Partition [page 445]
Creating a Global Temporary Table [page 450]
Creating a Proxy Table [page 453]
Viewing Table Data in the Execute SQL Window [page 455]
Deleting a Table [page 456]
Generating Table DDL Commands [page 457]
Moving a Table to Another Dbspace [page 458]
Validating an IQ (Catalog) System Store Table [page 459]
Setting the Primary Key [page 460]
Removing the Primary Key [page 462]
Setting a Clustered Index [page 463]
Merging Table Data from RLV Store with IQ Main Store [page 464]
Calculating the Number of Rows in a Table [page 466]
Moving Table Objects to Another Dbspace [page 467]
Enabling or Disabling Row-Level Versioning in a Table [page 468]
Viewing or Modifying Base Table Properties [page 469]
Viewing or Modifying Global Temporary Table Properties [page 474]
Viewing and Modifying Proxy Table Properties [page 479]
Table Privilege Summary [page 482]
Table Columns [page 492]
Table Permissions [page 504]
Table Constraints [page 515]
Table Indexes [page 541]
Table Triggers [page 559]
Table Partitions [page 569]

428

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.9.1 Creating an IQ (Catalog) System Store Table


A base table holds persistent data. (The table and its data continue to exist until you explicitly delete the data
or drop the table.)

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Base table to be owned by self RESOURCE authority with CREATE permission on the
IQ main store dbspace in which the table is created.
Base table to be owned by any user DBA authority

SAP IQ 16.0

Base table to be owned by self CREATE permission on the dbspace where the table is
created, along with one of:

CREATE TABLE system privilege

CREATE ANY OBJECT system privilege

Base table to be owned by any user CREATE permission on the dbspace where the
table is created along with one of:

CREATE ANY TABLE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Context
Altering or creating base tables can interfere with other users of the database.
For large tables, modifying an existing table or creating a new table can be a time-consuming operation. The
internal CREATE TABLE statement delays execution of other processes until the statement completes.
Although you can modify tables while other connections are active, you cannot execute them while any other
connection uses the table to be altered. Modifying a table excludes other requests referencing the table being
offered while the internal ALTER TABLE statement processes.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the left pane, do one of:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

429

Click the arrow to the right of the name.


Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the table will be created

Select a system.

What do you want to name the table?

Enter a name for the new table; maximum of 128 charac


ters.

Which user do you want to own the table?

Select the user to own the table.

6. On the Dbspace page, select IQ (catalog) system store and the dbspace in which to create the table. Only
dbspaces to which you have permissions are listed.
7. On the Primary Key Constraints page, enter primary key constraint information. Default is to create a
primary key constraint with no clustered primary key.
8. On the Free Space page, enter free space information. Default is to reserve 200 bytes for each table page.
9. On the Columns page, each row in the Column Definitions table corresponds to a column in the table. To
add column definitions for the table, click New, and follow the Create Column wizard prompts.
a. On the Column Name page, specify the name of the column and indicate whether the column is to be a
primary key column.
b. On the Data Type page, specify:
Property

Description

Built-in type

A predefined data type for the column. Integers, character strings, and dates
are examples of predefined data types. Default is BIGINT. For some of these
types, you can specify size and scale.
Size length of string columns, or the total number of digits to the left and
right of the decimal point in the result of any decimal arithmetic for nu
meric columns. For numeric columns, the size is also called the PRECI
SION value.
Scale minimum number of digits after the decimal point when an arith
metic result is truncated to the maximum PRECISION value.
Units unit corresponding to the data type's size. Possible units include:
bits, bytes, characters, or digits. For CHAR and VARCHAR data types, you
can specify the unit as bytes or characters.

Domain

Select to use a domain. A domain is a named combination of built-in data


types, default value, check condition, and nullability.

Compress values

(Not available for all built-in types) Select to compress column values. If a col
umn is compressed, database server activities such as indexing, data compari
sons, and statistics generation may be slightly slower if they involve the com
pressed column because the values must be compressed when written, and
decompressed when read.

Maintain BLOB indexes for large (Available for character and binary types only.) Select to maintain BLOB in
value
dexes for large values.

c. On the Value page, specify:

430

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

No default or computed value

(Default) Select this option if the column is not a computed value and
has no default value.

Default Value

Select this option if the column has a default value. If the column is
based on a domain, this setting inherits the domain's default value (if
any), but you can override the value for the column.
User-defined type a custom value (string, number, or other ex
pression) for the default value. If you have based the column on a
domain, you can retain the domain's default value (if any), or
override it for the column.
Literal string specify whether the default value for the col
umn should be treated as a literal string. By default, this op
tion is selected for character columns and domains with a
character base type. You do not need to enclose default text
in single quotes, and escape embedded single quotes or
backslashes in the string.
System-defined (list depends by data type specified) lets you se
lect a predefined value (for example, current date) for the default
value. If you have based the column on a data type of Domain,
you can retain the domain's default value (if any) or override it for
the column.
Partition Size if you select Global autoincrement, specify a
partition size. The domain of values for that column is parti
tioned. Each partition contains the same number of values.
For example, if you set the partition size for an integer col
umn in a database to 1000, one partition extends from 1001
to 2000, the next from 2001 to 3000, and so on.

Computed Value

(For IQ (catalog) system store only) Define a computed value for the
column. A computed column derives its values from calculations of
values in other columns. Type an expression in the text box to de
scribe the relationship between the other columns and the value that
appears in the computed column.

d. On the Constraints page, specify:


Property

Description

Values can be null

(Default) Select if null values are allowed in the column. If the column is
based on a domain, you can retain the domain's nullability or override it for
the column.

Values cannot be null

Select to allow duplicate values, but not allow null values in this column.

Values cannot be null and must be


unique

Select if values in the column cannot be null and must be unique.

e. (Optional) On the Comment page, add a descriptive comment for the column. Comments help you
organize your database.
f. Click Finish.
g. Repeat these steps to create additional columns. When all columns are added, click Next.
10. (Optional) On the Comment page, enter a comment about the table.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

431

11. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.2 Creating an IQ Main Store Table with No Partitions


A base table holds persistent data. (The table and its data continue to exist until you explicitly delete the data
or drop the table.)

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Base table to be owned by self RESOURCE authority with CREATE permission on the
IQ main store dbspace in which the table is created.
Base table to be owned by any user DBA authority

SAP IQ 16.0

Base table to be owned by self CREATE permission on the dbspace where the table is
created, along with one of:

CREATE TABLE system privilege

CREATE ANY OBJECT system privilege

Base table to be owned by any user CREATE permission on the dbspace where the
table is created along with one of:

CREATE ANY TABLE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


The RLV store dbspace must exist to create an RLV-enabled table.
In a multiplex configuration, the coordinator is running.

Context
Altering or creating base tables can interfere with other users of the database.
For large tables, modifying an existing table or creating a new table can be a time-consuming operation. The
internal CREATE TABLE statement delays execution of other processes until the statement completes.
Although you can modify tables while other connections are active, you cannot execute them while any other

432

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

connection uses the table to be altered. Modifying a table excludes other requests referencing the table being
offered while the internal ALTER TABLE statement processes.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the table will be created

Select a system.

What do you want to name the table?

Enter a name for the new table; maximum of 128 charac


ters.

Which user do you want to own the table?

Select the user to own the table.

6. On the Dbspace page, select IQ main store and the dbspace in which to create the table. Only dbspaces to
which you have permissions are listed.
7. On the Row-level versioning (RLV) page, specify:

Note
This page is read-only if an RLV store dbspace does not exist.
Property

Description

Default

Table is to use settings from the BASE_TABLE_IN_RLV_STORE database


option to enable or disable row-level versioning.

Enable RLV

Table is to use row-level versioning storage.

Disable RLV

Table is to not use row-level versioning storage.

Note
RLV-enabled tables do not support:
LONG VARBINARY (LOB) and LONG VARCHAR data types.
TEXT and WORD indexes.
Foreign key constraints.
8. On the Columns page, each row in the Column Definitions table corresponds to a column in the table. To
add column definitions for the table, click New, and follow the Create Column wizard prompts.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

433

a. On the Column Name page, specify the name of the column and indicate whether the column is to be a
primary key column.
b. On the Data Type page, specify:
Property

Description

Built-in type

A predefined data type for the column. Integers, character strings, and dates
are examples of predefined data types. Default is BIGINT. For some of these
types, you can specify size and scale.
Size length of string columns, or the total number of digits to the left and
right of the decimal point in the result of any decimal arithmetic for nu
meric columns. For numeric columns, the size is also called the PRECI
SION value.
Scale minimum number of digits after the decimal point when an arith
metic result is truncated to the maximum PRECISION value.
Units unit corresponding to the data type's size. Possible units include:
bits, bytes, characters, or digits. For CHAR and VARCHAR data types, you
can specify the unit as bytes or characters.

Domain

Select to use a domain. A domain is a named combination of built-in data


types, default value, check condition, and nullability.

Compress values

(Not available for all built-in types) Select to compress column values. If a col
umn is compressed, database server activities such as indexing, data compari
sons, and statistics generation may be slightly slower if they involve the com
pressed column because the values must be compressed when written, and
decompressed when read.

Maintain BLOB indexes for large (Available for character and binary types only.) Select to maintain BLOB in
value
dexes for large values.

c. On the Value page, specify:

434

Property

Description

No default or computed value

(Default) Select this option if the column is not a computed value and has no
default value.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Default Value

Select this option if the column has a default value. If the column is based on a
domain, this setting inherits the domain's default value (if any), but you can
override the value for the column.
User-defined type a custom value (string, number, or other expression)
for the default value. If you have based the column on a domain, you can
retain the domain's default value (if any), or override it for the column.
Literal string specify whether the default value for the column should
be treated as a literal string. By default, this option is selected for
character columns and domains with a character base type. You do
not need to enclose default text in single quotes, and escape embed
ded single quotes or backslashes in the string.
System-defined (list depends by data type specified) lets you select a pre
defined value (for example, current date) for the default value. If you have
based the column on a data type of Domain, you can retain the domain's
default value (if any) or override it for the column.
Partition Size if you select Global autoincrement, specify a partition
size. The domain of values for that column is partitioned. Each parti
tion contains the same number of values.
For example, if you set the partition size for an integer column in a da
tabase to 1000, one partition extends from 1001 to 2000, the next
from 2001 to 3000, and so on.

d. On the Constraints page, specify:


Property

Description

Values can be null

(Default) Select if null values are allowed in the column. If the column is
based on a domain, you can retain the domain's nullability or override it for
the column.

Values cannot be null

Select to allow duplicate values, but not allow null values in this column.

Values cannot be null and must be


unique

Select if values in the column cannot be null and must be unique.

e. On the Placement page, select the dbspace where the column is to reside. Only those dbspaces in
read-write mode to which you have permissions appear in the list.
f. (Optional) On the Comment page, add a descriptive comment for the column. Comments help you
organize your database.
g. Click Finish.
h. Repeat these steps to create additional columns. When all columns are added, click Next.
9. On the Partitions page, click Next.
10. (Optional) On the Comment page, enter a comment about the table.
11. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

435

5.9.3 Creating a Table with a Hash Partition


A table with a hash partition can only reside in the IQ main store.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Base table to be owned by self RESOURCE authority with CREATE permission on the
IQ main store dbspace in which the table is created.
Base table to be owned by any user DBA authority

SAP IQ 16.0

Base table to be owned by self CREATE permission on the dbspace where the table is
created, along with one of:

CREATE TABLE system privilege

CREATE ANY OBJECT system privilege

Base table to be owned by any user CREATE permission on the dbspace where the
table is created along with one of:

CREATE ANY TABLE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


The RLV store dbspace must exist to create an RLV-enabled table.
In a multiplex configuration, the coordinator is running.
The table being created is in the IQ main store.

Context
Altering or creating base tables can interfere with other users of the database.
For large tables, modifying an existing table or creating a new table can be a time-consuming operation. The
internal CREATE TABLE statement delays execution of other processes until the statement completes.
Although you can modify tables while other connections are active, you cannot execute them while any other
connection uses the table to be altered. Modifying a table excludes other requests referencing the table being
offered while the internal ALTER TABLE statement processes.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

436

IQ Servers

Schema Objects

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Tables , and then click Tables.

SAP IQ Cockpit
Administer SAP IQ

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the table will be created

Select a system.

What do you want to name the table?

Enter a name for the new table; maximum of 128 charac


ters.

Which user do you want to own the table?

Select the user to own the table.

6. On the Dbspace page, select IQ main store and the dbspace in which to create the table. Only dbspaces to
which you have permissions are listed.
7. On the Row-level versioning (RLV) page, specify:

Note
This page is read-only if an RLV store dbspace does not exist.
Property

Description

Default

Table is to use settings from the BASE_TABLE_IN_RLV_STORE database


option to enable or disable row-level versioning.

Enable RLV

Table is to use row-level versioning storage.

Disable RLV

Table is to not use row-level versioning storage.

Note
RLV-enabled tables do not support:
LONG VARBINARY (LOB) and LONG VARCHAR data types.
TEXT and WORD indexes.
Foreign key constraints.
8. On the Columns page, each row in the Column Definitions table corresponds to a column in the table. To
add column definitions for the table, click New, and follow the Create Column wizard prompts.
a. On the Column Name page, specify the name of the column and indicate whether the column is to be a
primary key column.
b. On the Data Type page, specify:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

437

Property

Description

Built-in type

A predefined data type for the column. Integers, character strings, and dates
are examples of predefined data types. Default is BIGINT. For some of these
types, you can specify size and scale.
Size length of string columns, or the total number of digits to the left and
right of the decimal point in the result of any decimal arithmetic for nu
meric columns. For numeric columns, the size is also called the PRECI
SION value.
Scale minimum number of digits after the decimal point when an arith
metic result is truncated to the maximum PRECISION value.
Units unit corresponding to the data type's size. Possible units include:
bits, bytes, characters, or digits. For CHAR and VARCHAR data types, you
can specify the unit as bytes or characters.

Domain

Select to use a domain. A domain is a named combination of built-in data


types, default value, check condition, and nullability.

Compress values

(Not available for all built-in types) Select to compress column values. If a col
umn is compressed, database server activities such as indexing, data compari
sons, and statistics generation may be slightly slower if they involve the com
pressed column because the values must be compressed when written, and
decompressed when read.

Maintain BLOB indexes for large (Available for character and binary types only.) Select to maintain BLOB in
value
dexes for large values.

c. On the Value page, specify:

438

Property

Description

No default or computed value

(Default) Select this option if the column is not a computed value and
has no default value.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Default Value

Select this option if the column has a default value. If the column is
based on a domain, this setting inherits the domain's default value (if
any), but you can override the value for the column.
User-defined type a custom value (string, number, or other ex
pression) for the default value. If you have based the column on a
domain, you can retain the domain's default value (if any), or
override it for the column.
Literal string specify whether the default value for the col
umn should be treated as a literal string. By default, this op
tion is selected for character columns and domains with a
character base type. You do not need to enclose default text
in single quotes, and escape embedded single quotes or
backslashes in the string.
System-defined (list depends by data type specified) lets you se
lect a predefined value (for example, current date) for the default
value. If you have based the column on a data type of Domain,
you can retain the domain's default value (if any) or override it for
the column.
Partition Size if you select Global autoincrement, specify a
partition size. The domain of values for that column is parti
tioned. Each partition contains the same number of values.
For example, if you set the partition size for an integer col
umn in a database to 1000, one partition extends from 1001
to 2000, the next from 2001 to 3000, and so on.

d. On the Constraints page, specify:


Property

Description

Values can be null

(Default) Select if null values are allowed in the column. If the column is
based on a domain, you can retain the domain's nullability or override it for
the column.

Values cannot be null

Select to allow duplicate values, but not allow null values in this column.

Values cannot be null and must be


unique

Select if values in the column cannot be null and must be unique.

e. On the Placement page, select the dbspace where the column is to reside. Only those dbspaces in
read-write mode to which you have permissions appear in the list.
f. (Optional) On the Comment page, add a descriptive comment for the column. Comments help you
organize your database.
g. Click Finish.
h. Repeat these steps to create additional columns. When all columns are added, click Next.
9. On the Partitions page, click New, and follow the Create Partition wizard prompts.
a. On the Partition Type page, select Hash.
b. On the Partition Key page, select a column, and click Add. Repeat this step to select additional
columns. A partition key cannot contain LOB, binary, varbinary, bit, float, double, or real data, or any
char or varchar column with a length that exceeds 255 bytes. Hash partition keys are restricted to a
maximum of 8 columns with a declared column width of 5300 bytes or less.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

439

c. Click Finish.
10. (Optional) On the Comment page, enter a comment about the table.
11. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.4 Creating a Table with a Range Partition


A table with a range partition can only reside in the IQ main store.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Base table to be owned by self RESOURCE authority with CREATE permission on the
IQ main store dbspace in which the table is created.
Base table to be owned by any user DBA authority

SAP IQ 16.0

Base table to be owned by self CREATE permission on the dbspace where the table is
created, along with one of:

CREATE TABLE system privilege

CREATE ANY OBJECT system privilege

Base table to be owned by any user CREATE permission on the dbspace where the
table is created along with one of:

CREATE ANY TABLE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


The RLV store dbspace must exist to create an RLV-enabled table.
In a multiplex configuration, the coordinator is running.
The table being created is in the IQ main store.

Context
Altering or creating base tables can interfere with other users of the database.
For large tables, modifying an existing table or creating a new table can be a time-consuming operation. The
internal CREATE TABLE statement delays execution of other processes until the statement completes.

440

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Although you can modify tables while other connections are active, you cannot execute them while any other
connection uses the table to be altered. Modifying a table excludes other requests referencing the table being
offered while the internal ALTER TABLE statement processes.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the table will be created

Select a system.

What do you want to name the table?

Enter a name for the new table; maximum of 128 charac


ters.

Which user do you want to own the table?

Select the user to own the table.

6. On the Dbspace page, select IQ main store and the dbspace in which to create the table. Only dbspaces to
which you have permissions are listed.
7. On the Row-level versioning (RLV) page, specify:

Note
This page is read-only if an RLV store dbspace does not exist.
Property

Description

Default

Table is to use settings from the BASE_TABLE_IN_RLV_STORE database


option to enable or disable row-level versioning.

Enable RLV

Table is to use row-level versioning storage.

Disable RLV

Table is to not use row-level versioning storage.

Note
RLV-enabled tables do not support:
LONG VARBINARY (LOB) and LONG VARCHAR data types.
TEXT and WORD indexes.
Foreign key constraints.
8. On the Columns page, each row in the Column Definitions table corresponds to a column in the table. To
add column definitions for the table, click New, and follow the Create Column wizard prompts.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

441

a. On the Column Name page, specify the name of the column and indicate whether the column is to be a
primary key column.
b. On the Data Type page, specify:
Property

Description

Built-in type

A predefined data type for the column. Integers, character strings, and dates
are examples of predefined data types. Default is BIGINT. For some of these
types, you can specify size and scale.
Size length of string columns, or the total number of digits to the left and
right of the decimal point in the result of any decimal arithmetic for nu
meric columns. For numeric columns, the size is also called the PRECI
SION value.
Scale minimum number of digits after the decimal point when an arith
metic result is truncated to the maximum PRECISION value.
Units unit corresponding to the data type's size. Possible units include:
bits, bytes, characters, or digits. For CHAR and VARCHAR data types, you
can specify the unit as bytes or characters.

Domain

Select to use a domain. A domain is a named combination of built-in data


types, default value, check condition, and nullability.

Compress values

(Not available for all built-in types) Select to compress column values. If a col
umn is compressed, database server activities such as indexing, data compari
sons, and statistics generation may be slightly slower if they involve the com
pressed column because the values must be compressed when written, and
decompressed when read.

Maintain BLOB indexes for large (Available for character and binary types only.) Select to maintain BLOB in
value
dexes for large values.

c. On the Value page, specify:

442

Property

Description

No default or computed value

(Default) Select this option if the column is not a computed value and
has no default value.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Default Value

Select this option if the column has a default value. If the column is
based on a domain, this setting inherits the domain's default value (if
any), but you can override the value for the column.
User-defined type a custom value (string, number, or other ex
pression) for the default value. If you have based the column on a
domain, you can retain the domain's default value (if any), or
override it for the column.
Literal string specify whether the default value for the col
umn should be treated as a literal string. By default, this op
tion is selected for character columns and domains with a
character base type. You do not need to enclose default text
in single quotes, and escape embedded single quotes or
backslashes in the string.
System-defined (list depends by data type specified) lets you se
lect a predefined value (for example, current date) for the default
value. If you have based the column on a data type of Domain,
you can retain the domain's default value (if any) or override it for
the column.
Partition Size if you select Global autoincrement, specify a
partition size. The domain of values for that column is parti
tioned. Each partition contains the same number of values.
For example, if you set the partition size for an integer col
umn in a database to 1000, one partition extends from 1001
to 2000, the next from 2001 to 3000, and so on.

d. On the Constraints page, specify:


Property

Description

Values can be null

(Default) Select if null values are allowed in the column. If the column is
based on a domain, you can retain the domain's nullability or override it for
the column.

Values cannot be null

Select to allow duplicate values, but not allow null values in this column.

Values cannot be null and must be


unique

Select if values in the column cannot be null and must be unique.

e. On the Placement page, select the dbspace where the column is to reside. Only those dbspaces in
read-write mode to which you have permissions appear in the list.
f. (Optional) On the Comment page, add a descriptive comment for the column. Comments help you
organize your database.
g. Click Finish.
h. Repeat these steps to create additional columns. When all columns are added, click Next.
9. On the Partitions page, click New, and follow the Create Partition wizard prompts.
a. On the Partition Type page, select Range.
b. On the Partition Key page, select a column, and click Add. A partition key cannot contain LOB, binary,
varbinary, bit, float, double, or real data, or any char or varchar column with a length that exceeds 255
bytes.
c. On the Partitions page, click Add, and then in the Define a Partition view, specify:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

443

Click OK. Repeat this step to add additional partitions.

Note
When you add multiple partitions to a table, the constraint value of each successive partition
must be greater than that of the previous partition. For example, if the constraint value of the
first partition is 100, the constraint value of the next partition must be 101 or higher.
If an invalid constraint value is specified, no error message appears when you click OK on the
Define a Partition dialog, but does appear when you click OK or Apply to complete the
partitioning process.
d. (Optional) On the Columns page, if you want to store the data for any individual columns in separate
dbspaces from the partition, click Add. Choose the column, partition, and dbspace from each list, and
click OK. Repeat this step to specify additional columns to be stored separately from the dbspaces of
their respective partitions..
e. Click Finish.
10. (Optional) On the Comment page, enter a comment about the table.
11. Click Finish.

Note
If an error is detected with a constraint (partition bound) value, an error message appears. To fix:
a. Click Back to return to the Partitions page.
b. Highlight the invalid partition and do one of:
Click Edit, correct the value, and click OK.
Click Delete to remove the invalid partition.
c. Click Next, then Finish to complete the creation process.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

444

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.9.5 Creating a Table with a Hash-Range Partition


A table with a hash-range partition can only reside in the IQ main store.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Base table to be owned by self RESOURCE authority with CREATE permission on the
IQ main store dbspace in which the table is created.
Base table to be owned by any user DBA authority

SAP IQ 16.0

Base table to be owned by self CREATE permission on the dbspace where the table is
created, along with one of:

CREATE TABLE system privilege

CREATE ANY OBJECT system privilege

Base table to be owned by any user CREATE permission on the dbspace where the
table is created along with one of:

CREATE ANY TABLE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


The RLV store dbspace must exist to create an RLV-enabled table.
In a multiplex configuration, the coordinator is running.
The table being created is in the IQ main store.

Context
Altering or creating base tables can interfere with other users of the database.
For large tables, modifying an existing table or creating a new table can be a time-consuming operation. The
internal CREATE TABLE statement delays execution of other processes until the statement completes.
Although you can modify tables while other connections are active, you cannot execute them while any other
connection uses the table to be altered. Modifying a table excludes other requests referencing the table being
offered while the internal ALTER TABLE statement processes.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

SAP IQ Cockpit
Administer SAP IQ

IQ Servers

Schema Objects

Tables , and then click Tables.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

445

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the table will be created

Select a system.

What do you want to name the table?

Enter a name for the new table; maximum of 128 charac


ters.

Which user do you want to own the table?

Select the user to own the table.

6. On the Dbspace page, select IQ main store and the dbspace in which to create the table. Only dbspaces to
which you have permissions are listed.
7. On the Row-level versioning (RLV) page, specify:

Note
This page is read-only if an RLV store dbspace does not exist.
Property

Description

Default

Table is to use settings from the BASE_TABLE_IN_RLV_STORE database


option to enable or disable row-level versioning.

Enable RLV

Table is to use row-level versioning storage.

Disable RLV

Table is to not use row-level versioning storage.

Note
RLV-enabled tables do not support:
LONG VARBINARY (LOB) and LONG VARCHAR data types.
TEXT and WORD indexes.
Foreign key constraints.
8. On the Columns page, each row in the Column Definitions table corresponds to a column in the table. To
add column definitions for the table, click New, and follow the Create Column wizard prompts.
a. On the Column Name page, specify the name of the column and indicate whether the column is to be a
primary key column.
b. On the Data Type page, specify:

446

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Built-in type

A predefined data type for the column. Integers, character strings, and dates are examples of
predefined data types. Default is BIGINT. For some of these types, you can specify size and
scale.
Size length of string columns, or the total number of digits to the left and right of the deci
mal point in the result of any decimal arithmetic for numeric columns. For numeric columns,
the size is also called the PRECISION value.
Scale minimum number of digits after the decimal point when an arithmetic result is trun
cated to the maximum PRECISION value.
Units unit corresponding to the data type's size. Possible units include: bits, bytes, charac
ters, or digits. For CHAR and VARCHAR data types, you can specify the unit as bytes or
characters.

Domain

Select to use a domain. A domain is a named combination of built-in data types, default value,
check condition, and nullability.

Compress val (Not available for all built-in types) Select to compress column values. If a column is com
ues
pressed, database server activities such as indexing, data comparisons, and statistics genera
tion may be slightly slower if they involve the compressed column because the values must be
compressed when written, and decompressed when read.
Maintain
BLOB indexes
for large value

(Available for character and binary types only.) Select to maintain BLOB indexes for large values.

c. On the Value page, specify:


Property

Description

No default or computed value

(Default) Select this option if the column is not a computed value and
has no default value.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

447

Property

Description

Default Value

Select this option if the column has a default value. If the column is
based on a domain, this setting inherits the domain's default value (if
any), but you can override the value for the column.
User-defined type a custom value (string, number, or other ex
pression) for the default value. If you have based the column on a
domain, you can retain the domain's default value (if any), or
override it for the column.
Literal string specify whether the default value for the col
umn should be treated as a literal string. By default, this op
tion is selected for character columns and domains with a
character base type. You do not need to enclose default text
in single quotes, and escape embedded single quotes or
backslashes in the string.
System-defined (list depends by data type specified) lets you se
lect a predefined value (for example, current date) for the default
value. If you have based the column on a data type of Domain,
you can retain the domain's default value (if any) or override it for
the column.
Partition Size if you select Global autoincrement, specify a
partition size. The domain of values for that column is parti
tioned. Each partition contains the same number of values.
For example, if you set the partition size for an integer col
umn in a database to 1000, one partition extends from 1001
to 2000, the next from 2001 to 3000, and so on.

d. On the Constraints page, specify:


Property

Description

Values can be null

(Default) Select if null values are allowed in the column. If the column is
based on a domain, you can retain the domain's nullability or override it for
the column.

Values cannot be null

Select to allow duplicate values, but not allow null values in this column.

Values cannot be null and must be


unique

Select if values in the column cannot be null and must be unique.

e. On the Placement page, select the dbspace where the column is to reside. Only those dbspaces in
read-write mode to which you have permissions appear in the list.
f. (Optional) On the Comment page, add a descriptive comment for the column. Comments help you
organize your database.
g. Click Finish.
h. Repeat these steps to create additional columns. When all columns are added, click Next.
9. On the Partitions page, click New, and follow the Create Partition wizard prompts.
a. On the Partition Type page, select Hash-Range.
b. On the Partition Key page, select a column, and click Add. Repeat this step to select additional
columns. A partition key cannot contain LOB, binary, varbinary, bit, float, double, or real data, or any
char or varchar column with a length that exceeds 255 bytes.
c. On the Subpartition Key page, specify a column to be the subpartition key.

448

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

A subpartition key cannot contain LOB, binary, varbinary, bit, float, double, or real data, or any char or
varchar column over 255 bytes long.
d. On the Subpartitions page, click Add, and specify:
Property

Description

Name

A descriptive name for the partition.

Constraint

(read only) Less than or equal (<=) is the only con


straint currently supported.

Value

A value for the upper boundary of the partition. The


value must be appropriate for the data type of the parti
tion key.

Dbspace

The dbspace for the partition.

Click OK. Repeat this step to add additional partitions.

Note
When you add multiple partitions to a table, the constraint value of each successive partition
must be greater than that of the previous partition. For example, if the constraint value of the
first partition is 100, the constraint value of the next partition must be 101 or higher.
If an invalid constraint value is specified, no error message appears when you click OK on the
Define a Partition dialog, but does appear when you click OK or Apply to complete the
partitioning process.
e. (Optional) On the Columns page, if you want to store the data for any individual columns in separate
dbspaces from the partition, click Add. Choose the column, partition, and dbspace from each list, and
click OK. Repeat this step to specify additional columns to be stored separately from the dbspaces of
their respective partitions..
f. Click Finish.
10. (Optional) On the Comment page, enter a comment about the table.
11. Click Finish.

Note
If an error is detected with a constraint (partition bound) value, an error message appears. To fix:
a. Click Back to return to the Partitions page.
b. Highlight the invalid partition and do one of:
Click Edit, correct the value, and click OK.
Click Delete to remove the invalid partition.
c. Click Next, then Finish to complete the creation process.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

449

5.9.6 Creating a Global Temporary Table


Add a global temporary table to the database. A global temporary table definition is kept in the database
permanently. (The data disappears when you close the connection.)

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Global temporary table to be owned by self RESOURCE authority with CREATE per
mission on the IQ main store dbspace in which the table is created.
Global temporary table to be owned by any user DBA authority

SAP IQ 16.0

Global temporary table to be owned by self CREATE TABLE system privilege


Global temporary table to be owned by any user one of:

CREATE ANY TABLE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Context
Altering or creating global tables can interfere with other users of the database.
For large tables, modifying an existing table or creating a new table can be a time-consuming operation. The
internal CREATE TABLE statement delays execution of other processes until the statement completes.
Although you modify tables while other connections are active, you cannot execute them while any other
connection uses the table to be altered. Modifying a table excludes other requests referencing the table being
offered while the internal ALTER TABLE statement processes.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Tables.

IQ Servers

Schema Objects

Tables , and then click Global Temporary

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.

450

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5. On the Welcome page, specify:


Property

Description

Select a resource on which the table will be created

Select a system.

What do you want to name the table?

Enter a name for the new table; maximum of 128 charac


ters.

Which user do you want to own the table?

Select the user to own the table.

6. On the Type page, specify the type of global temporary table to create. For transactional (default), specify
whether the rows are deleted (default) or preserved when a commit occurs. Non-transactional global
temporary tables are not affected by commit or rollback operations and can provide performance
improvements in some circumstances since operations on the table do not cause entries to be made in
the rollback log.
7. On the Columns page, each row in the Column Definitions table corresponds to a column in the table. To
add column definitions for the table, click New, and follow the Create Column wizard prompts.
a. On the Column Name page, specify the name of the column and indicate whether the column is to be a
primary key column.
b. On the Data Type page, specify:
Property

Description

Built-in type

A predefined data type for the column. Integers, character strings, and dates
are examples of predefined data types. Default is BIGINT. For some of these
types, you can specify size and scale.
Size length of string columns, or the total number of digits to the left and
right of the decimal point in the result of any decimal arithmetic for nu
meric columns. For numeric columns, the size is also called the PRECI
SION value.
Scale minimum number of digits after the decimal point when an arith
metic result is truncated to the maximum PRECISION value.
Units unit corresponding to the data type's size. Possible units include:
bits, bytes, characters, or digits. For CHAR and VARCHAR data types, you
can specify the unit as bytes or characters.

Domain

Select to use a domain. A domain is a named combination of built-in data


types, default value, check condition, and nullability.

Compress values

(Not available for all built-in types) Select to compress column values. If a col
umn is compressed, database server activities such as indexing, data compari
sons, and statistics generation may be slightly slower if they involve the com
pressed column because the values must be compressed when written, and
decompressed when read.

Maintain BLOB indexes for large (Available for character and binary types only.) Select to maintain BLOB in
value
dexes for large values.

c. On the Value page, specify:


Property

Description

No default or computed value

(Default) Select this option if the column is not a computed value and
has no default value.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

451

Property

Description

Default Value

Select this option if the column has a default value. If the column is
based on a domain, this setting inherits the domain's default value (if
any), but you can override the value for the column.
User-defined type a custom value (string, number, or other ex
pression) for the default value. If you have based the column on a
domain, you can retain the domain's default value (if any), or
override it for the column.
Literal string specify whether the default value for the col
umn should be treated as a literal string. By default, this op
tion is selected for character columns and domains with a
character base type. You do not need to enclose default text
in single quotes, and escape embedded single quotes or
backslashes in the string.
System-defined (list depends by data type specified) lets you se
lect a predefined value (for example, current date) for the default
value. If you have based the column on a data type of Domain,
you can retain the domain's default value (if any) or override it for
the column.
Partition Size if you select Global autoincrement, specify a
partition size. The domain of values for that column is parti
tioned. Each partition contains the same number of values.
For example, if you set the partition size for an integer col
umn in a database to 1000, one partition extends from 1001
to 2000, the next from 2001 to 3000, and so on.

d. On the Constraints page, specify:


Property

Description

Values can be null

(Default) Select if null values are allowed in the column. If the column is
based on a domain, you can retain the domain's nullability or override it for
the column.

Values cannot be null

Select to allow duplicate values, but not allow null values in this column.

Values cannot be null and must be


unique

Select if values in the column cannot be null and must be unique.

e. (Optional) On the Comment page, add a descriptive comment for the column. Comments help you
organize your database.
f. Click Finish to create the column.
g. Repeat these steps to add additional columns. When all columns are added, click Next.
8. (Optional) On the Comment page, enter a descriptive comment about the global temporary table.
9. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

452

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.9.7 Creating a Proxy Table


A proxy table is a locally named alias, displayed as a table, that points to a remote object such as an entire
table, a view, a materialized view, or a set of remote table columns. Before you can map remote objects to a
local proxy table, you must define the remote server where the remote object is located.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Proxy table to be owned by self RESOURCE authority with CREATE permission on


the IQ main store dbspace in which the table is created.
Proxy table to be owned by any user DBA authority

SAP IQ 16.0

Proxy table to be owned by self CREATE PROXY TABLE system privilege


Proxy table to be owned by any user one of:

CREATE ANY TABLE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
Before you can map remote objects to a local proxy table, you must define the remote server where the
remote object is located.

Context
You can use a proxy table to access any object (including tables, views, and materialized views) that the
remote database exports as a candidate for a proxy table. Location transparency of remote data is enabled by
creating a local proxy table that maps to the remote object.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Proxy Tables.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

453

5. On the Server and User page, specify


Property

Description

Select a resource on which the proxy table will be created

Select the system for which the proxy table will be cre
ated.

To which remote server do you want to create the proxy


table?

Select the remote server.

Which user will own the proxy table?

Select the user to own the table. Default is DBA user.

(Optional) Remote database name

Specify the name of the remote database associated with


the remote server.

Note
You specify a remote database on which your remote
login has system privileges.

6. On the Table Selection page, specify:


Property

Description

Which table do you want to use for this proxy table?

Select the object on the remote server (table / view / ma


terialized view) that will be used as the target of the local
proxy.

What do you want to name the new proxy table.

Enter a unique name for the new proxy table. You cannot
create two tables with the same name under the same
user ID. The default name of the proxy table is the name
of the object on the remote server. However, this may not
be a unique name to your user ID.

7. On the Column Selection page, select the columns to be used in the proxy table. Default is to use all
columns.
8. On the Comment page, add a descriptive comment for the proxy table. Comments help you organize the
database.
9. Click Finish.

Next Steps
Before using a new proxy table on a multiplex secondary server, disconnect and reconnect to the server.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

454

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.9.8 Viewing Table Data in the Execute SQL Window


Execute a SELECT * FROM query and display contents of the table, global temporary table or proxy table in
the query results pane of the Execute SQL window.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

For the menu option to be enabled requires one of:

DBA authority

SELECT permission on the table

You own the table

Queries execute with the user's current permissions.


SAP IQ 16.0

For the menu option to be enabled requires one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Queries execute with the user's current privileges.

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Temporary Tables, or Proxy Tables.

Schema Objects

Tables , and then click Tables, Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select View Data in SQL.
A SELECT * FROM <tablename> query executes.
5. (Optional) Modify the SQL statement and click Execute to display different data in the table.
6. Click Close to close the Execute SQL view.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

455

5.9.9 Deleting a Table


Delete a table, global temporary table or proxy table from the database.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the table

One of:

DROP ANY TABLE system privilege

DROP ANY OBJECT system privilege

You own the table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Temporary Tables, or Proxy Tables.

Schema Objects

Tables , and then click Tables, Global

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Click Yes to confirm deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

456

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.9.10 Generating Table DDL Commands


Display the data description language SQL code for adding a table, global temporary table or proxy table to a
dbspace. The DDL can be a useful reference and training tool.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Temporary Tables, or Proxy Tables.

Schema Objects

Tables , and then click Tables, Global

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view shows the SQL code used to add the selected table to the dbspace.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

457

5.9.11 Moving a Table to Another Dbspace


You can move the table from the current dbspace to another dbspace. This feature is available only for tables
in the IQ main store.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

You own the table and have CREATE permission on the target dbspace

One of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

ALTER permission on the table and CREATE permission on the target dbspace

You own the table and have CREATE permission on the target dbspace

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The table is an SAP IQ base table (not a IQ (catalog) system store table, global temporary table, or proxy
table).

Context
You can move multiple tables at the same time, but all selected tables are moved to the same new dbspace.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select an IQ main store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

458

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Move.
5. In the Move Object Dialog view, select the new dbspace.
6. Click OK to execute the move.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.12 Validating an IQ (Catalog) System Store Table


Check the validity of an IQ (catalog) system store table.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

VALIDATE authority

VALIDATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


The table exists in the IQ (catalog) system store.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select an IQ (catalog) system store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

459

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Validate.
The Validate Tables view appears indicating the validation status of each selected table. If the table does
not validate, see Unable to Validate an IQ (catalog) System Store Table.
5. Click OK.

Related Information
Cannot Validate an IQ (Catalog) System Store Table [page 1204]
Cannot Validate an IQ (Catalog) System Store Table [page 1204]
Executing a SQL Query [page 288]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.13 Setting the Primary Key


Set the primary key to prohibit two or more rows in the table from having identical values for a column or set of
columns. You can set the primary key on base tables and global temporary tables only.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER and REFERENCE permission on the table

You own the table

To create a new or modify an existing primary key one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace where the table resides

ALTER and REFERENCE permission on the table

You own the table

To modify the name only of an existing primary key ALTER ANY INDEX system privi
lege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

460

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Context
The Set Primary Key option allows you to create a primary key on a table and add and remove columns from
an existing key; however, it does not allow you to remove the primary key from the table, once created.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Set Primary Key.
5. On the Constraint page, type the name of the primary key name.
A primary key name is not required when the table has no primary key already defined. A system
generated name is assigned.
6. On the Columns page, identify the primary key columns:
Property

Description

Add Asc. >>

Moves columns from the Available Columns pane to the


Selected Columns pane, in ascending order.

Add Desc. >>

(IQ (catalog) system store tables only.) Moves columns


from the Available Columns pane to the Selected Col
umns pane, in descending order.

<< Remove

Moves columns from the Selected Columns pane to the


Available Columns pane.

Primary key columns cannot allow NULL values.


7. (IQ (catalog) system store tables only) On the clustered index page, indicate if you want to make the
primary key's underlying index a clustered index. Clustered indexes can improve performance.
8. On the Comment page, add an optional, descriptive comment. Comments help you organize your
database.
9. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

461

5.9.14 Removing the Primary Key


Remove the primary key from a table.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER and REFERENCE permission on the table

You own the table

To create a new or modify an existing primary key one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace where the table resides

ALTER and REFERENCE permission on the table

You own the table

To modify the name only of an existing primary key ALTER ANY INDEX system privi
lege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Context
The Constraints option allows you to see the columns referenced by the primary key or to remove the primary
key from a table. It does not allow you to add a new primary key to table or add or remove referenced columns.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Constraints, then select the primary key constraint in the right pane.

462

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

6. Click Delete.

Note
The selected constraint is removed from the list, but is not permanently deleted until you click OK or
Apply on the Tables Properties view.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.15 Setting a Clustered Index


Set a clustered index on an IQ (catalog) system store table. Using a clustered index increases the chance that
two rows from adjacent index entries will appear on the same page in the database. This strategy can lead to
performance benefits by reducing the number of times a table page needs to be read into the buffer pool.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

You own the table

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

ALTER and REFERENCE permission on the table

You own the table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The table exists in the IQ (catalog) system store.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

463

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select an IQ (catalog) system store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Set Clustered Index.
5. Select an index in the list of indexes. Select the check box to cluster the list of indexes. Any previously
clustered indexes in the list will no longer be clustered. If you clear the check box, the currently clustered
index will be unclustered.
6. Click OK to update any changes to the database and close the page.

Related Information
Creating an Index on an IQ (Catalog) System Store Table [page 543]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.16 Merging Table Data from RLV Store with IQ Main


Store
Read-write data from a table enabled with row-level versioning (RLV) is housed in the RLV store, and
periodically merged automatically with the table's data in the IQ main store. However, you can explicitly merge
this RLV-enabled table data from the RLV store with the IQ main store data.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


The RLV store dbspace exists.
The data is stored in a single RLV-enabled table.
Only IQ base tables are supported in the RLV store: IQ (catalog) system store, temporary and global
temporary tables are not supported.

464

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

LONG VARBINARY (LOB) and LONG VARCHAR data types are not supported on RLV-enabled tables.
TEXT and WORD indexes are not supported on RLV-enabled tables.
Foreign key constraints are not supported on RLV-enabled tables or across a combination of RLV-enabled
and traditional tables.

Context
An RLV-enabled table uses row-level versioning so multiple writer connections can make simultaneous
updates to different rows of the same table.
The RLV store contains all rows of a RLV-enabled table which have been inserted or updated since the last
merge.
RLV merge is the process where the latest committed data from the RLV store is written to the IQ main store
to create a new IQ main store table-level snapshot version.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, an RLV-enabled table, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Merge RLV.

Note
The menu item is disabled for tables that are not RLV-enabled.
5. In the Merge RLV dialog, click Yes.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

465

5.9.17 Calculating the Number of Rows in a Table


Calculate an accurate row count for a base or proxy table.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SELECT permission on the table

You own the table

One of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Miscellaneous, then click Calculate in the right.
Calculation time depends on the size of the table. The number of rows appears beside Number of rows:.
The number of columns appears besideNumber of Columns.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

466

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.9.18 Moving Table Objects to Another Dbspace


You can move SAP IQ table objectsincluding indexes, columns, and partitionsfrom the current dbspace to
another dbspace. This feature is available only for tables in the IQ main store.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

CREATE permission on the target dbspace along with one of:

SAP IQ 16.0

DBA authority

RESOURCE authority with ALTER permission on the table

You own the table

CREATE permission on the target dbspace along with one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

You own the table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The table exists in the IQ (catalog) system store.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select an IQ (catalog) system store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Table Objects, select an object (index, column, partition) in the right pane.
6. Click Move.
7. In the Move Object Dialog view, select the new dbspace.
8. Click OK.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

467

5.9.19 Enabling or Disabling Row-Level Versioning in a Table


You can set an IQ main store base table to use row-level versioning (RLV) in order to track row changes for
read-write transactions.

Prerequisites
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


The RLV store dbspace exists.
The table is an IQ main store base table.
LONG VARBINARY (LOB) and LONG VARCHAR data types are not supported on RLV-enabled tables.
TEXT and WORD indexes are not supported on RLV-enabled tables.
Foreign key constraints are not supported on RLV-enabled tables or across a combination of RLV-enabled
and traditional tables.

Context
If your implementation uses the in-memory RLV store, you can enable row-level snapshot versioning so
multiple connections can make concurrent updates to different rows of the same table.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select an IQ main store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Row-level Versioning, then do one of to:

468

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Enable RLV

Select Enabled if you want the table to use row-level ver


sioning to track row changes for read-write transactions
on the table. The RLV dbspace must exist to enable RLV
on tables.

Disable RLV

deselect the checkbox to disable row-level versioning.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.20 Viewing or Modifying Base Table Properties


Display or change the properties of the selected IQ main store or IQ (catalog) system store base table.

Prerequisites
Note
The system privileges and permissions required vary by task. Unless otherwise indicated, the following
system privileges and permissions apply.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

469

Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

View any property page of a base table owned by self none


View any property page of a base table owned by any user none needed except for
the Data page, which requires one of:

DBA authority

SELECT permission on the table

You own the table

Modify any property on the General page one of:

DBA authority

ALTER permission on the table

You own the table

Modify any property on the Miscellaneous page one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

For privileges needed to modify other table properties, see:

470

Table Column Privilege Summary [page 501]

Table Permissions Privilege Summary [page 514]

Table Constraints Privilege Summary [page 536]

Table Index Privilege Summary [page 555]

Table Trigger Privilege Summary [page 566]

Table Partition Privilege Summary [page 587]

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Table Privileges Required

SAP IQ 16.0

View any property page of a base table owned by self none.


View any property page of a base table owned by any user none needed except for
the Data page, which requires one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Modify the table name on the General page one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

You own the table

Use the Calculate button on the Miscellaneous page one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Modify any other property on the Miscellaneous page for an IQ (catalog) system store
table one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

You own the table

Modify a comment on the General page one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

For privileges needed to modify other table properties, see:

Table Column Privilege Summary [page 501]

Table Permissions Privilege Summary [page 514]

Table Constraints Privilege Summary [page 536]

Table Index Privilege Summary [page 555]

Table Trigger Privilege Summary [page 566]

Table Partition Privilege Summary [page 587]

The SAP IQ system is running, registered, and authenticated.


(Modifying properties only) In a multiplex configuration, the coordinator node is running.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

471

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify table properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.

472

Page

Property

Description

General

Name

Table identifier.

Owner (Readonly)

Database user who owns the table.

Type (Read-only)

Type of table.

Dbspace (Readonly)

Name of the dbspace in which the table is located.

Comment

Text field for adding optional comments.

Columns

See Table Columns [page 492].

Permissions

See Table Permissions [page 504].

Placement (Read-only)

Name

Name of the first table object.

Dbspace

Dbspace occupied by the object.

Size

Size of the object.

% File

Percentage of the file used by this object.

First Block

First block used by this object.

Last Block

Last block used by this object.

Constraints

See Table Constraints [page 515]..

Referencing Con
straints

See Table Constraints [page 515]..

Indexes

See Table Indexes [page 541]

Text Indexes

See Table Indexes [page 541]

Triggers (For IQ (cata


log) system store ta
bles only)

See Table Triggers [page 559].

Partitions (For IQ main


store tables only)

The table to be partitioned is empty. See Table Partitions [page 569].

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Row-Level Versioning
(For IQ main store ta
bles only)

Select the Enabled checkbox if you want the table to use row-level versioning to track row
changes for read-write transactions on the table. Deselect the checkbox to disable row-level
versioning. The RLV dbspace must exist before you can enable RLV on tables. The RLV store
dbspace must already exist.

Dependent Views
(Read-only)

Name

Name of the dependent view.

Owner

Owner of the dependent view.

View Type

Indicates if the view is a regular view or materialized view.

Referenced Col
umn

List of referenced table columns in the view.

Dependency Type

Indicates if the dependency is direct or indirect.

Name

Name of the table object.

Type

Type of table object. For example, "column".

Partitions

Partition where this column's data is stored.

Dbspace

Dbspace where the partition (storing the column data) resides.

Table Objects

Description

Note
See Moving Table Objects to Another Dbspace [page 467].
Data (Read-only)

Displays the first 500 rows of data.

Note
For 15.3 and 15.4, requires SELECT permission on the table to view data. For 16.0, also
requires the SELECT ANY TABLE system privilege to view data.
Miscellaneous (Readonly)

Number of rows

Approximate number of rows in the table. To update this value, click


Calculate.

Calculate (For IQ
(catalog) system
store tables only)

Calculates the number of rows in the table.

Approximate number of columns in the table.


Number of Col
umns (For IQ (cat
alog) system
store tables only)
Time Created (For Date and time the table was created.
IQ (catalog) sys
tem store tables
only)
Time Updated
(For IQ (catalog)
system store ta
bles only)

SAP IQ Cockpit
Administer SAP IQ

Date and time the table was last updated.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

473

Page

Property

Description

Amount of space reserved for each table page.


Reserved space
for each table
page. (For IQ (cat
alog) system
store tables only)
Table data is en
crypted (For IQ
(catalog) system
store tables only)

Indicates if the table data is encrypted.

Table is replicat
ing data (For IQ
(catalog) system
store tables only)

Indicates if the table is replicating data.

6. Click OK to update any changes to the database and close the page.

Related Information
Viewing or Modifying Table Index Properties [page 552]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.21 Viewing or Modifying Global Temporary Table


Properties
Display or change the properties of the selected global temporary table.

Prerequisites
Note
The system privileges and permissions required vary by task. Unless otherwise indicated, the following
system privileges and permissions apply.

474

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

View any property page of a global temporary table owned by self none
View any property page of a global temporary table owned by any user none needed
except for the Data page, which requires one of:

DBA authority

SELECT permission on the table

You own the table

Modify any property on the General page one of:

DBA authority

ALTER permission on the table

You own the table

Modify any property on the Miscellaneous page one of:

SELECT permission on the table

You own the table

For permissions needed to modify other table properties, see:

SAP IQ Cockpit
Administer SAP IQ

Table Column Privilege Summary [page 501]

Table Permissions Privilege Summary [page 514]

Table Constraints Privilege Summary [page 536]

Table Index Privilege Summary [page 555]

Table Trigger Privilege Summary [page 566]

Table Partition Privilege Summary [page 587]

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

475

Database Version

Table Privileges Required

SAP IQ 16.0

View any property page of a global temporary table owned by self none
View any property page of a global temporary table owned by any user none needed
except for the Data page, which requires one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Modify the table name on the General page one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

You own the table

Use the Calculate button on the Miscellaneous page one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Modify any other property on the Miscellaneous page for an IQ (catalog) system store
table one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

You own the table

Modify a comment on the General page one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

For privileges needed to modify other table properties, see:

Table Column Privilege Summary [page 501]

Table Permissions Privilege Summary [page 514]

Table Constraints Privilege Summary [page 536]

Table Index Privilege Summary [page 555]

Table Trigger Privilege Summary [page 566]

Table Partition Privilege Summary [page 587]

The SAP IQ system is running, registered, and authenticated.


(Modifying properties only) In a multiplex configuration, the coordinator node is running.

476

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Tables.

IQ Servers

Schema Objects

Tables , and then click Global Temporary

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify table properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Read-only)

Table identifier.

Owner (Read-only)

Database user who owns the table.

Type (Read-only)

Type of table.

Commit Action
(Read-only)

Identifies if the table is Transactional or Non-transactional.

Comment

Text field for adding optional comments.

Columns

See Table Columns [page 492].

Permissions

See Table Permissions [page 504].

Placement (Read-only)

Name

Name of the first table object.

Dbspace

Dbspace occupied by the object.

Size

Size of the object.

% File

Percentage of the file used by this object.

First Block

First block used by this object.

Last Block

Last block used by this object.

Constraints

See Table Constraints [page 515]..

Referencing Con
straints

See Table Constraints [page 515]..

Indexes

See Table Indexes [page 541]

Triggers (For IQ (cata


log) system store ta
bles only)

See Table Triggers [page 559].

Dependent Views
(Read-only)

Name

Name of the dependent view.

Owner

Owner of the dependent view.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

477

Page

Table Objects (For IQ


main store tables only)

Property

Description

View Type

Indicates if the view is a regular view or materialized view.

Referenced Col
umn

List of referenced table columns in the view.

Dependency Type

Indicates if the dependency is direct or indirect.

Name

Name of the table object.

Type

Type of table object. For example, "column".

Partitions

Partition where this column's data is stored.

Dbspace

Dbspace where the partition (storing the column data) resides.

Note
See Moving Table Objects to Another Dbspace [page 467].
Data (Read-only)

Displays the first 500 rows of data.

Note
For 15.3 and 15.4, requires SELECT permission on the table to view data. For 16.0, also
requires the SELECT ANY TABLE system privilege to view data.
Miscellaneous (Readonly)

Number of Col
umns (For IQ (cat
alog) system store
tables only)

Approximate number of columns in the table.

Time Created

Date and time the table was created.

Time Updated

Date and time the table was last updated.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

478

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.9.22 Viewing and Modifying Proxy Table Properties


Display the properties of the selected proxy table. Only the Comment property is editable.

Prerequisites
Note
The system privileges and permissions required vary by task. Unless otherwise indicated, the following
system privileges and permissions apply.
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

View any property page of a proxy table owned by self none needed except for the
Data page, which requires SELECT permission on the base table on the remote server.
View any properties of a proxy table owned by any user none needed except for the
Data page, which requires SELECT permission on the base table on the remote server
along with one of:

DBA authority

SELECT permission on the table

Modify any property on the General or Miscellaneous page one of:

DBA authority

You own the table

For privileges needed to modify other table properties, see:

SAP IQ Cockpit
Administer SAP IQ

Table Column Privilege Summary [page 501]

Table Trigger Privilege Summary [page 566]

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

479

Database Version

Table Privileges Required

SAP IQ 16.0

View any property page of a proxy table owned by self none needed except for the
Data page, which requires SELECT permission on the base table on the remote server.
View any property page of a proxy table owned by any user none needed except for
the Data page, which requires one of:

SELECT ANY TABLE system privilege

SELECT permission on the proxy table

SELECT permission on the base table

You own the table

Use the Calculate button on the Miscellaneous page one of:

SELECT ANY TABLE system privilege

SELECT permission on the proxy table

You own the table

Modify a comment on the General page one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

For privileges needed to modify other table properties, see:

Table Column Privilege Summary [page 501]

Table Trigger Privilege Summary [page 566]

The SAP IQ system is running, registered, and authenticated.


(Modifying properties only) In a multiplex configuration, the coordinator node is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Proxy Tables.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify table properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.

480

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Read-only)

Table identifier.

Owner (Read-only)

Database user who owns the table.

Remote location (Read-only)

Location of the remote table that the


proxy table is based on.

Comment

Text field for adding optional com


ments.

Columns

See Table Columns [page 492].

Triggers (For IQ (catalog) system


store tables only)

See Table Triggers [page 559].

Data (Read-only)

Displays the first 500 rows of data.

Note
Regardless of version, requires SELECT permission on the base table on
the remote server. For 15.3 and 15.4, requires SELECT permission on the
table to view data. For 16.0, also requires the SELECT ANY TABLE system
privilege to view data.
Miscellaneous Read-only)

Number of rows

Approximate number of rows in the


table. To update this value, click
Calculate.

Calculate (For IQ (catalog) system


store tables only)

Calculates the number of rows in the


table.

Number of Columns (For IQ (catalog)


system store tables only)

Approximate number of columns in


the table.

Time Created (For IQ (catalog) sys


tem store tables only)

Date and time the table was created.

Time Updated (For IQ (catalog) sys


tem store tables only)

Date and time the table was last up


dated.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

481

5.9.23 Table Privilege Summary


A list of the system privileges and object permissions required to complete the various table tasks.

Creating a Table
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Base table to be owned by self RESOURCE authority with CREATE permission on the
IQ main store dbspace in which the table is created.
Base table to be owned by any user DBA authority

SAP IQ 16.0

Base table to be owned by self CREATE permission on the dbspace where the table is
created, along with one of:

CREATE TABLE system privilege

CREATE ANY OBJECT system privilege

Base table to be owned by any user CREATE permission on the dbspace where the
table is created along with one of:

CREATE ANY TABLE system privilege

CREATE ANY OBJECT system privilege

Creating a Global Temporary Table


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Global temporary table to be owned by self RESOURCE authority with CREATE per
mission on the IQ main store dbspace in which the table is created.
Global temporary table to be owned by any user DBA authority

SAP IQ 16.0

Global temporary table to be owned by self CREATE TABLE system privilege


Global temporary table to be owned by any user one of:

482

CREATE ANY TABLE system privilege

CREATE ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Creating a Proxy Table


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Proxy table to be owned by self RESOURCE authority with CREATE permission on


the IQ main store dbspace in which the table is created.
Proxy table to be owned by any user DBA authority

SAP IQ 16.0

Proxy table to be owned by self CREATE PROXY TABLE system privilege


Proxy table to be owned by any user one of:

CREATE ANY TABLE system privilege

CREATE ANY OBJECT system privilege

Viewing Table Data in the Execute SQL Windows


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

For the menu option to be enabled requires one of:

DBA authority

SELECT permission on the table

You own the table

Queries execute with the user's current permissions.


SAP IQ 16.0

For the menu option to be enabled requires one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Queries execute with the user's current privileges.

Deleting a Table
Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Administer SAP IQ

DBA authority

You own the table

One of:

DROP ANY TABLE system privilege

DROP ANY OBJECT system privilege

You own the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

483

Generating Table DDL Commands


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Moving a Table to Another Dbspace


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

You own the table and have CREATE permission on the target dbspace

One of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

ALTER permission on the table and CREATE permission on the target dbspace

You own the table and have CREATE permission on the target dbspace

Validating a IQ (Catalog) System Store Table


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

484

DBA authority

VALIDATE authority

VALIDATE ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Setting the Primary Key


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER and REFERENCE permission on the table

You own the table

To create a new or modify an existing primary key one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace where the table resides

ALTER and REFERENCE permission on the table

You own the table

To modify the name only of an existing primary key ALTER ANY INDEX system privi
lege

Setting a Clustered Index


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

You own the table

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

ALTER and REFERENCE permission on the table

You own the table

Moving Table Data from RLV Store to IQ Main Store


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

SAP IQ Cockpit
Administer SAP IQ

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

485

Calculating the Number of Rows in a Table


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SELECT permission on the table

You own the table

One of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Moving Table Objects to Another Dbspace


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

CREATE permission on the target dbspace along with one of:

SAP IQ 16.0

DBA authority

RESOURCE authority with ALTER permission on the table

You own the table

CREATE permission on the target dbspace along with one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

You own the table

Enabling Row-Level Versioning in a Table


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

486

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Viewing or Modifying Base Table Properties


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

View any property page of a base table owned by self none


View any property page of a base table owned by any user none needed except for
the Data page, which requires one of:

DBA authority

SELECT permission on the table

You own the table

Modify any property on the General page one of:

DBA authority

ALTER permission on the table

You own the table

Modify any property on the Miscellaneous page one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

For privileges needed to modify other table properties, see:

SAP IQ Cockpit
Administer SAP IQ

Table Column Privilege Summary [page 501]

Table Permissions Privilege Summary [page 514]

Table Constraints Privilege Summary [page 536]

Table Index Privilege Summary [page 555]

Table Trigger Privilege Summary [page 566]

Table Partition Privilege Summary [page 587]

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

487

Database Version

Table Privileges Required

SAP IQ 16.0

View any property page of a base table owned by self none.


View any property page of a base table owned by any user none needed except for
the Data page, which requires one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Modify the table name on the General page one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

You own the table

Use the Calculate button on the Miscellaneous page one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Modify any other property on the Miscellaneous page for an IQ (catalog) system store
table one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

You own the table

Modify a comment on the General page one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

For privileges needed to modify other table properties, see:

488

Table Column Privilege Summary [page 501]

Table Permissions Privilege Summary [page 514]

Table Constraints Privilege Summary [page 536]

Table Index Privilege Summary [page 555]

Table Trigger Privilege Summary [page 566]

Table Partition Privilege Summary [page 587]

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Viewing or Modifying Global Temporary Table Properties


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

View any property page of a global temporary table owned by self none
View any property page of a global temporary table owned by any user none needed
except for the Data page, which requires one of:

DBA authority

SELECT permission on the table

You own the table

Modify any property on the General page one of:

DBA authority

ALTER permission on the table

You own the table

Modify any property on the Miscellaneous page one of:

SELECT permission on the table

You own the table

For permissions needed to modify other table properties, see:

SAP IQ Cockpit
Administer SAP IQ

Table Column Privilege Summary [page 501]

Table Permissions Privilege Summary [page 514]

Table Constraints Privilege Summary [page 536]

Table Index Privilege Summary [page 555]

Table Trigger Privilege Summary [page 566]

Table Partition Privilege Summary [page 587]

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

489

Database Version

Table Privileges Required

SAP IQ 16.0

View any property page of a global temporary table owned by self none
View any property page of a global temporary table owned by any user none needed
except for the Data page, which requires one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Modify the table name on the General page one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

You own the table

Use the Calculate button on the Miscellaneous page one of:

SELECT ANY TABLE system privilege

SELECT permission on the table

You own the table

Modify any other property on the Miscellaneous page for an IQ (catalog) system store
table one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

You own the table

Modify a comment on the General page one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

For privileges needed to modify other table properties, see:

490

Table Column Privilege Summary [page 501]

Table Permissions Privilege Summary [page 514]

Table Constraints Privilege Summary [page 536]

Table Index Privilege Summary [page 555]

Table Trigger Privilege Summary [page 566]

Table Partition Privilege Summary [page 587]

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Viewing or Modifying Proxy Table Properties


Database Version

Table Privileges Required

SAP IQ 15.3 and 15.4

View any property page of a proxy table owned by self none needed except for the
Data page, which requires SELECT permission on the base table on the remote server.
View any properties of a proxy table owned by any user none needed except for the
Data page, which requires SELECT permission on the base table on the remote server
along with one of:

DBA authority

SELECT permission on the table

Modify any property on the General or Miscellaneous page one of:

DBA authority

You own the table

For privileges needed to modify other table properties, see:

SAP IQ 16.0

Table Column Privilege Summary [page 501]

Table Trigger Privilege Summary [page 566]

View any property page of a proxy table owned by self none needed except for the
Data page, which requires SELECT permission on the base table on the remote server.
View any property page of a proxy table owned by any user none needed except for
the Data page, which requires one of:

SELECT ANY TABLE system privilege

SELECT permission on the proxy table

SELECT permission on the base table

You own the table

Use the Calculate button on the Miscellaneous page one of:

SELECT ANY TABLE system privilege

SELECT permission on the proxy table

You own the table

Modify a comment on the General page one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

For privileges needed to modify other table properties, see:

SAP IQ Cockpit
Administer SAP IQ

Table Column Privilege Summary [page 501]

Table Trigger Privilege Summary [page 566]

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

491

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.9.24 Table Columns


SAP IQ stores data in columns. Add, modify, and delete table columns.

Related Information
Adding a Column [page 493]
Deleting a Column [page 496]
Viewing or Modifying Column Properties [page 498]
Table Column Privilege Summary [page 501]

492

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.9.24.1 Adding a Column


Add a column to a base table or global temporary table.

Prerequisites
Database Version

Table Column Privileges Required

SAP IQ 15.3 and 15.4

Create a column without a primary key or unique constraint you must have one of:

DBA authority

Both ALTER permission on the table

You own the underlying table

Create a column with a primary key or unique constraint you must have one of:

SAP IQ 16.0

DBA authority

Both ALTER and REFERENCE permission on the table

You own the underlying table

Create a column without a primary key or unique constraint you must have one of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace along with one of the following:

ALTER ANY TABLE system privilege

ALTER permission on the underlying table

You own the underlying table

Create a column with a primary key or unique constraint you must have one of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace along with one of the following:

ALTER ANY TABLE system privilege

Both ALTER and REFERENCE permission on the underlying table

You own the underlying table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

493

5. In the left pane, click Columns, then click New in the right pane.
6. On the Column Name page, specify the name of the column and indicate whether the column is to be a
primary key column.
7. On the Data Type page, specify:
Property

Description

Built-in type

A predefined data type for the column. Integers, character strings, and dates are
examples of predefined data types. Default is BIGINT. For some of these types,
you can specify size and scale.
Size length of string columns, or the total number of digits to the left and right
of the decimal point in the result of any decimal arithmetic for numeric col
umns. For numeric columns, the size is also called the PRECISION value.
Scale minimum number of digits after the decimal point when an arithmetic
result is truncated to the maximum PRECISION value.
Units unit corresponding to the data type's size. Possible units include: bits,
bytes, characters, or digits. For CHAR and VARCHAR data types, you can
specify the unit as bytes or characters.

Domain

Select to use a domain. A domain is a named combination of built-in data types,


default value, check condition, and nullability.

Compress values

(Not available for all built-in types) Select to compress column values. If a column
is compressed, database server activities such as indexing, data comparisons, and
statistics generation may be slightly slower if they involve the compressed column
because the values must be compressed when written, and decompressed when
read.

Maintain BLOB indexes for large


value

(Available for character and binary types only.) Select to maintain BLOB indexes
for large values.

8. On the Value page, specify:

494

Property

Description

No default or computed value

(Default) Select this option if the column is not a computed value and
has no default value.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Default Value

Select this option if the column has a default value. If the column is based
on a domain, this setting inherits the domain's default value (if any), but
you can override the value for the column.
User-defined type a custom value (string, number, or other expres
sion) for the default value. If you have based the column on a do
main, you can retain the domain's default value (if any), or override
it for the column.
Literal string specify whether the default value for the column
should be treated as a literal string. By default, this option is se
lected for character columns and domains with a character
base type. You do not need to enclose default text in single
quotes, and escape embedded single quotes or backslashes in
the string.
System-defined (list depends by data type specified) lets you select
a predefined value (for example, current date) for the default value.
If you have based the column on a data type of Domain, you can re
tain the domain's default value (if any) or override it for the column.
Partition Size if you select Global autoincrement, specify a
partition size. The domain of values for that column is parti
tioned. Each partition contains the same number of values.
For example, if you set the partition size for an integer column
in a database to 1000, one partition extends from 1001 to
2000, the next from 2001 to 3000, and so on.

Computed Value

(For IQ (catalog) system store only) Define a computed value for the col
umn. A computed column derives its values from calculations of values
in other columns. Type an expression in the text box to describe the rela
tionship between the other columns and the value that appears in the
computed column.

9. On the Constraints page, specify:


Property

Description

Values can be null

(Default) Select if null values are allowed in the column. If the column is based
on a domain, you can retain the domain's nullability or override it for the col
umn.

Values cannot be null

Select to allow duplicate values, but not allow null values in this column.

Values cannot be null and must be


unique

Select if values in the column cannot be null and must be unique.

10. (IQ main store base tables only.) On the Placement page, select the dbspace where the column is to
reside. Only those dbspaces in read-write mode to which you have permissions appear in the list.
11. (Optional) On the Comment page, add a descriptive comment for the column. Comments help you
organize your database.
12. On the Constraints page, specify:
13. Click OK.
Clicking OK or Apply in the Column Definitions view updates any column changes to the Table Properties
dialog but does not save the changes to the database. You must click OK or Apply on the Table Properties
view to update the database.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

495

14. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.24.2 Deleting a Column


Delete a column from the table. If the table has only one column, you cannot delete it.

Prerequisites
Database Version

Table Column Privileges Required

SAP IQ 15.3 and 15.4

Deleting a column without a primary key or unique constraint you must have one of:

DBA authority

Both ALTER permission on the table

You own the underlying table

Deleting a column with a primary key or unique constraint you must have one of:

SAP IQ 16.0

DBA authority

Both ALTER and REFERENCE permission on the table

You own the underlying table

Deleting a column without a primary key or unique constraint you must have one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the underlying table

You own the underlying table

Deleting a column with a primary key or unique constraint you must have one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

Both ALTER and REFERENCE permission on the underlying table

You own the underlying table

The table has more than one column.


The SAP IQ system is running, registered, and authenticated.
In a multiplex configuration, the coordinator is running.

496

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Columns, then select one or more a columns from the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Delete.

Caution
No confirmation prompt appears before the column is deleted.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

497

5.9.24.3 Viewing or Modifying Column Properties


Display or change the properties of the columns of the selected table.

Prerequisites
Database Version

Table Column Privileges Required

SAP IQ 15.3 and 15.4

View any table column property page none


Modify the Primary key property on the General page you must have one of:

DBA authority

Both ALTER and REFERENCE permission on the table

You own the table

Modify any other table column property you must have one of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

You own the table

View any table column property page none


Modify the Primary key property on the General page you must have one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

Both ALTER and REFERENCE permission on the table

You own the table

Modify a table column comment you must have one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

Modify any other table column property you must have one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

You own the table

The SAP IQ system is running, registered, and authenticated.


(Modifying properties only) In a multiplex configuration, the coordinator node is running.

498

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Columns, select a column in the right pane, and click Edit.
6. View or modify column properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Column Name

Name of the column.

Primary key

indicates you are using the column as a primary key.

Comment

Text field for adding optional comments.

Built-in type

A predefined data type for the column. Integers, character


strings, and dates are examples of predefined data types. Default
is BIGINT. For some of these types, you can specify size and
scale.

Data Type

Size length of string columns, or the total number of digits to


the left and right of the decimal point in the result of any dec
imal arithmetic for numeric columns. For numeric columns,
the size is also called the PRECISION value.
Scale minimum number of digits after the decimal point
when an arithmetic result is truncated to the maximum PRE
CISION value.
Units unit corresponding to the data type's size. Possible
units include: bits, bytes, characters, or digits. For CHAR and
VARCHAR data types, you can specify the unit as bytes or
characters.

SAP IQ Cockpit
Administer SAP IQ

Domain

Select to use a domain. A domain is a named combination of


built-in data types, default value, check condition, and nullability.

Compress values

(Not available for all built-in types) Select to compress column


values. If a column is compressed, database server activities such
as indexing, data comparisons, and statistics generation may be
slightly slower if they involve the compressed column because
the values must be compressed when written, and decompressed
when read.

Maintain BLOB indexes


for large value

(Available for character and binary types only.) Select to maintain


BLOB indexes for large values.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

499

Page

Property

Description

Value

No default or computed
value

(Default) Select this option if the column is not a computed value


and has no default value.

Default Value

Select this option if the column has a default value. If the column
is based on a domain, this setting inherits the domain's default
value (if any), but you can override the value for the column.
User-defined type a custom value (string, number, or other
expression) for the default value. If you have based the col
umn on a domain, you can retain the domain's default value
(if any), or override it for the column.
Literal string specify whether the default value for the
column should be treated as a literal string. By default,
this option is selected for character columns and do
mains with a character base type. You do not need to
enclose default text in single quotes, and escape em
bedded single quotes or backslashes in the string.
System-defined (list depends by data type specified) lets
you select a predefined value (for example, current date) for
the default value. If you have based the column on a data
type of Domain, you can retain the domain's default value (if
any) or override it for the column.
Partition Size if you select Global autoincrement,
specify a partition size. The domain of values for that
column is partitioned. Each partition contains the same
number of values.
For example, if you set the partition size for an integer
column in a database to 1000, one partition extends
from 1001 to 2000, the next from 2001 to 3000, and so
on.

Constraints

Computed Value

(For IQ (catalog) system store only) Define a computed value for


the column. A computed column derives its values from calcula
tions of values in other columns. Type an expression in the text
box to describe the relationship between the other columns and
the value that appears in the computed column.

Values can be null

(Default) Select if null values are allowed in the column. If the col
umn is based on a domain, you can retain the domain's nullability
or override it for the column.

Values cannot be null

Select to allow duplicate values, but not allow null values in this
column.

Values cannot be null and Select if values in the column cannot be null and must be unique.
must be unique
Placement

Select the placement de


tails for this column

(For non-global tables within the IQ main store only) The data
base server places the column in the selected dbspace. Only
those dbspaces in read-write mode, and those dbspaces for
which the user has permissions, appear in the list.

7. Click OK in the Column Properties view.

500

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Note
If you modified any properties, clicking OK or Apply in the Column Properties view updates the changes
to the Table Properties dialog, but does not save the changes to the database. They remain "inprogress" until you click Apply or OK in the Table Properties view.
8. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.24.4 Table Column Privilege Summary


A list of the system privileges and object permissions required to complete the various table column tasks.

Adding a Column
Database Version

Table Column Privileges Required

SAP IQ 15.3 and 15.4

Create a column without a primary key or unique constraint you must have one of:

DBA authority

Both ALTER permission on the table

You own the underlying table

Create a column with a primary key or unique constraint you must have one of:

SAP IQ 16.0

DBA authority

Both ALTER and REFERENCE permission on the table

You own the underlying table

Create a column without a primary key or unique constraint you must have one of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace along with one of the following:

ALTER ANY TABLE system privilege

ALTER permission on the underlying table

You own the underlying table

Create a column with a primary key or unique constraint you must have one of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace along with one of the following:

SAP IQ Cockpit
Administer SAP IQ

ALTER ANY TABLE system privilege

Both ALTER and REFERENCE permission on the underlying table

You own the underlying table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

501

Deleting a Column
Database Version

Table Column Privileges Required

SAP IQ 15.3 and 15.4

Deleting a column without a primary key or unique constraint you must have one of:

DBA authority

Both ALTER permission on the table

You own the underlying table

Deleting a column with a primary key or unique constraint you must have one of:

SAP IQ 16.0

DBA authority

Both ALTER and REFERENCE permission on the table

You own the underlying table

Deleting a column without a primary key or unique constraint you must have one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the underlying table

You own the underlying table

Deleting a column with a primary key or unique constraint you must have one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

Both ALTER and REFERENCE permission on the underlying table

You own the underlying table

Viewing or Modify Column Properties


Database Version

Table Column Privileges Required

SAP IQ 15.3 and 15.4

View any table column property page none


Modify the Primary key property on the General page you must have one of:

DBA authority

Both ALTER and REFERENCE permission on the table

You own the table

Modify any other table column property you must have one of:

502

DBA authority

ALTER permission on the table

You own the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Table Column Privileges Required

SAP IQ 16.0

View any table column property page none


Modify the Primary key property on the General page you must have one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

Both ALTER and REFERENCE permission on the table

You own the table

Modify a table column comment you must have one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

Modify any other table column property you must have one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

You own the table

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

503

5.9.25 Table Permissions


Grant or revoke table permissions to users and roles.

Related Information
About the Tables Permissions List [page 504]
Following the Table Permissions Grant Trail [page 506]
Granting Permissions on a Table [page 507]
Removing Permissions from a Table [page 509]
Adding Administrative Rights to a Granted Table Permission [page 511]
Removing Administrative Rights Only from a Table Permission [page 512]
Manage Permissions on a Proxy Table [page 513]
Table Permissions Privilege Summary [page 514]

5.9.25.1 About the Tables Permissions List


The Tables permissions list displays details on the specific object permissions directly granted to users or
roles for a single view.
There are several table object permissions, which can be granted with or with out administrative rights. Some
permissions can be granted at table level only, while others can be granted at either the table or column level.
SELECT table or column level
INSERT table level only
DELETE table level only
UPDATE table or column level
ALTER table level only
REFERENCE table or column level
LOAD table level only
TRUNCATE table level only
You can grant object permissions in several ways:
You own the object.
You are granted the MANAGE ANY OBJECT PRIVILEGE system privilege.
You are indirectly granted specific permissions through membership in a role to which permissions are
directly or indirectly granted.
You are directly granted specific permissions.
Users or roles with object ownership or the MANAGE ANY OBJECT PRIVILEGE system privilege are
automatically granted all possible object permissions with administrative rights.
You can grant object permissions with or without administrative rights. The grantee can perform authorized
tasks requiring the permission, but cannot in turn grant the permission to another user or role when granted

504

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

without administrative rights. The grantee can do both when granted with administrative rights (With grant
option).
The permissions list only lists those permissions granted directly to user or roles. The list indicates which
columns the permissions are granted to, to whom (grantee), by who (grantor), and the permissions and their
corresponding administrative rights. The permissions list does not list object permissions obtained through
ownership, the MANAGE ANY SYSTEM OBJECT system privilege, or role membership.
The permissions list only lists those permissions granted directly to user or roles. The list indicates which
columns the permissions are granted to, to whom (grantee), by who (grantor), and the permissions and their
corresponding administrative rights. The permissions list does not list object permissions obtained through
ownership, the MANAGE ANY SYSTEM OBJECT system privilege, or role membership.
Permissions granted to all columns on the table are listed first. The remainder of the list is sorted
alphabetically, by column name.
All members of the role inherit permissions granted to a role, including administrative rights. The role, not the
users indirectly granted the permissions through inheritance, appears on the permissions list.
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.
If multiple permissions are granted, you can revoke some or all of the permissions. However, if you revoke a
permission granted administrative rights, and the grantee has granted the permission to other users, who in
turn have granted it to other users, and so on, every grantee in the chain who has received the permission
indirectly, with or without administrative rights, also has their permission revoked. For example, UserA is
granted the SELECT permission with the With grant option. UserA grants SELECT to UserB with the
With grant option. UserB grants SELECT to UserC and UserD without administrative rights and to UserE
with administrative rights. When you revoke the SELECT permission from UserA, it is also revoked for UserB,
UserC, UserD and UserE.
Permissions can be granted on the same column, to the same grantee, by multiple grantors, resulting in the
same grantee appearing multiple times on the list. If the same permission is granted to the same grantee, with
and without administrative rights, the grant with the administrative right takes precedence.
For example, Jane is granted permissions by both Bob and Alex. Bob grants Jane permissions on all
columns, while Alex only grants permissions on column C. Jane has INSERT, UPDATE, and REFERENCE
permissions without administrative rights on all columns in the table (granted by Bob). However, she also has
REFERENCE permission on column C only (granted by Alex). When the same permission is granted with
different administrative rights the higher administrative right takes precedence, at the specific level.
Therefore, the REFERENCE permission with administrative rights only applies to column C on the table.
When you revoke a permission granted multiple times, the permission is revoked from all instances, regardless
of administrative rights. For example, Manager1 grants User2 INSERT with administrative rights. User1 also
grants INSERT to User2, without administrative rights. Both instances of INSERT are revoked for User2,
regardless of which instance of INSERT is revoked.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

505

5.9.25.2 Following the Table Permissions Grant Trail


Before revoking a grantee's permission, you need to identify grantees directly or indirectly granted the
permission from the original grantee.
The grant chain traces how a grantee has in turn granted a permission to other grantees.
Consider the following:
Bob is granted all permissions with administrative rights to all columns in the table.
Bob grants Joe SELECT permission without administrative rights to column B only. Bob also grants Jane
SELECT and INSERT permissions with administrative rights to all columns.
Jane grants Mike and Joe SELECT and REFERENCE permissions with administrative rights to columns A
and B. Jane also grants Beth and Mary UPDATE permissions without administrative rights on column C.

Note

Joe has now been granted the SELECT permission twice, with different administrative rights, by
different grantors, to different columns.
Joe grants Beth UPDATE permission without administrative rights to all columns in the table.

Note
Beth has now been granted the UPDATE permission twice, by different grantors, at both the column
and table level.
Mike grants Sarah ALTER permission with administrative rights to all columns in the table. Mike also
grants Alice ALTER permission without administrative rights, again to the whole table.
Sarah grants Alex and Beth ALTER and UPDATE permissions without administrative rights on all
columns.

Note
Beth has now been granted the ALTER permission multiple times, by different grantors, on different
columns.
You want to revoke SELECT permission from Jane. To determine the potential impact on other users and
roles, do the following:

Tip
For complex grant trails, create a tree diagram to visually track the grant chain.
1. Sort the list by Grantor and locate all instances of administrative grants of SELECT by Jane.

Note
There are four instances of Jane granting permissions. Since we are revoking the SELECT permission
only, only those grants involving the SELECT permission will be impacted. Therefore, revoking Jane's
SELECT permission will also revoke the permission from Mike and Joe, on columns A and B. Of the
SELECT permissions, you only need to follow those involving administrative rights.

506

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

2. Locate Mike in the Grantor column.

Note
Mike granted ALTER to Sarah and Alice. Both were granted the SELECT permission as an indirect
(once removed) result of Jane. It does not matter whether the grant included administrative rights.
Therefore, their SELECT permission will also be revoked when Jane's is revoked. Since Alice was
granted SELECT without administrative rights, her grant chain ends. Since Sarah was granted SELECT
with administrative rights, her grant chain continues.
3. Locate Sarah in the Grantor column.

Note
Sarah granted ALTER and UPDATE to Beth and Alex. Both were granted the SELECT permission as
an indirect (twice removed) result of Jane. Again, administrative rights do not matter, and since neither
grant was with administrative rights, the grant chain ends.
To summarize, revoking Jane's SELECT permission revokes the permission from Mike, Joe, Beth, and Mary,
through direct granting or permissions by Jane, but also revokes the permission from Alice, Sarah, Alex,
and Role1 as a result of indirect from Jane.
It is important to note that it is possible for a user to retain an "identified" permission after revoke it the same
permission was granted by multiple grantors. In this scenario, both Bob and Jane granted the SELECT
permission to Joe, so Joe retains the SELECT permission granted by Bob. If a grantee has been granted
multiple permissions, only those permissions explicitly selected are revoked. In this scenario, only the SELECT
permission was revoked from Joe. The REFERENCE permission remains granted, even though it was also
granted by Jane.

5.9.25.3 Granting Permissions on a Table


Grant table permissions to users and roles.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

PERMS ADMIN authority

You have administrative rights (with grant option) to the permission

You own the database object

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

507

Database Version

Database Object Privileges Required

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions, then click Grant in the right pane.
6. On the Welcome page, indicate whether the permission is being granted to users or roles/groups.
7. On the Grantees page, select one or more grantees. Click the box in the header row to select all available
grantees.
8. On the Columns page, select one or more columns for the selected table to apply the permissions to. Click
the box in the header row to select all available columns.
9. On the Permissions page, select one or more permissions. Click the box in the header row to select all
available permissions.
10. (Optional) Click With grant option to grant the selected permissions administrative rights.

Note
The With grant option option applies to all selected permissions. You cannot apply the With
grant option option to individual permissions.
11. Click Finish.
12. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

508

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.9.25.4 Removing Permissions from a Table


Remove table permissions from users and roles.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You have administrative rights (with grant option) to the permission

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Context
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.
If multiple permissions are granted, you can revoke some or all of the permissions. However, if you revoke a
permission granted administrative rights, and the grantee has granted the permission to other users, who in
turn have granted it to other users, and so on, every grantee in the chain who has received the permission
indirectly, with or without administrative rights, also has their permission revoked. For example, UserA is
granted the SELECT permission with the With grant option. UserA grants SELECT to UserB with the
With grant option. UserB grants SELECT to UserC and UserD without administrative rights and to UserE
with administrative rights. When you revoke the SELECT permission from UserA, it is also revoked for UserB,
UserC, UserD and UserE.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

509

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
A list of permissions currently granted (regardless of administrative rights) appears..
6. In the right pane, select a grantee granted permissions to be revoked, and click Revoke.
7. Select one or more permissions to revoke, or click the box in the header row to select all available
permissions.

Caution
Revoking permissions may result in unexpected revocation from other users, roles, or groups. See
Followng Table Permission Grant Trail.
8. Click Finish.
9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

510

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.9.25.5 Adding Administrative Rights to a Granted Table


Permission
Add administrative rights only to a granted table permission.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables and Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
A list of permissions currently granted (regardless of administrative rights) appears..
6. In the right pane, select the grantee to have administrative rights granted. and then click Grant in the right
pane. If the grantee appears on the list multiple times with the same permission granted, it does not
matter which instance is selected.
7. On the Welcome page, indicate whether the grantee is a user or role.
8. On the Grantees page, select the grantee..
9. On the Permissions page, select the permissions to which administrative rights are to be granted.
10. Click With grant option to grant the selected permissions administrative rights.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

511

Note
The With grant option option applies to all selected permissions. You cannot apply the With
grant option option to individual permissions.
11. Click Finish.
12. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.25.6 Removing Administrative Rights Only from a Table


Permission
Remove administrative rights only from a granted table permission.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
You are logged in as the original grantor of the permission with administrative rights to be removed.

Context
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.

512

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Temporary Tables, or Proxy Tables.

Schema Objects

Tables , and then click Tables, Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions, then click Grant in the right pane.
6. On the Welcome page, indicate whether the grantee is a user or role.
7. On the Grantees page, select the grantee.
8. On the Permissions page, select the permissions from which administrative rights are being revoked.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.25.7 Manage Permissions on a Proxy Table


The ability to grant object-level permissions at the proxy table level is not implemented in this release of SAP
IQ Cockpit. You can, however, grant these permissions at the user or role level.
This means that you cannot grant proxy table permissions to multiple users and roles at the same time. They
must be granted one user or role at a time.
Follow the steps under Role-Based Table and Column Permissions to grant and revoke proxy table object level
permissions. Alternately, at the SQL level, you can execute a GRANT object-level permissions statement.

Related Information
Adding Permissions on a Table or Column to a User or Role [page 907]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

513

Removing Permissions on a Table or Column from a User or Role [page 909]


Adding Administrative Rights on a Granted Table or Column Permission to a User or Role [page 911]
Removing Administrative Rights Only on a Table or Column Permission from a User or Role [page 912]

5.9.25.8 Table Permissions Privilege Summary


A list of the system privileges and object permissions required to complete the various table permission tasks.

Grant and Revoke Permissions on a Table


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You have administrative rights (with grant option) to the permission

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

Adjust Administration Permissions on a Table


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

Related Information
Adding a System Privilege to a Role-Based User [page 819]

514

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Adding a System Privilege to a User-Extended Role [page 849]


Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.9.26 Table Constraints


Constraints help to ensure that the data entered in the table is correct. Constraints also provide information to
SAP IQ that boosts performance.
SAP IQ does not allow the creation of a check constraint that it cannot evaluate, such as those composed of
user-defined functions, proxy tables, or non-SAP IQ tables. Constraints that cannot be evaluated are detected
the first time the table on which the check constraint is defined is loaded or modified.

Note
SAP IQ does not allow check constraints containing:
Subqueries
Expressions specifying a host language parameter, a SQL parameter, or a column as the target for a
data value
Set functions
Invocations of nondeterministic functions or functions that modify data

Related Information
Creating a Column Check Constraint [page 516]
Creating a Foreign Key Constraint [page 518]
Creating a Table Check Constraint [page 521]
Creating a Unique Constraint [page 523]
Deleting a Table or Column Check Constraint [page 524]
Deleting a Primary, Foreign, or Unique Key Constraint [page 526]
Rebuilding a Unique, Primary or Foreign Key Constraint [page 527]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

515

Validating a Unique, Primary or Foreign Key Constraint [page 528]


Generating Constraint DDL Commands [page 529]
Viewing or Modifying Constraint Properties [page 530]
Table Constraints Privilege Summary [page 536]

5.9.26.1 Creating a Column Check Constraint


A column check constraint enforces a specified condition on a column.

Prerequisites
Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER permission on the underlying table

You own the underlying table

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

You have ALTER permission on the underlying table

You own the underlying table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Constraints, then click New in the right pane.
6. On the Welcome page, select Column check constraint.
7. On the Constraint Name page, specify:

516

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

What do you want to name the new column check con


straint?

Specify a descriptive name for the column check con


straint.

For which column do you want to create the new check


constraint?

Filter the Name, Primary Key, Data Type, Size, and Scale
columns to locate the desired column. Select a single col
umn you want to create the constraint on.

8. On the Definition page, specify the SQL definition of the check constraint.
Use this example as a model when specifying a definition:
This example adds a constraint on the Employees table to ensure that the <TerminationDate> is
always later than, or equal to, the <StartDate>.
CHECK(TerminationDate >= StartDate);
9. Click Finish.

Tip
Although the Create Constraint Wizard is closed, the constraint creation process is not complete until
you click Apply and OK on the Table Properties view.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

517

5.9.26.2 Creating a Foreign Key Constraint


A foreign key constraint enforces a restriction on a column specifying how the data in one table relates to the
data in another table, or the same table.

Prerequisites
Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

ALTER permission on the derived table

You own the derived table

In addition, if you do not have DBA authority, you must also have one of:

REFERENCE permission on the base table

You own the base table

Finally, if you do not have DBA authority, you must also have one of:

SAP IQ 16.0

REFERENCE permission on the derived table (to index it)

You own the derived table

One of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace the table is defined on, along with one of:

ALTER ANY TABLE system privilege

ALTER permission on the derived table

You own the derived table

You must also have one of:

CREATE ANY INDEX system privilege

CREATE ANY OBJECT system privilege

REFERENCE permission on the base table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
If you want the foreign key to reference a unique constraint, the unique constraint must exist.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:

518

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Click the arrow to the right of the name.


Click the Actions button.
4. Select Properties.
5. In the left pane, select Constraints, then click New in the right pane.
6. On the Welcome page, select Foreign key constraint.
7. On the Table page, select the table you want the foreign key to refer to:
Property

Description

To which table do you want this foreign key to refer?

Filter the Name and Owner columns to locate the desired


table. Select a single table you want the foreign key to re
fer to.

What do you want to name the new foreign key?

Specify a descriptive name for the foreign key.

8. On the Reference page, specify:


Property

Description

Do you want this foreign key to reference the primary key or a unique constraint?
Primary key

Select if you want the foreign key to


reference the primary key.

Unique constraint

Select if you want the foreign key to


reference an existing unique con
straint. Select the unique constraint
from the list.

For each primary key column in the referenced table, you must specify the foreign column that it should reference or
choose to add a new column to the table.
Filter the Foreign Column, Order, and Primary Key Column to locate the de
sired column.

Add column

Foreign Column

Select the foreign column.

Order

Select ascending or descending or


der.

(Only displays if no exact match is found for the data type, size, scale, and
name of the primary key column) Adds a new primary key column.

9. On the Referential Integrity page, specify:


Property

Description

Update action
Not permitted

SAP IQ Cockpit
Administer SAP IQ

(Default) Prevents updates of the as


sociated primary table's primary key
value if there are no corresponding
foreign keys.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

519

Property

Description
Set values to null

Sets all foreign keys that reference


the primary key of the associated pri
mary table to NULL. All foreign key
columns must have the Allow

null option enabled to use this op


tion.
Cascade values

Sets all foreign keys that reference


the modified primary key to the de
fault value for that column (as speci
fied in the table definition).

Set values to default

Sets foreign key values that match


the updated or deleted primary key
value to values specified in the DE
FAULT clause of each foreign key col
umn. To use this option, the foreign
key columns must all have default val
ues..

Not permitted

(Default) Prevents updates of the as


sociated primary table's primary key
value if there are no corresponding
foreign keys.

Set values to null

Sets all foreign keys that reference


the primary key of the associated pri
mary table to NULL. All foreign key
columns must have the Allow

Delete action

null option enabled to use this op


tion.

Check only on a commit

Cascade values

Sets all foreign keys that reference


the modified primary key to the de
fault value for that column (as speci
fied in the table definition).

Set values to default

Sets foreign key values that match


the updated or deleted primary key
value to values specified in the DE
FAULT clause of each foreign key col
umn. To use this option, the foreign
key columns must all have default val
ues.

Force the database to wait for a COMMIT before checking the integrity of the
foreign key, overriding the setting of the wait_for_commit database op
tion.

10. (IQ (catalog) system store tables only) On the Clustered Index page, specify if you want to make the
constraint's underlying index a clustered index. Clustered indexes can improve performance.
11. (Optional) On the Comment page, add a descriptive comment. Comments help you organize your
database.
12. Click Finish.

520

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Tip
Although the Create Constraint Wizard is closed, the constraint creation process is not complete until
you click Apply and OK on the Table Properties view.
13. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.26.3 Creating a Table Check Constraint


A table check constraint ensures that no row in a table violates the constraint, which may include more than
one column in its specification.

Prerequisites
Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER permission on the underlying table

You own the underlying table

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

You have ALTER permission on the underlying table

You own the underlying table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

SAP IQ Cockpit
Administer SAP IQ

IQ Servers

Schema Objects

Tables , and then click Tables or Global

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

521

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Constraints, then click New in the right pane.
6. On the Welcome page, specify a Table check key constraint.
7. On the Constraint Name page, enter a descriptive name for the check constraint.
8. On the Definition page, specify the SQL definition of the check constraint.

Tip
The table check constraint definition can include multiple columns.
Use this example as a model when specifying a definition:
This example adds a constraint on the Employees table to ensure that the <TerminationDate> is
always later than, or equal to, the <StartDate>.
CHECK(TerminationDate >= StartDate);
9. (Optional) On the Comment page, add a descriptive comment. Comments help you organize your
database.
10. Click Finish.

Tip
Although the Create Constraint Wizard is closed, the constraint creation process is not complete until
you click Apply and OK on the Table Properties view.
11. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

522

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.9.26.4 Creating a Unique Constraint


The unique constraint specifies that one or more columns uniquely identify each row in the table.

Prerequisites
Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER and REFERENCE permission on the underlying table

You own the underlying table

One of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace the table is defined on, along with one of:

ALTER ANY TABLE system privilege

ALTER and REFERENCE permission on the underlying table

You own the underlying table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Context
The unique constraint is essentially the same as the primary key constraint, except that you can specify more
than one unique constraint in a table. Columns must not contain any NULL values.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Constraints, then click New in the right pane.
6. On the Welcome page, select Unique constraint.
7. (Optional) On the Constraint Name page, enter a name for the unique constraint. If you do not specify a
name, the system generates one automatically.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

523

8. On the Columns page, specify:


Property

Description

Add Asc. >>

Moves columns from the Available Columns pane to the


Selected Columns pane, in ascending order.

Add Desc. >>

(IQ (catalog) system store tables only.) Moves columns


from the Available Columns pane to the Selected Col
umns pane, in descending order.

<< Remove

Moves columns from the Selected Columns pane to the


Available Columns pane.

9. (IQ (catalog) system store tables only) On the Clustered Index page, specify if you want to make the
constraint's underlying index a clustered index. Clustered indexes can improve performance.
10. (Optional) On the Comment page, add a descriptive comment. Comments help you organize your
database.
11. Click Finish.

Tip
Although the Create Constraint Wizard is closed, the constraint creation process is not complete until
you click Apply and OK on the Table Properties view.
12. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.26.5 Deleting a Table or Column Check Constraint


Delete a table or column check constraint from a table.

Prerequisites
Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

524

DBA authority

ALTER permission on the underlying table

You own the underlying table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Table Constraint Privileges Required

SAP IQ 16.0

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the underlying table

You own the underlying table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Constraints, then select one or more table or column check constraints from the
right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Delete.
The selected constraints are removed from the list, but are not permanently deleted until you click OK or
Apply on the Tables Properties view.

Note
Different system privileges are required to delete different constraint types. If you do not have sufficient
privilege to delete a selected constraint, the Delete button is unavailable.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

525

5.9.26.6 Deleting a Primary, Foreign, or Unique Key


Constraint
Delete a primary, foreign, or unique key constraint from a table.

Prerequisites
Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER and REFERENCE permission on the underlying table

You own the underlying table

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER and REFERENCE permission on the underlying table

You own the underlying table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Constraints, then select one or more primary, foreign, or unique key constraints
from the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Delete.
The selected constraints are removed from the list, but are not permanently deleted until you click OK or
Apply on the Tables Properties view.

526

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Note
Different system privileges are required to delete different constraint types. If you do not have sufficient
privilege to delete a selected constraint, the Delete button is unavailable.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.26.7 Rebuilding a Unique, Primary or Foreign Key


Constraint
Rebuild a unique, primary, or foreign key constraint on a IQ (catalog) system store table.

Prerequisites
Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

REFERENCE permission on the underlying table

You own the underlying table

One of:

ALTER ANY OBJECT system privilege

ALTER ANY INDEX system privilege

REFERENCE permission on the underlying table

You own the underlying table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The table exists in the IQ (catalog) system store.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

SAP IQ Cockpit
Administer SAP IQ

IQ Servers

Schema Objects

Tables , and then click Tables or Global

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

527

3. In the right pane, select an IQ (catalog) system store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Constraints, then select one or more unique, primary, or foreign key constraints in
the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Rebuild.
The Rebuild Constraint view appears indicating the rebuilding status.

Note
Not all constraints can be rebuilt. If a selected constraint cannot be rebuild, the Rebuild button is
unavailable.
7. Click OK.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.26.8 Validating a Unique, Primary or Foreign Key


Constraint
Check the validity of unique, primary, or foreign key constraint on IQ (catalog) system store table.

Prerequisites
Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

VALIDATE authority

VALIDATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


The table exists in the IQ (catalog) system store.

528

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an IQ (catalog) system store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Constraints, then select one or more unique, primary, or foreign key constraint.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Validate.
The Validate Constraint view appears indicating the validation status.

Note
Not all constraints can be rebuilt. If a selected constraint cannot be rebuilt, the Validate button is
unavailable.
7. Click OK.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.26.9 Generating Constraint DDL Commands


Display the data description language SQL code for adding a constraint to a table. The DDL can be a useful
reference and training tool.

Prerequisites
Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

529

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Constraints, then select one or more constraints from the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Generate DDL.
The DDL window shows the SQL code used to add the constraint to the table.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.26.10 Viewing or Modifying Constraint Properties


View constraint details or change the constraint details and constraint definition of an existing constraint.

Prerequisites
Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

View table constraint properties none


Modify comment on foreign key or unique constraint one of:

530

DBA authority

ALTER permission on the underlying table

You own the underlying table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Table Constraint Privileges Required

SAP IQ 16.0

View any table constraint property page none


Modify the comment on a foreign or primary key constraint one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

Modify the comment on a unique key constraint one of:

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

Modify the definition of a table or column check constraint one of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the table

You own the table

Modify any foreign key constraint property on the Action page one of:

CREATE ANY OBJECT system privilege

CREATE ANY INDEX system privilege

You must also have one of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the underlying table

You own the table

Modify any other property of a primary, foreign or unique key, table check or column
check constraint one of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the underlying table

You own the underlying table

The SAP IQ system is running, registered, and authenticated.


(Modifying properties only) In a multiplex configuration, the coordinator node is running.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

531

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Constraints, select a constraint in the right pane, and click Edit.
6. View or modify constraint properties.
The properties differ depending on the constraint type.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Table 22: Column Check Constraint Properties
Property

Description

Constraint Name

Name of the column check constraint.

Type

(Read-only) Type of constraint.

Table

(Read-only) Name of the table the constraint is associ


ated with.

Constraint Definition

SQL definition of the column check constraint.

Table 23: Foreign Key Constraint Properties


Page

Property

Description

General

Name

Name of the foreign key constraint.

Unique (Read-only)

Indicates if the foreign key is unique.

Foreign table (Readonly)

Name and owner of the table the foreign key is associated with.

Foreign index (Readonly)

Name of the index used to enforce the foreign key.

Primary constraint
(Read-only)

Name of the primary key or unique constraint that the foreign


key references.

Primary constraint
type (Read-only)

Type of constraint the foreign key references. This can only be a


primary key or a unique constraint.

Primary table (Readonly)

Name of the table containing the primary key in the foreign key
relationship.

Primary index (Read- Name of the index used to maintain the primary key or unique
only)
constraint.
Comment

532

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Text field for adding optional comments.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Actions

Allow null values

Determines whether the foreign key columns allow NULL values.


To use this option, the foreign key columns must all have the
Allow Nulls option enabled.
Match type for the foreign key determines what is considered a
match when using a multi-column foreign key where NULL val
ues are allowed. This only applies if the foreign key allows NULL.

Update Action

Simple

A match occurs for a row in


the referencing table if at
least one column in the key
is NULL, or all the column
values match the corre
sponding column values
present in a row of the ref
erenced table.

Full

A match occurs for a row in


the referencing table if all
column values in the key
are NULL, or if all of the col
umn values match the val
ues present in a row of the
referenced table.

Defines the behavior of the table when a user tries to update val
ues in the foreign key.
Not permitted

(Default) Prevents updates


of the associated primary
table's primary key value if
there are no corresponding
foreign keys.

Set values to null

Sets all foreign keys that


reference the primary key
of the associated primary
table to NULL. All foreign
key columns must have the
Allow null option ena
bled to use this option.

Cascade values

SAP IQ Cockpit
Administer SAP IQ

Sets all foreign keys that


reference the modified pri
mary key to the default
value for that column (as
specified in the table defini
tion).

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

533

Page

Property

Description
Set values to default

Delete Action

Sets foreign key values that


match the updated or de
leted primary key value to
values specified in the DE
FAULT clause of each for
eign key column. To use
this option, the foreign key
columns must all have de
fault values..

Defines the behavior of the table when a user tries to delete


data.
Not permitted

(Default) Prevents updates


of the associated primary
table's primary key value if
there are no corresponding
foreign keys.

Set values to null

Sets all foreign keys that


reference the primary key
of the associated primary
table to NULL. All foreign
key columns must have the
Allow null option ena
bled to use this option.

Cascade values

Sets all foreign keys that


reference the modified pri
mary key to the default
value for that column (as
specified in the table defini
tion).

Set values to default

Sets foreign key values that


match the updated or de
leted primary key value to
values specified in the DE
FAULT clause of each for
eign key column. To use
this option, the foreign key
columns must all have de
fault values.

Check only on a com Force the database to wait for a COMMIT before checking the in
mit
tegrity of the foreign key, overriding the setting of the
wait_for_commit database option.
Columns (Read-only)

Column details for columns constrained by the foreign key constraint.

Table 24: Table Check Constraint Properties

534

Property

Description

Constraint Name

Name of the column check constraint.

Type (Read-only)

Type of constraint.

Table (Read-only)

Name of the table the constraint is associated with.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Constraint Definition

SQL definition of the table check constraint.

Table 25: Unique Constraint Properties


Page

Property

Description

General

Name

Name of the unique constraint.

Index (Read-only)

Name of the index is associated with.

Comment

Text field for adding optional com


ments.

Columns (Read-only)

Column details for the column contained by the unique constraint.

Table 26: Primary Key Constraint Properties


Page

Property

Description

General

Name

Name of the primary key.

Index (Read-only)

Name of the index is associated with.

Comment

Text field for adding optional com


ments.

Columns (Read-only)

Column details for the column contained by the primary key constraint.

7. Click OK in the Constraints Properties view.

Note
If you modified any properties, clicking OK or Apply in the Constraints Properties view saves the
changes, but does not update them to the database. They remain "in-progress" until you click Apply or
OK in the Table Properties view.
8. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

535

5.9.26.11 Table Constraints Privilege Summary


A list of the system privileges and object permissions required to complete the various table constraints tasks.

Creating a Column Check Constraint


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER permission on the underlying table

You own the underlying table

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

You have ALTER permission on the underlying table

You own the underlying table

Creating a Foreign Key Constraint


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

ALTER permission on the derived table

You own the derived table

In addition, if you do not have DBA authority, you must also have one of:

REFERENCE permission on the base table

You own the base table

Finally, if you do not have DBA authority, you must also have one of:

536

REFERENCE permission on the derived table (to index it)

You own the derived table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Table Constraint Privileges Required

SAP IQ 16.0

One of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace the table is defined on, along with one of:

ALTER ANY TABLE system privilege

ALTER permission on the derived table

You own the derived table

You must also have one of:

CREATE ANY INDEX system privilege

CREATE ANY OBJECT system privilege

REFERENCE permission on the base table

Creating a Table Check Constraint


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER permission on the underlying table

You own the underlying table

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

You have ALTER permission on the underlying table

You own the underlying table

Creating a Unique Constraint


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER and REFERENCE permission on the underlying table

You own the underlying table

One of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace the table is defined on, along with one of:

SAP IQ Cockpit
Administer SAP IQ

ALTER ANY TABLE system privilege

ALTER and REFERENCE permission on the underlying table

You own the underlying table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

537

Deleting a Table or Column Check Constraint


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER permission on the underlying table

You own the underlying table

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the underlying table

You own the underlying table

Deleting a Unique, Primary or Foreign Key Constraint


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

ALTER and REFERENCE permission on the underlying table

You own the underlying table

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER and REFERENCE permission on the underlying table

You own the underlying table

Rebuilding a Unique, Primary or Foreign Key Constraint


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

538

DBA authority

REFERENCE permission on the underlying table

You own the underlying table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Table Constraint Privileges Required

SAP IQ 16.0

One of:

ALTER ANY OBJECT system privilege

ALTER ANY INDEX system privilege

REFERENCE permission on the underlying table

You own the underlying table

Validating a Constraint
Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

VALIDATE authority

VALIDATE ANY OBJECT system privilege

Generating Constraint DDL Commands


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Constraint Properties


Database Version

Table Constraint Privileges Required

SAP IQ 15.3 and 15.4

View table constraint properties none


Modify comment on foreign key or unique constraint one of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

ALTER permission on the underlying table

You own the underlying table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

539

Database Version

Table Constraint Privileges Required

SAP IQ 16.0

View any table constraint property page none


Modify the comment on a foreign or primary key constraint one of:

CREATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

Modify the comment on a unique key constraint one of:

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the table

Modify the definition of a table or column check constraint one of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the table

You own the table

Modify any foreign key constraint property on the Action page one of:

CREATE ANY OBJECT system privilege

CREATE ANY INDEX system privilege

You must also have one of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the underlying table

You own the table

Modify any other property of a primary, foreign or unique key, table check or column
check constraint one of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the underlying table

You own the underlying table

Related Information
Adding a System Privilege to a Role-Based User [page 819]

540

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Adding a System Privilege to a User-Extended Role [page 849]


Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.9.27 Table Indexes


You can add multiple indexes to any column in a table to better support the queries you plan to run.
It is more efficient to create all the indexes needed before you insert any data into your database. You can drop
any of the optional indexes later if you decide you do not need them.
Indexes can greatly improve the performance of searches on the indexed columns. However, indexes take up
space within the database and slow down insert, update, and delete operations. This section helps you
determine when you should create an index and how to achieve maximum performance from your index.
There are many situations in which creating an index improves the performance of a database. An index
provides an ordering of a table's rows based on the values in some or all of the columns. An index allows the
database server to find rows quickly. It permits greater concurrency by limiting the number of database pages
accessed. An index also affords the database server a convenient means of enforcing a uniqueness constraint
on the rows in a table.

Related Information
Column Index Types [page 542]
Creating an Index on an IQ (Catalog) System Store Table [page 543]
Creating an Index on an IQ Main Store Table [page 545]
Deleting a Table Index [page 546]
Rebuilding a Table Index [page 548]
Validating an IQ (Catalog) System Store Table Index [page 549]
Moving a Table Index [page 550]
Generating Table Index DDL Commands [page 551]
Viewing or Modifying Table Index Properties [page 552]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

541

Table Index Privilege Summary [page 555]

5.9.27.1 Column Index Types


Each type of column index is designed to speed processing of a certain kind of data.
These index types are unique to column-based IQ data and cannot be applied to tables in the IQ (catalog)
system store.
SAP IQ assumes you add an HG index to every column mentioned in a WHERE clause and in a GROUP BY
clause.
When you designate a column or set of columns as either a PRIMARY KEY or UNIQUE, the database server
automatically creates a High_Group index for it. Choose one PRIMARY KEY from all UNIQUE constraints for
the table. Neither PRIMARY KEY nor UNIQUE constraints allow nulls; however, a unique index does allow them.
UNIQUE constraints also provide hints on column constraints to the query optimizer.
The database server always uses the fastest index available for the current query or join predicate. If you have
not created the index types the query optimizer would ideally use for a column, the server can still resolve
queries involving the column, but response time may be slower than it would be with the correct index type or
types.
Table 27: Index Types
Index Type

Purpose

Compare (CMP)

Stores the binary comparison (<, >, =, <=, >=, or NE) of any
two columns with identical data types, precision, and scale.

DATE

An index on columns of data type DATE used to process


queries involving date quantities.

Datetime (DTTM)

An index on columns of data type DATETIME or TIME


STAMP used to process queries involving datetime quanti
ties.

High_Group (HG)

An enhanced B-tree index to process equality and group by


operations on high-cardinality data. Recommended only for
more than 1,000 distinct values or for a table with less than
25,000 rows.

High_Non_Group (HNG)

A nonvalue-based bitmap index ideal for most high-cardinal


ity DSS operations involving ranges or aggregates.

Note
The HG index provides better performance. We recom
mend migrating HNG indexes to HG.
Low_Fast (LF)

An HG index provides better performance than an LF index.


Therefore, use HG indexes instead.

TIME

An index on columns of data type TIME used to process


queries involving time quantities.

542

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Index Type

Purpose

WD

Used to index keywords by treating the contents of a CHAR,


VARCHAR, or LONG VARCHAR column as a delimited list.

Text

Used to index terms (words) and their positions. Provides


ability to search for individual terms, phrases, pairs of terms
within specified distances and given order, as well as combi
nations of these conditions.

5.9.27.2 Creating an Index on an IQ (Catalog) System Store


Table
Create an index on an IQ (catalog) system store table.

Prerequisites
Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

CREATE permission on the specified dbspace along with one of:

SAP IQ 16.0

DBA authority

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

CREATE permission on the specified dbspace along with one of:

CREATE ANY INDEX system privilege

CREATE ANY OBJECT system privilege

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The table on which the index is to be created exists in the IQ (catalog) system store.

Context
Indexes improve search performance on the indexed column or columns. Indexes take up space in the
database, however, and slow down the performance of insert, delete, and update operations.
When creating indexes, the order in which you specify the columns becomes the order in which the columns
appear in the index. Duplicate references to column names in the index definition are not allowed.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

543

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select an IQ (catalog) system store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Indexes, then click New in the right pane.
6. On the Index Name page, specify a name for the index.
7. On the Columns page, highlight one or more columns in the left column and click Add Asc or Add Desc.
Highlight one or more columns in the right column and click Remove to remove columns from the index.

Tip
Use Shift-click or Control-click to select multiple items.
a. (Optional) In the right column, highlight a single column, and click Up and Down to reposition the
column.
8. On the Uniqueness page, indicate if the index is unique.
9. On the Index Clustering page, indicate if the index is clustered and the dbspace to store the index.
10. (Optional) On the Comment page, add a descriptive comment.
11. Click Finish.
The index appears in the properties view, but is not saved to the database until you click OK or Apply.
12. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

544

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.9.27.3 Creating an Index on an IQ Main Store Table


Create an index on an IQ main store table.

Prerequisites
Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

CREATE permission on the specified dbspace along with one of:

SAP IQ 16.0

DBA authority

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

CREATE permission on the specified dbspace along with one of:

CREATE ANY INDEX system privilege

CREATE ANY OBJECT system privilege

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The table on which the index is to be created exists in the IQ main store.

Context
Indexes improve search performance on the indexed column or columns. Indexes take up space in the
database, however, and slow down the performance of insert, delete, and update operations.
When creating indexes, the order in which you specify the columns becomes the order in which the columns
appear in the index. Duplicate references to column names in the index definition are not allowed.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an IQ main store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. In the left pane, select Indexes, then click New in the right pane.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

545

5. On the Index Name page, specify a name for the index.


6. On the Index Type page, select the type of index. Enter a value in the notify count field if you want to be
notified after a specified number of inserts to the index. Default value is 100000. To disable notification,
enter zero (0) in the field.
7. (For index type Word only) (Optional) Enter a word separator character and a maximum word length
permitted in the index. Default value is 255 characters.
8. On the Dbspace page, indicate if the index is to be unique and the dbspace in which to store the index.
9. On the Columns page, highlight one or more columns in the left column and click Add Asc or Add Desc.
Highlight one or more columns in the right column and click Remove to remove columns from the index.

Tip
Use Shift-click or Control-click to select multiple items.
a. (Optional) In the right column, highlight a single column, and click Up and Down to reposition the
column.
10. (Optional) On the Comment page, add a descriptive comment.
11. Click Finish.
The index appears in the properties view, but is not saved to the database until you click OK or Apply.
12. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.27.4 Deleting a Table Index


Unused indexes take up space in your database. Delete a table index if you do not require it.

Prerequisites
Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

546

DBA authority

RESOURCE authority with REFERENCE permission on the underlying table of the


index

You own the underlying table of the index

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Table Index Privileges Required

SAP IQ 16.0

One of:

DROP ANY INDEX system privilege

DROP ANY OBJECT system privilege

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Indexes, then select one or more indexes from the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Delete.

Caution
There is no confirmation prompt before the indexes are deleted.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

547

5.9.27.5 Rebuilding a Table Index


As data is modified in the underlying tables that the indexes operate on, the indexes become fragmented.
Rebuild fragmented indexes on tables to improve performance.

Prerequisites
Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority with REFERENCE permission on the underlying table of the


index

You own the underlying table of the index

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Indexes, then select one or more indexes from the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Rebuild.
The Rebuild Indexes view appears when complete and indicates the rebuild status of each selected index.
7. Click OK.

548

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.27.6 Validating an IQ (Catalog) System Store Table Index


Validate an index on an IQ (catalog) system store table. You cannot validate indexes on tables in the IQ main
store.

Prerequisites
Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority with ALTER permission on the underlying table of the index

You own the underlying table of the index

VALIDATE ANY OBJECT system privilege.

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The table containing the index exists in the IQ (catalog) system store.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select an IQ (catalog) system store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Indexes, then select one or more indexes from the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Validate.
The Validate Indexes view appears when complete and indicates the validation status of each selected
index.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

549

7. Click OK.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.27.7 Moving a Table Index


Move an index from the current dbspace to another dbspace. This action is only applicable to tables in the IQ
main store.

Prerequisites
Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

CREATE permission on the target dbspace, along with one of:

You own the underlying table

You have REFERENCE permission on the underlying table

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

You own the underlying table of the index

REFERENCE permission on the table along with one of:

CREATE ANY OBJECT system privilege

CREATE permission on the target dbspace

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The table containing the index to move exists in the IQ main store.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

550

IQ Servers

Schema Objects

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Tables , and then click Tables or Global

SAP IQ Cockpit
Administer SAP IQ

3. In the right pane, select an IQ main store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Indexes, then select an index from the right pane.
6. Click Move.

Note
Move does not appear when the underlying table is an IQ (catalog) system store table.
7. In the Move Objects Dialog view, select the new dbspace and click OK.
The index is moved, but is not saved to the database.
8. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.27.8 Generating Table Index DDL Commands


Display the data description language SQL code for adding an index to a table. The SQL code can be a useful
reference and training tool.

Prerequisites
Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

SAP IQ Cockpit
Administer SAP IQ

IQ Servers

Schema Objects

Tables , and then click Tables or Global

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

551

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Indexes, then select one or more indexes from the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Generate DDL.
The DDL window shows the SQL code used to add the selected index to the table or materialized view.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.27.9 Viewing or Modifying Table Index Properties


Display and edit the properties for the selected table index.

Prerequisites
Database Version
SAP IQ 15.3 and 15.4

Table Index Privileges Required


View table index fragmentation property page EXECUTE permission on the

sp_iqindexfragmentation system procedure to display the content of the


page.
View any other table index property page none.
Modify any index property one of:

DBA authority

RESOURCE authority with REFERENCE permission on the underlying table of the


index

552

You own the underlying table of the index

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version
SAP IQ 16.0

Table Index Privileges Required


View table index fragmentation property page EXECUTE permission on the

sp_iqindexfragmentation system procedure along with the MANAGE ANY


DBSPACE system privilege to display the content of the page.
View any other table index property page none.
Modify a table index comment one of:

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the underlying table of the index

Note
ALTER permission on the table is not required to modify the comment only.
Modify any other table index property one of:

ALTER ANY OBJECT system privilege

ALTER ANY INDEX system privilege

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

The SAP IQ system is running, registered, and authenticated.


(Modifying properties only) In a multiplex configuration, the coordinator node is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Temporary Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Global

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Indexes, then select an index from the right pane, and click Edit.
6. View or modify the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

553

Page

Propety

Description

General

Name

Name of the index.

Unique (Read-only)

Indicates if values in the index must


be unique. The unique value is set
when you create a new index.

Table (Read-only)

Name and owner of the table with


which the index is associated.

Dbspace (Read-only)

Database file, or dbspace, where the


index is located.

Index Type (Read-only) (For IQ main


store tables only)

Index type (for example, High NonGroup).

Clustered (Read-only) (For IQ (cata


log) system store tables only)

Indicates it is a clustered index. Clus


tered indexes store the table rows in
approximately the same order as they
appear in the corresponding index.
Using a clustered index can lead to
performance benefits by reducing the
number of times each page needs to
be read into memory. Only one index
on a table can be a clustered index.

Format (Read-only) (For IQ (catalog)


system store tables only)

Store type of the index.

Comment

Text field for adding optional com


ments.

Name

Name of the columns indexed.

Sequence

Columns are sorted by their se


quence, which is a unique number
starting at 0. The order of the num
bers determines the relative position
of the columns in the index.

Order

Order, ascending or descending, set


when you create the index.

Data Type

Data type of the columns indexed.

Placement (Read-only)

Name

Name of the first table object.

Placement (Read-only)

Dbspace

Dbspace occupied by the object.

Size

Size of the object.

% File

Percentage of the file used by this ob


ject.

First Block

First block used by this object.

Last Block

Last block used by this object.

Columns (Read-only)

(IQ main store tables only)

554

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Propety

Description

Fragmentation (Read-only)

Fill Percent

Range of how full pages are, for ex


ample, between 11 and 20% full. All
percentages are truncated to the
nearest percentage point.

BTree Pages

Number of B-tree pages in the index


with a particular fill percent.

GArray Pages

Number of GArray pages in the index


with a particular fill percent.

Bitmap Pages

Number of bitmap pages in the index


with a particular fill percent.

(IQ main store tables only)

7. Click OK in the Index Properties view.

Note
If you modified any properties, clicking OK or Apply in the Index Properties view updates the changes to
the Table Properties dialog, but does not save the changes to the database. They remain "in-progress"
until you click Apply or OK in the Table Properties view.
8. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.27.10 Table Index Privilege Summary


A list of the system privileges and object permissions required to complete the various index tasks on tables.

Creating a Table Index


Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

CREATE permission on the specified dbspace along with one of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

555

Database Version

Table Index Privileges Required

SAP IQ 16.0

CREATE permission on the specified dbspace along with one of:

CREATE ANY INDEX system privilege

CREATE ANY OBJECT system privilege

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

Deleting a Table Index


Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority with REFERENCE permission on the underlying table of the


index

You own the underlying table of the index

One of:

DROP ANY INDEX system privilege

DROP ANY OBJECT system privilege

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

Rebuilding a Table Index


Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

556

DBA authority

RESOURCE authority with REFERENCE permission on the underlying table of the


index

You own the underlying table of the index

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Validating a Table Index


Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority with ALTER permission on the underlying table of the index

You own the underlying table of the index

VALIDATE ANY OBJECT system privilege.

Moving a Table Index


Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

CREATE permission on the target dbspace, along with one of:

You own the underlying table

You have REFERENCE permission on the underlying table

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

You own the underlying table of the index

REFERENCE permission on the table along with one of:

CREATE ANY OBJECT system privilege

CREATE permission on the target dbspace

Generating Index DDL Commands


Database Version

Table Index Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

557

Viewing or Modifying Index Properties


Database Version
SAP IQ 15.3 and 15.4

Table Index Privileges Required


View table index fragmentation property page EXECUTE permission on the

sp_iqindexfragmentation system procedure to display the content of the


page.
View any other table index property page none.
Modify any index property one of:

DBA authority

RESOURCE authority with REFERENCE permission on the underlying table of the


index

SAP IQ 16.0

You own the underlying table of the index

View table index fragmentation property page EXECUTE permission on the

sp_iqindexfragmentation system procedure along with the MANAGE ANY


DBSPACE system privilege to display the content of the page.
View any other table index property page none.
Modify a table index comment one of:

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the underlying table of the index

Note
ALTER permission on the table is not required to modify the comment only.
Modify any other table index property one of:

ALTER ANY OBJECT system privilege

ALTER ANY INDEX system privilege

REFERENCE permission on the underlying table of the index

You own the underlying table of the index

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]

558

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Adding Permissions on a View or Materialized View to a User or Role [page 916]


Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.9.28 Table Triggers


A trigger is a special form of stored procedure that executes automatically when a statement that modifies
data in a table is executed. Trigger management includes creating, modifying and deleting triggers on a
database object.

Related Information
Creating a Table Trigger [page 560]
Deleting a Table Trigger [page 562]
Generating Table Trigger DDL Commands [page 563]
Viewing or Modifying Table Trigger Properties [page 564]
Table Trigger Privilege Summary [page 566]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

559

5.9.28.1 Creating a Table Trigger


Create a new trigger on a table in the IQ (catalog) system store.

Prerequisites
Database Version

Table Trigger Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority, along with one of:

ALTER permission on the underlying table of the trigger

You own the underlying table of the trigger

One of:

CREATE ANY TRIGGER system privilege

CREATE ANY OBJECT system privilege

You must also have one of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the underlying table of the trigger

You own the underlying table of the trigger

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The table on which the trigger is to be created exists in the IQ (catalog) system store.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Proxy

3. In the right pane, select an IQ (catalog) system store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Triggers, then click New in the right pane.

Note
Triggers does not appear when the selected table is not a IQ (catalog) system store table.

560

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

6. On the Welcome page, enter a unique name for the new trigger.
7. On the Events page, select one or more events to cause the trigger to fire.

Note
If Update with Columns is selected, all other events become unavailable. Do one of:Click Next.
8. On the Level page, indicate whether the trigger is to fire at the row or statement level.
9. On the Timing page, specify:
Property

Description

When do you want the trigger to be fired?

Specify when the trigger is to fire. Availability of timing op


tions is determined by events and levels specified.
Before the event option is disabled for Statementlevel level
Instead of the event option is disabled for Update of
Columns event.
After the event available for all events and levels.
On a SQL Remote conflict available only for Rowlevel level or Update of Columns event

What order in the firing list do you want for this trigger?

Assign a firing order to the trigger to ensure that triggers


of the same type that fire at the same time fire in a spe
cific order.

Note
This option is unavailable when Instead of the event
timing is selected.

10. On the SQL page, enter the statement to be executed when the trigger fires. Triggers do not fire after the
execution of LOAD TABLE, TRUNCATE, or WRITETEXT statements.
The statement window provides a template on which to build the trigger statement. The parameters
displayed are based on the options selected in the preceding pages. Once you have made any changes in
the statement window, if you return to any of the preceding pages and change any option, when you return
to the SQL page, the contents of the statement window is overwritten with the base template; any
customizations are lost.
11. (Optional) On the Comment page, add a descriptive comment for the trigger.
12. Click Finish.

Note
Unlike other wizards launched from the properties view, changes to triggers take effect immediately.
You do not need to click OK or Apply in the properties view to upload the change to the database.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

561

5.9.28.2 Deleting a Table Trigger


Delete triggers from a table.

Prerequisites
Database Version

Table Trigger Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority, along with one of:

ALTER permission on the underlying table of the trigger

You own the underlying table of the trigger

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

You own the underlying table of the trigger

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Proxy

3. In the right pane, select an IQ (catalog) system store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Triggers, then select one or more triggers from the right pane, and click Delete.
Triggers does not appear when the selected table is not a IQ (catalog) system store table.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Yes to confirm deletion.

Note
Unlike other wizards launched from the properties view, changes to triggers take effect immediately.
You do not need to click OK or Apply in the properties view to upload the change to the database.

562

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.28.3 Generating Table Trigger DDL Commands


Display the data description language SQL code for adding a trigger to a table in the database. The SQL code
can be a useful reference and training tool.

Prerequisites
Database Version

Table Trigger Privileges Required

SAP IQ 15.3 and 15.4

None.

SAP IQ 16.0

None.

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Proxy

3. In the right pane, select an IQ (catalog) system store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Triggers, then select one or more triggers from the right pane.
Triggers does not appear when the selected table is not a IQ (catalog) system store table.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Generate DDL.
The DDL view shows the SQL code used to add the selected triggers to the table in the database.
7.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

563

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.28.4 Viewing or Modifying Table Trigger Properties


View or change trigger properties on a table, including the comment and the underlying SQL statement of the
trigger.

Prerequisites
Database Version

Table Trigger Privileges Required

SAP IQ 15.3 and 15.4

View any trigger property page none.


Modify any trigger property one of:

SAP IQ 16.0

DBA authority

RESOURCE authority, along with one of:

ALTER permission on the underlying table of the trigger

You own the underlying table of the trigger

View any trigger property page none.


Modify a trigger comment one of:

CREATE ANY TRIGGER system privilege

ALTER ANY TRIGGER system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

Note
ALTER permission on the table is not required to modify a comment.
Modify any other trigger property one of:

ALTER ANY OBJECT system privilege

ALTER ANY TRIGGER system privilege, along with one of:

ALTER ANY TABLE system privilege

You own the underlying table of the trigger

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

564

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Tables.

IQ Servers

Schema Objects

Tables , and then click Tables or Proxy

3. In the right pane, select an IQ (catalog) system store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Triggers, select a trigger in the right pane, and then click Edit.

Note
Triggers does not appear when the selected table is not a IQ (catalog) system store table.
6. View or modify the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Readonly)

Name of the trigger.

Dialect (Readonly)

The dialect of the trigger.

Events (Readonly)

The event which causes the trigger to


fire. Valid events are:

Delete

Update

Timing (Readonly)

When the trigger fires.

Level (Readonly)

The level at which the trigger fires.


Valid levels are:

Level (Readonly)

Comment
SQL

Insert

Row

Statement

The level at which the trigger fires.


Valid levels are:

Row

Statement

Text field for adding optional com


ments.

The SQL statement to be executed when the trigger fires.

7. Click OK to close the Trigger Properties view.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

565

Note
Unlike other wizards launched from the properties view, changes to triggers take effect immediately.
You do not need to click OK or Apply in the properties view to upload the change to the database.
8. Click OK.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.28.5 Table Trigger Privilege Summary


A list of the system privileges and object permissions required to complete the various table trigger tasks on
database objects.

Creating a Table Trigger


Database Version

Table Trigger Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority, along with one of:

ALTER permission on the underlying table of the trigger

You own the underlying table of the trigger

One of:

CREATE ANY TRIGGER system privilege

CREATE ANY OBJECT system privilege

You must also have one of:

566

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

ALTER permission on the underlying table of the trigger

You own the underlying table of the trigger

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Deleting a Table Trigger


Database Version

Table Trigger Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority, along with one of:

ALTER permission on the underlying table of the trigger

You own the underlying table of the trigger

One of:

ALTER ANY OBJECT system privilege

ALTER ANY TABLE system privilege

You own the underlying table of the trigger

Generating Table Trigger DDL Commands


Database Version

Table Trigger Privileges Required

SAP IQ 15.3 and 15.4

None.

SAP IQ 16.0

None.

Viewing or Modifying Table Trigger Properties


Database Version

Table Trigger Privileges Required

SAP IQ 15.3 and 15.4

View any trigger property page none.


Modify any trigger property one of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

RESOURCE authority, along with one of:

ALTER permission on the underlying table of the trigger

You own the underlying table of the trigger

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

567

Database Version

Table Trigger Privileges Required

SAP IQ 16.0

View any trigger property page none.


Modify a trigger comment one of:

CREATE ANY TRIGGER system privilege

ALTER ANY TRIGGER system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

Note
ALTER permission on the table is not required to modify a comment.
Modify any other trigger property one of:

ALTER ANY OBJECT system privilege

ALTER ANY TRIGGER system privilege, along with one of:

ALTER ANY TABLE system privilege

You own the underlying table of the trigger

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

568

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.9.29 Table Partitions


Dividing large tables into more manageable storage objects, called partitions, can improve shorten backup and
restore times, provide a finer level of granularity for data validation, and support tiered storage.
Partitions share the logical attributes of the parent table. Manage partitions individually by placing them in
separate dbspaces.
Three are three types of partitions: hash, range, and hash-range. Only a range partition can be added to an
existing table in the IQ main store. Hash and hash-range partitions can only be added during the initial creation
of the IQ main store table. Range partitioning can be added to both new and existing tables. For tables with
existing range or hash-range partitioning, additional range subpartitions can be added as needed.
You cannot partition an IQ (catalog) system store table.

Related Information
Creating a Range Partition on an Existing Table [page 570]
Creating a Range Subpartition to an Existing Hash-Range Partitioned Table [page 572]
Deleting a Range Partition or Subpartition [page 574]
Unpartitioning a Table [page 575]
Rebuilding a Hash or Hash-Range Partitioned Table [page 577]
Merging Partitions [page 578]
Splitting a Partition [page 579]
Moving a Partition [page 580]
Managing Column Storage in a Table Partition [page 582]
Viewing or Modifying Table Partition Properties [page 584]
Table Partition Privilege Summary [page 587]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

569

5.9.29.1 Creating a Range Partition on an Existing Table


You can add range partitioning to an existing unpartitioned table or add additional range partitions to a table
that is already range partitioned.

Prerequisites
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

CREATE permission on the dbspaces where the partitions are being created

You must also have one of:

SAP IQ 16.0

ALTER permission on the table

You own the table

One of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspaces along with one of:

ALTER ANY TABLE system privilege

ALTER permission on the table

You own the table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
You are licensed for the Very Large Database Management option (IQ_VLDBMGMT).
The table being range partitioned exists in the IQ main store.

Context
When adding range partitioning to an unpartitioned table, if the table contains data, all data must fit within the
initial partition constraint. For example, if the partition key pertains to age, and the highest age in the table is
50, the constraint value must be 50 or higher. If any data exceeds the constraint limit, an error message
appears, and the partition is not created.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select an IQ main store table, and do one of:

570

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Click the arrow to the right of the name.


Click the Actions button.
4. Select Properties.
5. In the left pane, select Partitions, then click New in the right pane.
If the table is already partitioned, a list of partitions appears.
6. On the Partition Type page, click Next. Only Range type is allowed.
7. On the Partition Key page, do one of:
Option

Description

Table is already parti


tioned

Click Next. This value cannot be changed on a table that is already range partitioned.

Table is unpartitioned

Select a column and click Add.

Note
A partition key cannot contain LOB, binary, varbinary, bit, float, double, or real data, or
any char or varchar column with a length that exceeds 255 bytes.

8. On the Partition page, click Add, and then in the Define a Partition view, specify:
Property

Description

Name

A descriptive name for the partition.

Constraint

(read only) Less than or equal (<=) is the only constraint


currently supported.

Value

A value for the upper boundary of the partition. The value


must be appropriate for the data type of the partition key.

Dbspace

The dbspace for the partition.

Click OK. Repeat this step to add additional partitions.

Note
When you add multiple partitions to a table, the constraint value of each successive partition must
be greater than that of the previous partition. For example, if the constraint value of the first
partition is 100, the constraint value of the next partition must be 101 or higher.
If an invalid constraint value is specified, no error message appears when you click OK on the
Define a Partition dialog, but does appear when you click OK or Apply to complete the partitioning
process.
9. (Optional) On the Columns page, if you want to store the data for any individual columns in separate
dbspaces from the partition, click Add. Choose the column, partition, and dbspace from each list, and click
OK. Repeat this step to specify additional columns to be stored separately from the dbspaces of their
respective partitions.
10. Click Finish.
11. Click OK to update any changes to the database and close the page.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

571

Note
If an error is detected with a constraint (partition bound) value, an error message appears. Highlight the
invalid partition and do one of:
Click Edit, correct the value, and click OK.
Click Delete to remove the invalid partition.
Click OK to complete the partitioning process.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.29.2 Creating a Range Subpartition to an Existing HashRange Partitioned Table


On an existing table with hash-range partitioning, you can add additional range subpartitions. You cannot add
Hash-range partitioning to an existing unpartitioned table.

Prerequisites
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority, along with one of:

ALTER permission on the table

You own the table

One of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace along with one of:

ALTER ANY TABLE system privilege

ALTER permission on the table

You own the table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
You are licensed for the Very Large Database Management option (IQ_VLDBMGMT).
The table is already hash-range partitioned and resides in the IQ main store.

572

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select a table with hash-range partitioning, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Partitions, then click New in the right pane.
6. On the Partition Type, Partition Key, and Subpartition key pages, click Next. These values cannot be
changed on a table that is already hash-range partitioned.
7. On the Subpartitions page, click Add, and then in the Define a Partition view, specify:
Property

Description

Name

A descriptive name for the partition.

Constraint

(read only) Less than or equal (<=) is the only constraint


currently supported.

Value

A value for the upper boundary of the partition. The value


must be appropriate for the data type of the partition key.

Dbspace

The dbspace for the partition.

Click OK. Repeat this step to add additional partitions.

Note
When you add multiple partitions to a table, the constraint value of each successive partition must
be greater than that of the previous partition. For example, if the constraint value of the first
partition is 100, the constraint value of the next partition must be 101 or higher.
If an invalid constraint value is specified, no error message appears when you click OK on the
Define a Partition dialog, but does appear when you click OK or Apply to complete the partitioning
process.
8. (Optional) On the Columns page, if you want to store the data for any individual columns in separate
dbspaces from the partition, click Add. Choose the column, partition, and dbspace from each list, and click
OK. Repeat this step to specify additional columns to be stored separately from the dbspaces of their
respective partitions.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Note
If an error is detected with a constraint (partition bound) value, an error message appears. Highlight the
invalid partition and do one of:
Click Edit, correct the value, and click OK.
Click Delete to remove the invalid partition.
Click OK to complete the partitioning process.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

573

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.29.3 Deleting a Range Partition or Subpartition


Remove one or more range partitions or subpartitions from a table. You cannot delete the last remaining
partition on a table. Use Unpartition instead.

Prerequisites
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

Table owned by self none.


Table owned by other users one of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

Table owned by self none.


Table owned by other users one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
You must be licensed for the Unstructured Data Analytics option (IQ_UDA).
The table exists in the IQ main store and is range partitioned.

Context

Caution
Deleting a partition deletes the data contained in the partition from the table. To remove a partition without
losing the data, either merge the partition or unpartition the table.

574

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select a table that contains a range partition,and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Partitions, then select one or more partitions in the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
When selecting multiple partitions, Delete becomes unavailable if:
All partitions are selected. Deselect at least one partition for Delete to become available again.
The partition type is hash.
The partition only contains one range subpartition.
6. Click Delete.
The selected partitions are removed from the list, but they are not yet deleted from the database.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.29.4 Unpartitioning a Table


Remove all partitioning from a table, preserving the data in the table.

Prerequisites
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

Table owned by self none.


Table owned by other users one of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

ALTER permission on the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

575

Database Version

Table Partition Privileges Required

SAP IQ 16.0

Table owned by self none.


Table owned by other users one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
You are licensed for the Very Large Database Management option (IQ_VLDBMGMT).
The selected table exists in the IQ main store and is partitioned.

Context
Caution
You cannot hash or hash-range partition an existing table. You can only range partition an existing table.
Therefore, if you unpartition a hash or hash-range partitioned table, you cannot repartition it as a hash or
hash-range partitioned table. See If you accidentally unpartition a hash or hash-range partition.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. Select a table from the right pane that contains a partition, click the arrow to the right of the selected
name, and click Properties
4. In the right pane, select a table that contains a partition, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
5. Select Properties.
6. In the left pane, select Partitions, and then click Unpartition in the right pane.
Since unpartitioning removes all partitions in a table, it is not necessary to select any partitions first.
7. Click Yes to confirm the unpartition.
8. Click OK to update any changes to the database and close the page.

576

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.29.5 Rebuilding a Hash or Hash-Range Partitioned Table


Once a table with hash or hash-range partitioning is unpartitioned, it can only be repartitioned by range. Hash
and hash-range partitioning on an existing table is not supported.

Context
If you accidentally unpartitioned a hash or hash-range partitioned table, to rebuild the partitioning structure,
do the following:

Procedure
1. Create a new table with a hash or hash-range partitioning.
2. Export the data from the original table.
3. Load the data into the new table.
4. Drop the original table.
5. (optional) Rename the new table to that of the old table.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

577

5.9.29.6 Merging Partitions


Merge adjacent range partitions or subpartitions in a table.

Prerequisites
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

Table owned by self none.


Table owned by other users one of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

Table owned by self none.


Table owned by other users one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
You are licensed for the Very Large Database Management option (IQ_VLDBMGMT).
The selected table exists in the IQ main store.
The partitions to be merged are adjacent and reside in the same dbspace. No data movement is required.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select a table containing partitions to be merged, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Partitions, select a single range or hash-range partition in the right pane, and click
Merge.
6. Select an adjacent partition from the list. The list is empty if no lower or higher partition exists in the same
dbspace.
7. Click OK to merge the partitions.
8. Click OK to update any changes to the database and close the page.

578

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.29.7 Splitting a Partition


Split a range or hash-range partition in a table.

Prerequisites
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

Table owned by self none.


Table owned by other users one of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

SELECT permission on the table

One of:

SELECT ANY TABLE system privilege

SELECT permission on table

You must also have one of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace along with one of:

ALTER ANY TABLE system privilege

ALTER permission on the table

You own the table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
You are licensed for the Very Large Database Management option (IQ_VLDBMGMT).
The selected table exists in the IQ main store.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select a table containing partitions to be split, and do one of:
Click the arrow to the right of the name.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

579

Click the Actions button.


4. Select Properties.
5. In the left pane, select Partitions, select a range or hash-range partition in the right pane, and then click
Split.
6. Specify the name, value, and dbspace for the new partition.
You can rename the existing partition, but you cannot edit its upper bound or dbspace.
7. Click OK to split the partition.
8. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.29.8 Moving a Partition


Move a range or hash-range partition to another dbspace.

Prerequisites
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

580

DBA authority

SPACE ADMIN authority

CREATE permission on the dbspace to which the partition is being moved along
with one of:

ALTER permission on the underlying table

You own the table

One of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

One of the following:

CREATE ANY OBJECT system privilege

CREATE permission on the dbspace to which the partition is being moved

Along with one of:

ALTER permission on the underlying table

You own the underlying table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

You have CREATE permission in the new dbspace.


The SAP IQ system is running, registered, and authenticated.
In a multiplex configuration, the coordinator is running.
You are licensed for the Very Large Database Management option (IQ_VLDBMGMT).
The selected table exists in the IQ main store.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select a table containing partitions to be moved, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Partitions, select a partition in the right pane, and then click Move.
6. Select the new dbspace and click OK.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

581

5.9.29.9 Managing Column Storage in a Table Partition


Store data for individual columns in a range or hash-range partition separately from the dbspace for the
partition. You can add, delete and move columns within the partition to specific dbspaces.

Prerequisites
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

View any table partition property page none.


Modify any table partition property pertaining to moving partition location or separate
column storage for a partition one of:

DBA authority

SPACE ADMIN authority

CREATE permission on the dbspace to which the partition is being moved along
with one of:

ALTER permission on the underlying table

You own the table

Modify any other table partition property:

SAP IQ 16.0

Table owned by self none.

Table owned by other users one of:

DBA authority

ALTER permission on the table

View any table partition property page none.


Modify any table partition property pertaining to moving partition location or separate
column storage for a partition one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

One of the following:

CREATE ANY OBJECT system privilege

CREATE permission on the dbspace to which the partition is being moved

Along with one of:

ALTER permission on the underlying table

You own the underlying table

Modify any other table partition property:

582

Table owned by self none.

Table owned by other users one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
You are licensed for the Very Large Database Management option (IQ_VLDBMGMT).
The selected table exists in the IQ main store.

Context

Note
The ability to store individual columns within a partition on different dbspaces should not be confused with
the ability to store individual columns of a table on different dbspaces. See Placement under Viewing and
Modifying Column Properties.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. In the right pane, select a table containing a partition, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Partitions, then select a hash-range or range partition in the right pane and click
Edit.
6. Click Columns and do one of:
Click Add, select a column and specify a dbspace and click OK.
Select a column and click Delete.
Click Move, select a column, \specify a dbspace, and click OK.

Note
If no other dbspaces are available, the list is empty, and a move cannot be performed.
Moving column data to a new dbspace adds the column to the list of those with separate storage, in
Partition Properties and in the Partitions page of Table Properties. Moving the column back to the
partition dbspace removes the column from those lists.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
7. Click OK to close the Partition Properties view.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

583

Note
Clicking OK or Apply in the Partition Properties view updates the changes to the Table Properties
dialog, but does not save the changes to the database. They remain "in-progress" until you click Apply
or OK in the Table Properties view.
8. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.29.10 Viewing or Modifying Table Partition Properties


View table partition details or change the table partition details and definition of an existing table partition.

Prerequisites
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

View any table partition property page none.


Modify any table partition property pertaining to moving partition location or separate
column storage for a partition one of:

DBA authority

SPACE ADMIN authority

CREATE permission on the dbspace to which the partition is being moved along
with one of:

ALTER permission on the underlying table

You own the table

Modify any other table partition property:

584

Table owned by self none.

Table owned by other users one of:

DBA authority

ALTER permission on the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Table Partition Privileges Required

SAP IQ 16.0

View any table partition property page none.


Modify any table partition property pertaining to moving partition location or separate
column storage for a partition one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

One of the following:

CREATE ANY OBJECT system privilege

CREATE permission on the dbspace to which the partition is being moved

Along with one of:

ALTER permission on the underlying table

You own the underlying table

Modify any other table partition property:

Table owned by self none.

Table owned by other users one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
You are licensed for the Very Large Database Management option (IQ_VLDBMGMT).
The selected table exists in the IQ main store.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Tables , and then click Tables.

3. Select table from the right pane that contains a partition to be viewed or modified, click the arrow to the
right of the selected name, and click Properties.
4. In the right pane, select an IQ main store table containing a partition, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
5. Select Properties.
6. In the left pane, select Partitions, select a partition in the right pane, and then click Edit.
7. View or modify table partition properties. The properties differ depending on the partition type.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

585

Table 28: Hash Partition Properties


Page

Propety

Description

General (Readonly)

Name

Name of the partition.

Type

Type of partition.

Composite

N/A

Partition key

Name of columns used for the partition key.

Table 29: Range Partition Properties


Page

Property

Description

General

Name

Name of the partition.

Type (Readonly)

Type of partition.

Composite

N/A

Partition key

Name of columns used for the partition key.

Value

Value of the range partition.

Dbspace

Name of the dbspace that contains the range partition.

Columns

Column details for columns contained by the range partition. See Managing Column Storage in Ta
ble Partition Properties [page 582].

Table 30: Hash-Range Partition Properties


Page

Property

Description

General

Name

Name of the partition.

Type (Readonly)

Type of partition.

Composite

Hash-Range

Partition key

Name of columns used for the partition key.

Value

Value of the hash-range partition..

Dbspace

Name of the dbspace that contains the hash-range partition

Column

Column details for columns contained by the hash-range partition. See Managing Column Storage
in Table Partition Properties [page 582].

8. Click OK to close the Partitions Properties view.

Note
If you modified any properties, clicking OK or Apply in the Partition Properties view updates the
changes to the Table Properties dialog, but does not save the changes to the database. They remain
"in-progress" until you click Apply or OK in the Table Properties view.
9. Click OK to update any changes to the database and close the page.

586

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.9.29.11 Table Partition Privilege Summary


A list of the system privileges and object permissions required to complete the various table partition tasks.

Creating a Hash Partition


Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

Table owned by self none.


Table owned by other users one of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

One of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace along with one of:

ALTER ANY TABLE system privilege

ALTER permission on the table

You own the table

Creating a Range Partition


Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

CREATE permission on the dbspaces where the partitions are being created

You must also have one of:

SAP IQ Cockpit
Administer SAP IQ

ALTER permission on the table

You own the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

587

Database Version

Table Partition Privileges Required

SAP IQ 16.0

One of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspaces along with one of:

ALTER ANY TABLE system privilege

ALTER permission on the table

You own the table

Creating a Hash-Range Partition


Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority, along with one of:

ALTER permission on the table

You own the table

One of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace along with one of:

ALTER ANY TABLE system privilege

ALTER permission on the table

You own the table

Deleting a Partition
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

Table owned by self none.


Table owned by other users one of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

Table owned by self none.


Table owned by other users one of:

588

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Unpartitioning a Table
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

Table owned by self none.


Table owned by other users one of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

Table owned by self none.


Table owned by other users one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

Merging Partitions
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

Table owned by self none.


Table owned by other users one of:

SAP IQ 16.0

DBA authority

ALTER permission on the table

Table owned by self none.


Table owned by other users one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

Splitting Partitions
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

Table owned by self none.


Table owned by other users one of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

ALTER permission on the table

SELECT permission on the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

589

Database Version

Table Partition Privileges Required

SAP IQ 16.0

One of:

SELECT ANY TABLE system privilege

SELECT permission on table

You must also have one of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace along with one of:

ALTER ANY TABLE system privilege

ALTER permission on the table

You own the table

Moving Partitions
Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

590

DBA authority

SPACE ADMIN authority

CREATE permission on the dbspace to which the partition is being moved along
with one of:

ALTER permission on the underlying table

You own the table

One of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

One of the following:

CREATE ANY OBJECT system privilege

CREATE permission on the dbspace to which the partition is being moved

Along with one of:

ALTER permission on the underlying table

You own the underlying table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Managing Column Storage in a Table Partition


Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

View any table partition property page none.


Modify any table partition property pertaining to moving partition location or separate
column storage for a partition one of:

DBA authority

SPACE ADMIN authority

CREATE permission on the dbspace to which the partition is being moved along
with one of:

ALTER permission on the underlying table

You own the table

Modify any other table partition property:

SAP IQ 16.0

Table owned by self none.

Table owned by other users one of:

DBA authority

ALTER permission on the table

View any table partition property page none.


Modify any table partition property pertaining to moving partition location or separate
column storage for a partition one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

One of the following:

CREATE ANY OBJECT system privilege

CREATE permission on the dbspace to which the partition is being moved

Along with one of:

ALTER permission on the underlying table

You own the underlying table

Modify any other table partition property:

SAP IQ Cockpit
Administer SAP IQ

Table owned by self none.

Table owned by other users one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

591

Viewing or Modifying Table Partition Properties


Database Version

Table Partition Privileges Required

SAP IQ 15.3 and 15.4

View any table partition property page none.


Modify any table partition property pertaining to moving partition location or separate
column storage for a partition one of:

DBA authority

SPACE ADMIN authority

CREATE permission on the dbspace to which the partition is being moved along
with one of:

ALTER permission on the underlying table

You own the table

Modify any other table partition property:

SAP IQ 16.0

Table owned by self none.

Table owned by other users one of:

DBA authority

ALTER permission on the table

View any table partition property page none.


Modify any table partition property pertaining to moving partition location or separate
column storage for a partition one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE system privilege

One of the following:

CREATE ANY OBJECT system privilege

CREATE permission on the dbspace to which the partition is being moved

Along with one of:

ALTER permission on the underlying table

You own the underlying table

Modify any other table partition property:

Table owned by self none.

Table owned by other users one of:

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]

592

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Adding a System Privilege to a System Role [page 942]


Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.10 Views
A view is a computed table defined by the result set of its view definition, expressed as a SQL query. You can
use views to show database users exactly the information you want to present, in a format you can control.
A regular view describes a view that is recomputed each time you reference the view, and the result set is not
stored on disk. This is the most commonly used type of view.
A materialized view describes a view whose result set is precomputed and materialized on disk similar to the
contents of a base table. Materialized views are useful in data warehousing scenarios, where frequent queries
of the actual base tables can be extremely expensive.

Related Information
About Views [page 594]
Creating a View [page 594]
Viewing View Data in the Execute SQL Window [page 596]
Recompiling and Enabling a View [page 597]
Disabling a View [page 598]
Deleting a View [page 599]
Generating View DDL Commands [page 600]
Viewing or Modifying View Properties [page 601]
View Privilege Summary [page 603]
View Permissions [page 607]
View Triggers [page 617]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

593

5.10.1 About Views


A view is a computed table that may be useful for security purposes, and for tailoring the appearance of
database information to make data access straightforward. SAP IQ provides views that allow you to give
names to frequently executed SELECT commands, saving you from having to repeatedly type them.
Think of views as computed tables. You can use any SELECT command in a view definition except commands
containing ORDER BY. Views can use GROUP BY clauses, subqueries, and joins. Disallowing ORDER BY in the
commands that make up a view is consistent with the fact that rows of a table in a relational database are not
stored in any particular order. When you use the view, you can specify an ORDER BY.
For example, if you frequently need to list a summary of employees and their departments, create a view
called emp_dept that looks just like any other table in the iqdemo database. You can list everything in a view
just as you do from a table.
The information in a view is not stored separately in the database. Each time you refer to a view, SQL executes
the associated SELECT statement to find the appropriate data.
This also means that if someone modifies the employee table or the department table, the information in the
emp_dept view is automatically up to date. However, if the SELECT command is complicated, it may take a
long time for SQL to find the correct information every time you use the view.
You can also use views in more complicated queries, such as queries using joins:
SELECT LastName, dept_head_id
FROM emp_dept, department
WHERE emp_dept.Department = department.dept_name

Related Information
Materialized Views [page 626]

5.10.2 Creating a View


Create a new regular view by defining a SQL query using the Create View wizard.

Prerequisites
Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

One of:

594

DBA authority

RESOURCE authority with SELECT permission on the tables in the view definition
to create a view owned by you.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

View Privileges Required

SAP IQ 16.0

View to be owned by self CREATE VIEW system privilege along with one of:

SELECT ANY TABLE system privilege

SELECT object permission on the underlying tables of the view

View to be owned by any user one of:

CREATE ANY VIEW system privilege

CREATE ANY OBJECT system privilege

You must also have one of:

SELECT object permission on the underlying tables of the view

SELECT ANY TABLE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the view will be created

Select a system.

Which user or group do you want to own the view?

Select the user or role/group to own the view.

What do you want to name the view?

Specify a unique name for the new view; maximum of 128


characters.

Comment

Text field for adding optional comments.

6. On the SQL page, define a SELECT statement for the view.


7. On the Options page, select Enable this view to enable the view.
8. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

595

5.10.3 Viewing View Data in the Execute SQL Window


Execute a SELECT * FROM query and display contents of the view in the query results pane of the Execute
SQL window.

Prerequisites
Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

None. Queries execute with the user's current permissions.

SAP IQ 16.0

None. Queries execute with the user's current permissions.

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select View Data in SQL .
A SELECT * FROM <view> query executes.
5. (Optional) Modify the SQL statement and click Execute to display different data in the view.
6. Click Close to close the Execute SQL view.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

596

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.10.4 Recompiling and Enabling a View


Recompile and enable a disabled view to make it available for use by the database server. Enabling a view
changes the definition of the view but does not change data inside the view.

Prerequisites
Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the view and have SELECT permission on the underlying tables of the
view

One of:

ALTER ANY VIEW system privilege

ALTER ANY OBJECT system privilege

You own the view

You must also have one of:

SELECT ANY TABLE system privilege

SELECT permission on the underlying tables of the view

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The view is disabled.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Recompile and Enable.
5. Click Yes.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

597

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.10.5 Disabling a View


Disabling a view makes it unusable, but retains the definition of the view in the database. You can enable and
recompile the disabled view at a later time. Disabling a view changes the definition of the view but does not
change data inside the view.

Prerequisites
Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the view

One of:

ALTER ANY VIEW system privilege

ALTER ANY OBJECT system privilege

You own the view

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The view is enabled.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Disable.
5. Click Yes.

598

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.10.6 Deleting a View


Delete an enabled or disabled view to remove it from the database. Deleting a view deletes the definition of the
view. All data related to the view are virtual, and remain in the underlying tables after deletion.

Prerequisites
Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the view

One of:

DROP ANY VIEW system privilege

DROP ANY OBJECT system privilege

You own the view

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Click Yes to confirm deletion.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

599

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.10.7 Generating View DDL Commands


Display the data description language SQL code for adding a view to the database. The SQL code can be a
useful reference and training tool.

Prerequisites
Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

None.

SAP IQ 16.0

None.

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view shows the SQL code used to add the selected views to the database.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

600

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.10.8 Viewing or Modifying View Properties


View or change view properties including the comment, SQL view definition (including the column definition),
and permissions. Modifying a view changes the definition of the view but does not change data inside the view.

Prerequisites
Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

View any view property page none.


Modify view permissions one of:

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

Modify any other view property except those relating to triggers one of:

DBA authority

You own the view

For privileges relating to triggers, see View Trigger Privilege Summary [page 624].
SAP IQ 16.0

View any view property page none.


Modify view permissions one of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

Modify a view comment one of:

CREATE ANY VIEW system privilege

CREATE ANY OBJECT system privilege

ALTER ANY VIEW system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the view

Modify any other view property, except those relating to triggers one of:

ALTER ANY VIEW system privilege

ALTER ANY OBJECT system privilege

You own the view

For privileges relating to triggers, see View Trigger Privilege Summary [page 624].

The SAP IQ system is running, registered, and authenticated.


(Modifying properties only) In a multiplex configuration, the coordinator node is running.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

601

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Read-only)

Name of the view.

Owner (Read-only)

Owner of the view.

Database (Read-only)

Name of the database the view was created for.

Status

Current status of the view. Valid statuses are:

Valid

Disabled

Recompile and Enable


Now

Click to enabled a disabled view.

Disable Now

Click to disable an enabled view.

Comment

Text field for adding optional comments.

SQL

Display the SELECT statement for the view.

Columns

Name

Name of the column.

ID

ID of the column.

Data Type

Data type of the column.

Allows Null

Indicates whether the column allows (Yes) or disallows (No) NULL values.

(Read-only)

Triggers

(For IQ (catalog) system store tables only.)


See View Triggers [page 617] for details and required privileges and permissions.

Data (Read-only)

Note
For 15.3 and 15.4, requires SELECT permission on the underlying table to view data. For 16.0,
requires the SELECT ANY TABLE system privilege to view data.
Displays the first 500 rows of data.

602

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Permissions

See View Permissions [page 607] for details and required privileges and permissions.

Referenced Ob
jects

Name

Name of the table referenced.

Owner

Owner of the table referenced.

Object Type

Type of object referenced (for example, table.)

Referenced Column

Name of column referenced.

Dependency Type

Type of reference dependency. Valid values are:

(Read-only)

Dependent Views Name

Direct

Indirect

Name of dependent view.

(Read-only)
Owner

Owner of dependent view.

View Type

Type of dependent view.

Dependency Type

Type of dependency. Valid values are:

Direct

Indirect

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.10.9 View Privilege Summary


A list of the system privileges and object permissions required to complete the various view tasks.

Creating a View
Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

RESOURCE authority with SELECT permission on the tables in the view definition
to create a view owned by you.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

603

Database Version

View Privileges Required

SAP IQ 16.0

View to be owned by self CREATE VIEW system privilege along with one of:

SELECT ANY TABLE system privilege

SELECT object permission on the underlying tables of the view

View to be owned by any user one of:

CREATE ANY VIEW system privilege

CREATE ANY OBJECT system privilege

You must also have one of:

SELECT object permission on the underlying tables of the view

SELECT ANY TABLE system privilege

Viewing View Data in the Execute SQL Window


Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

None. Queries execute with the user's current permissions.

SAP IQ 16.0

None. Queries execute with the user's current permissions.

Recompiling and Enabling a View


Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the view and have SELECT permission on the underlying tables of the
view

One of:

ALTER ANY VIEW system privilege

ALTER ANY OBJECT system privilege

You own the view

You must also have one of:

604

SELECT ANY TABLE system privilege

SELECT permission on the underlying tables of the view

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Disabling a View
Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the view

One of:

ALTER ANY VIEW system privilege

ALTER ANY OBJECT system privilege

You own the view

Deleting a View
Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the view

One of:

DROP ANY VIEW system privilege

DROP ANY OBJECT system privilege

You own the view

Generating View DDL Commands


Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

None.

SAP IQ 16.0

None.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

605

Viewing or Modifying View Properties


Database Version

View Privileges Required

SAP IQ 15.3 and 15.4

View any view property page none.


Modify view permissions one of:

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

Modify any other view property except those relating to triggers one of:

DBA authority

You own the view

For privileges relating to triggers, see View Trigger Privilege Summary [page 624].
SAP IQ 16.0

View any view property page none.


Modify view permissions one of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

Modify a view comment one of:

CREATE ANY VIEW system privilege

CREATE ANY OBJECT system privilege

ALTER ANY VIEW system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the view

Modify any other view property, except those relating to triggers one of:

ALTER ANY VIEW system privilege

ALTER ANY OBJECT system privilege

You own the view

For privileges relating to triggers, see View Trigger Privilege Summary [page 624].

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]

606

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Adding Permissions on a View or Materialized View to a User or Role [page 916]


Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.10.10 View Permissions


Grant or revoke view permissions to users and roles.

Related Information
About the View Permissions List [page 607]
Following the View Permission Grant Trail [page 609]
Granting View Permissions [page 610]
Removing Permissions from a View [page 612]
Adding Administrative Rights to a Granted View Permission [page 613]
Removing Administrative Rights Only from a View Permission [page 615]
View Permissions Privilege Summary [page 616]

5.10.10.1 About the View Permissions List


The View permissions list displays details on the specific object permissions directly granted to users or roles
for a single view.
There are four object permissions for views or materialized views, which you can grant with or with out
administrative rights:
SELECT
INSERT
DELETE
UPDATE
You can grant object permissions in several ways:
You own the object.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

607

You are granted the MANAGE ANY OBJECT PRIVILEGE system privilege.
You are indirectly granted specific permissions through membership in a role to which permissions are
directly or indirectly granted.
You are directly granted specific permissions.
Users or roles with object ownership or the MANAGE ANY OBJECT PRIVILEGE system privilege are
automatically granted all possible object permissions with administrative rights.
You can grant object permissions with or without administrative rights. The grantee can perform authorized
tasks requiring the permission, but cannot in turn grant the permission to another user or role when granted
without administrative rights. The grantee can do both when granted with administrative rights (With grant
option).
The permissions list only lists those permissions granted directly to users or roles. The list indicates to whom
the permissions are granted (grantee), by whom (grantor), and the permissions and their corresponding
administrative rights. The permissions list does not list object permissions obtained through ownership, the
MANAGE ANY SYSTEM OBJECT system privilege, or role membership.
All members of the role inherit permissions granted to a role, including administrative rights. The role, not the
users indirectly granted the permissions through inheritance, appears on the permissions list.
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.
If multiple permissions are granted, you can revoke some or all of the permissions. However, if you revoke a
permission granted administrative rights, and the grantee has granted the permission to other users, who in
turn have granted it to other users, and so on, every grantee in the chain who has received the permission
indirectly, with or without administrative rights, also has their permission revoked. For example, UserA is
granted the SELECT permission with the With grant option. UserA grants SELECT to UserB with the
With grant option. UserB grants SELECT to UserC and UserD without administrative rights and to UserE
with administrative rights. When you revoke the SELECT permission from UserA, it is also revoked for UserB,
UserC, UserD and UserE.
Permissions can be granted on the same view or materialized view, to the same grantee, by multiple grantors,
resulting in the same grantee appearing multiple times on the list. If the same permission is granted to the
same grantee, with and without administrative rights, the grant with the administrative right takes precedence.
When you revoke a permission granted multiple times, the permission is revoked from all instances, regardless
of administrative rights. For example, Manager1 grants User2 INSERT with administrative rights. User1 also
grants INSERT to User2, without administrative rights. Both instances of INSERT are revoked for User2,
regardless of which instance of INSERT is revoked.

608

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.10.10.2 Following the View Permission Grant Trail


Before revoking a grantee's permission, you need to identify grantees directly or indirectly granted the
permission from the original grantee.
The grant chain traces how a grantee has in turn granted a permission to other grantees.
Consider the following:
Bob is granted all permissions with administrative rights.
Bob grants Joe SELECT permission without administrative rights. Bob also grants Jane SELECT and
INSERT permissions with administrative rights.
Jane grants Mike and Joe SELECT and DELETE permissions with administrative rights. Jane also grants
Beth and Mary SELECT permissions without administrative rights.

Note
Joe has now been granted the SELECT permission twice, with different administrative rights, by
different grantors.
Joe grants Beth SELECT permission without administrative rights

Note
Beth has now been granted the SELECT permission twice, by different grantors.
Mike grants Sarah SELECT and UPDATE permission with administrative rights. Mike also grants Alice
SELECT permission without administrative rights.
Sarah grants Alex, Beth, and Role1 SELECT and UPDATE permissions without administrative rights.

Note
Beth has now been granted the SELECT permission multiple times, by different grantors.
You want to revoke SELECT permission from Jane. To determine the potential impact on other users and
roles, do the following:

Tip
For complex grant trails, create a tree diagram to visually track the grant chain.
1. Sort the list by Grantor and locate all instances of administrative grants of SELECT by Jane.

Note
There are four instances of Jane granting permissions. Since we are revoking the SELECT permission
only, only those grants involving the SELECT permission will be impacted. Therefore, revoking Jane's
SELECT permission will also revoke the permission from Mary, Mike, and Beth. Of the SELECT
permissions, we need to follow those involving administrative rights.
2. Locate Mike in the Grantor column.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

609

Note
Mike granted SELECT to Sarah and Alice. Both were granted the SELECT permission as an indirect
(once removed) result of Jane. It does not matter whether the grant included administrative rights.
Therefore, their SELECT permission will also be revoked when Jane's is revoked. Since Alice was
granted SELECT without administrative rights, her grant chain ends. Since Sarah was granted SELECT
with administrative rights, her grant chain continues.
3. Locate Sarah in the Grantor column.

Note
Sarah granted SELECT to Beth and Alex. Both were granted the SELECT permission as an indirect
(twice removed) result of Jane. Again, administrative rights do not matter, and since neither grant was
with administrative rights, the grant chain ends.
To summarize, revoking Jane's SELECT permission revokes the permission from Mike, Joe, Beth, and Mary,
through direct granting or permissions by Jane, but also revokes the permission from Alice, Sarah, Alex,
and Role1 as a result of indirect from Jane.
It is important to note that it is possible for a user to retain an "identified" permission after revoke it the same
permission was granted by multiple grantors. In this scenario, both Bob and Jane granted the SELECT
permission to Joe, so Joe retains the SELECT permission granted by Bob. If a grantee has been granted
multiple permissions, only those permissions explicitly selected are revoked. In this scenario, only the SELECT
permission was revoked from Joe. The DELETE permission remains granted, even though it was also granted
by Jane.

5.10.10.3 Granting View Permissions


Grant view permissions to users and roles.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ

610

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions, then click Grant in the right pane.
6. On the Welcome page, indicate whether the permission is being granted to users or roles/groups.
7. On the Grantees page, select one or more grantees. Click the box in the header row to select all available
grantees.
8. On the Permissions page, select one or more permissions. Click the box in the header row to select all
available permissions.
9. (Optional) Click With grant option to grant the selected permissions administrative rights.

Note
The With grant option option applies to all selected permissions. You cannot apply the With
grant option option to individual permissions.
10. Click Finish.
11. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

611

5.10.10.4 Removing Permissions from a View


Remove view permissions from users and roles.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Context
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.
If multiple permissions are granted, you can revoke some or all of the permissions. However, if you revoke a
permission granted administrative rights, and the grantee has granted the permission to other users, who in
turn have granted it to other users, and so on, every grantee in the chain who has received the permission
indirectly, with or without administrative rights, also has their permission revoked. For example, UserA is
granted the SELECT permission with the With grant option. UserA grants SELECT to UserB with the
With grant option. UserB grants SELECT to UserC and UserD without administrative rights and to UserE
with administrative rights. When you revoke the SELECT permission from UserA, it is also revoked for UserB,
UserC, UserD and UserE.

612

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
A list of permissions currently granted (regardless of administrative rights) appears..
6. In the right pane, select a grantee granted permissions to be revoked, and click Revoke.
7. Select one or more permissions to revoke, or click the box in the header row to select all available
permissions.

Caution
Revoking permissions may result in unexpected revocation from other users, roles, or groups. See
Following the View Permission Grant Trail.
8. Click Finish.
9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.10.10.5 Adding Administrative Rights to a Granted View


Permission
Add administrative rights only to a granted view permission.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

PERMS ADMIN authority

You own the database object

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

613

Database Version

Database Object Privileges Required

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
A list of permissions currently granted (regardless of administrative rights) appears..
6. In the right pane, select the grantee to have administrative rights granted. and then click Grant in the right
pane. If the grantee appears on the list multiple times with the same permission granted, it does not
matter which instance is selected.
7. On the Welcome page, indicate whether the grantee is a user or role.
8. On the Grantees page, select the grantee.
9. On the Permissions page, select the permissions to which administrative rights are to be granted.
10. Click With grant option to grant the selected permissions administrative rights.

Note
The With grant option option applies to all selected permissions. You cannot apply the With
grant option option to individual permissions.
11. Click Finish.
12. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

614

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.10.10.6 Removing Administrative Rights Only from a View


Permission
Remove administrative rights only from a granted view permission.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
You are logged in as the original grantor of the permission with administrative rights to be removed.

Context
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

615

4. Select Properties.
5. In the left pane, click Permissions, then click Grant in the right pane.
6. On the Welcome page, indicate whether the grantee is a user or role.
7. On the Grantees page, select the grantee.
8. On the Permissions page, select the permissions from which administrative rights are being revoked.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.10.10.7 View Permissions Privilege Summary


A list of the system privileges and object permissions required to complete the various view permission tasks.

Grant and Revoke Permissions on a View


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ

616

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Adjust Administration Permissions on a View


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.10.11 View Triggers


Trigger management includes the creation, modification and deletion of triggers on a database object. A
trigger is a special form of stored procedure that executes automatically when a statement that modifies data
displayed in a view is executed.
Triggers can only fire against IQ (catalog) system store tables, but a view can reference multiple tables from
the IQ main store or IQ (catalog) system store. Therefore, triggers that references tables from both stores will
fire, but only against IQ (catalog) system store tables.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

617

Related Information
Creating a View Trigger [page 618]
Deleting a View Trigger [page 619]
Generating View Trigger DDL Commands [page 621]
Viewing or Modifying View Trigger Properties [page 622]
View Trigger Privilege Summary [page 624]

5.10.11.1 Creating a View Trigger


Create a new trigger on a view in the IQ (catalog) system store.

Prerequisites
Database Version

View Trigger Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority and you own the underlying view of the trigger

One of:

CREATE ANY TRIGGER system privilege

CREATE ANY OBJECT system privilege

You must also have one of:

ALTER ANY OBJECT system privilege

ALTER ANY VIEW system privilege

You own the underlying view of the trigger

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The view on which the trigger resides only references IQ (catalog) system store tables.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. Select a view from the right pane on which to create a trigger, click the arrow to the right of the selected
name, and click Properties.
4. In the right pane, select an IQ (catalog) system store table, and do one of:

618

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Click the arrow to the right of the name.


Click the Actions button.
5. Select Properties.
6. In the left pane, select Triggers, then click New in the right pane.
7. On the Welcome page, enter a unique name for the new trigger.
8. On the Events page, select one or more events to cause the trigger to fire.
9. On the Level page, indicate whether the trigger is to fire at the row or statement level.
10. On the SQL page, enter the statement to be executed when the trigger fires. Triggers do not fire after the
execution of LOAD TABLE, TRUNCATE, or WRITETEXT statements.
The statement window provides a template on which to build the trigger statement. The parameters
displayed are based on the options selected in the preceding pages. Once you have made any changes in
the statement window, if you return to any of the preceding pages and change any option, when you return
to the SQL page, the contents of the statement window is overwritten with the base template; any
customizations are lost.
11. (Optional) On the Comment page, add a descriptive comment for the trigger.
12. Click Finish.

Note
Unlike other wizards launched from the properties view, changes to triggers take effect immediately.
You do not need to click OK or Apply in the properties view to upload the change to the database.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.10.11.2 Deleting a View Trigger


Delete triggers from a view.

Prerequisites
Database Version

View Trigger Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

You own the underlying view of the trigger

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

619

Database Version

View Trigger Privileges Required

SAP IQ 16.0

One of:

ALTER ANY OBJECT system privilege

ALTER ANY VIEW system privilege

You own the underlying view of the trigger

This gives you ALTER permission on the underlying view of the trigger.

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. In the right pane, select an IQ (catalog) system store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Triggers.
6. In the left pane, select Triggers, then select one or more triggers from the right pane, and click Delete.

Tip
Use Shift-click or Control-click to select multiple items.
7. Click Yes to confirm deletion.

Note
Unlike other wizards launched from the properties view, changes to triggers take effect immediately.
You do not need to click OK or Apply in the properties view to upload the change to the database.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

620

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.10.11.3 Generating View Trigger DDL Commands


Display the data description language SQL code for adding a trigger to a view in the database. The SQL code
can be a useful reference and training tool.

Prerequisites
Database Version

View Trigger Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. In the right pane, select an IQ (catalog) system store table, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Triggers, then select one or more triggers from the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Generate DDL.
The DDL view shows the SQL code used to add the selected triggers to the view in the database.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

621

5.10.11.4 Viewing or Modifying View Trigger Properties


View or change trigger properties on a view, including the comment and the underlying SQL statement of the
trigger.

Prerequisites
Database Version

View Trigger Privileges Required

SAP IQ 15.3 and 15.4

View trigger properties only none.


Modify trigger comment or properties one of:

SAP IQ 16.0

DBA authority

RESOURCE authority and you own the underlying view of the trigger

View any trigger property page none


Modify a trigger comment one of:

CREATE ANY TRIGGER system privilege

ALTER ANY TRIGGER system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

Note
ALTER permission on the view is not required to modify a comment.
Modify any other trigger property one of:

ALTER ANY OBJECT system privilege

ALTER ANY TRIGGER system privilege, along with one of:

ALTER ANY VIEW system privilege

You own the underlying view of the trigger

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

3. In the right pane, select an IQ (catalog) system store table, and do one of:
Click the arrow to the right of the name.

622

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Click the Actions button.


4. Select Properties.
5. In the left pane, select Triggers, select a trigger in the right pane, and then click Edit.
6. View or modify the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Read
only)

Name of the trigger.

Dialect (Read
only)

The dialect of the trigger.

Events (Read
only)

The event which causes the trigger to fire. Valid events are:
Insert

Delete

Update

Timing (Read
only)

When the trigger fires.

Level (Read
only)

The level at which the trigger fires. Valid levels are:

Comment
SQL

Row

Statement

Text field for adding optional comments.

The SQL statement to be executed when the trigger fires.

7. Click OK to close the Trigger properties view.

Note
Unlike other wizards launched from the properties view, changes to triggers take effect immediately.
You do not need to click OK or Apply in the properties view to upload the change to the database.
8. Click OK.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

623

5.10.11.5 View Trigger Privilege Summary


A list of the system privileges and object permissions required to complete the various view trigger tasks on
database objects.

Creating a View Trigger


Database Version

View Trigger Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority and you own the underlying view of the trigger

One of:

CREATE ANY TRIGGER system privilege

CREATE ANY OBJECT system privilege

You must also have one of:

ALTER ANY OBJECT system privilege

ALTER ANY VIEW system privilege

You own the underlying view of the trigger

Deleting a View Trigger


Database Version

View Trigger Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the underlying view of the trigger

One of:

ALTER ANY OBJECT system privilege

ALTER ANY VIEW system privilege

You own the underlying view of the trigger

This gives you ALTER permission on the underlying view of the trigger.

Generating View Trigger DDL Commands


Database Version

View Trigger Privileges Required

SAP IQ 15.3 and 15.4

None

624

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

View Trigger Privileges Required

SAP IQ 16.0

None

Viewing or Modifying View Trigger Properties


Database Version

View Trigger Privileges Required

SAP IQ 15.3 and 15.4

View trigger properties only none.


Modify trigger comment or properties one of:

SAP IQ 16.0

DBA authority

RESOURCE authority and you own the underlying view of the trigger

View any trigger property page none


Modify a trigger comment one of:

CREATE ANY TRIGGER system privilege

ALTER ANY TRIGGER system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

Note
ALTER permission on the view is not required to modify a comment.
Modify any other trigger property one of:

ALTER ANY OBJECT system privilege

ALTER ANY TRIGGER system privilege, along with one of:

ALTER ANY VIEW system privilege

You own the underlying view of the trigger

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

625

Adding an Authority to an Authority-Based User [page 758]


Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.11

Materialized Views

A materialized view is a view whose result set has been computed and stored on disk, similar to a base table.
Conceptually, a materialized view is both a view (it has a query specification stored in the IQ (catalog) system
store) and a table (it has persistent materialized rows). Materialized views are only supported for IQ (catalog)
system store tables. They are not supported for IQ main store tables.
Many operations that you perform on tables can be performed on materialized views as well. For example, you
can build indexes on materialized views. Column statistics are generated and maintained for materialized
views in exactly the same manner as for tables.
Consider using materialized views for frequently executed, expensive queries, such as those involving
intensive aggregation and join operations. Materialized views provide a queryable structure in which to store
aggregated, joined data. Materialized views are designed to improve performance in environments where the
database is large, and where frequent queries result in repetitive aggregation and join operations on large
amounts of data. For example, materialized views are ideal for use with data warehousing applications.
Materialized views are precomputed using data from the base tables that they refer to. Materialized views are
read only; you cannot perform data-altering operations such as INSERT, LOAD, DELETE, and UPDATE on them.
While you can create indexes on materialized views, you cannot create keys, constraints, triggers, or articles
on them.
There are two types of materialized views:
Manual views
a manual materialized view, or manual view, is a materialized view with a refresh type defined as MANUAL
REFRESH. Data in manual views can become stale because manual views are not refreshed until a refresh
is explicitly requested, for example by using the REFRESH MATERIALIZED VIEW statement or the
sa_refresh_materialized_views system procedure. By default, when you create a materialized view,
it is a manual view.
A manual view is considered stale as soon as any of the underlying tables change, even if the change does
not impact data in the materialized view. You can determine whether a manual view is considered stale by
examining the DataStatus value returned by the sa_materialized_view_info system procedure. If S
is returned, the manual view is stale.
Immediate views
an immediate materialized view, or immediate view, is a materialized view with a refresh type defined as
IMMEDIATE REFRESH. Data in an immediate view is automatically refreshed when changes to the
underlying tables affect data in the view. If changes to the underlying tables do not impact data in the view,
the view is not refreshed.

626

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

When an immediate view is refreshed, only the rows that need to be changed are acted upon. This is
different from refreshing a manual view, where all data is dropped and recreated for a refresh.
You can change a manual view to an immediate view, and vice versa. However, the process for changing from
a manual view to an immediate view has more steps. Changing the refresh type for a materialized view can
impact the status and properties of the view, especially when you change a manual view to an immediate view.

Related Information
Creating a Materialized View [page 627]
Viewing Materialized View Data in the Execute SQL Window [page 629]
Refreshing Materialized View Data [page 630]
Truncating Materialized View Data [page 632]
Validating Materialized View Data [page 633]
Setting a Clustered Index [page 634]
Recompiling and Enabling a Materialized View [page 636]
Disabling a Materialized View [page 637]
Deleting a Materialized View [page 638]
Generating Materialized View DDL Commands [page 639]
Viewing or Modifying Materialized View Properties [page 641]
Materialized View Privilege Summary [page 646]
Materialized View Permissions [page 652]
Materialized View Indexes [page 662]
About Views [page 594]

5.11.1 Creating a Materialized View


Define a SQL query, using the Create Materialized View wizard, to create a new materialized view in the IQ
(catalog) system store.

Prerequisites
Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

Materialized view to be owned by self RESOURCE authority with SELECT permission


on tables in the view definition. You must also have CREATE permission on the selected
dbspace to create a view owned by you.
Materialized view to be owned by any user DBA authority

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

627

Database Version

Materialized View Privileges Required

SAP IQ 16.0

Materialized view to be owned by self CREATE MATERIALIZED VIEW system privi


lege. You must also have one of:

CREATE ANY OBJECT system privilege

CREATE object permission on the dbspace where the materialized view is being
created

Finally, you must have one of:

SELECT ANY TABLE system privilege

SELECT object permission on the underlying tables of the materialized view

Materialized view to be owned by any user CREATE object permission on the


dbspace where the materialized view is being created. You must also have one of:

CREATE ANY MATERIALIZED VIEW system privilege

CREATE ANY OBJECT system privilege

Finally, you must have one of:

SELECT ANY TABLE system privilege

SELECT object permission on the underlying tables of the materialized view

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The tables referenced by the materialized view exists in the IQ (catalog) system store.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the materialized view will be


created

Select a system.

Which user or group do you want to own the materialized


view?

Select the user or role/group to own the materialized


view.

What do you want to name the materialized view?

Enter a unique name for the new materialized view; maxi


mum of 128 characters.

Comment

Text field for adding optional comments.

6. On the SQL page, define a SELECT statement for the materialized view.
7. On the Dbspace page, specify the dbspace that will be used to store the materialized view.

628

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

8. On the Free Space page, specify the amount of free space you want to reserve for each materialized view
page.
9. On the Options page, indicate whether to enable the materialized view and enable use of optimization.
10. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.2 Viewing Materialized View Data in the Execute SQL


Window
Execute a SELECT * FROM query and display contents of the materialized view in the query results pane of
the Execute SQL window.

Prerequisites
Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

None. Queries execute with the user's current permissions.

SAP IQ 16.0

None. Queries execute with the user's current permissions.

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select View Data in SQL.
A SELECT * FROM <materialized view> query executes.
5. (Optional) Modify the SQL statement and click Execute to display different data in the materialized view.
6. Click Close to close the Execute SQL view.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

629

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.3 Refreshing Materialized View Data


Refresh materialized view data to apply any modifications to underlying base tables to the view.

Prerequisites
Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

DBA authority along with both of:

SAP IQ 16.0

INSERT permission on the underlying tables of the materialized view or you own
the materialized view

SELECT permission on the underlying tables of the materialized view or you own
the underlying tables of the materialized view

One of:

INSERT ANY TABLE system privilege

INSERT permission on the materialized view

You own the materialized view

You must also have one of:

SELECT ANY TABLE system privilege

SELECT permission on the underlying tables of the materialized view

You own the underlying tables of the materialized view

The SAP IQ system is running, registered, and authenticated.


The materialized view is enabled.

Context
Materialized view data is read-only.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

630

IQ Servers

Schema Objects

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Views , and then click Materialized Views.

SAP IQ Cockpit
Administer SAP IQ

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Refresh Data.
5. Verify that the list of materialized views to be refreshed is correct and click Yes.
6. Select an isolation level.
Level
Read uncommitted
(level 0)

Read committed
(level 1)

Repeatable read
(level 2)

Serializable
(level 3)

Snapshot

SAP IQ Cockpit
Administer SAP IQ

Description

Read permitted on row with or without write lock.

No read locks are applied.

No guarantee that concurrent transaction will not


modify row or roll back changes to row.

Corresponds to table hints NOLOCK and READUN


COMMITTED.

Allow dirty reads, non-repeatable reads, and phan


tom rows.

Read only permitted on row with no write lock.

Read lock acquired and held for read on current row


only, but released when cursor moves off the row.

No guarantee that data will not change during trans


action.

Corresponds to table hint READCOMMITTED.

Prevent dirty reads.

Allow non-repeatable reads and phantom rows.

Read only permitted on row with no write lock.

Read lock acquired as each row in the result set is


read, and held until transaction ends.

corresponds to table hint REPEATABLEREAD.

Prevent dirty reads and non-repeatable reads.

Allow phantom rows.

Read only permitted on rows in result without write


lock.

Read locks acquired when cursor is opened and held


until transaction ends.

Corresponds to table hints HOLDLOCK and SERIAL


IZABLE.

Prevent dirty reads, non-repeatable reads, and phan


tom rows.

No read locks are applied.

Read permitted on any row.

Database snapshot of committed data is taken when


the first row is read or updated by the transaction.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

631

Level

Description

Share mode

Obtains a shared table lock on the table, preventing


other transactions from modifying the table but al
lowing them read access.

If a transaction puts a shared lock on a table, it can


change data in the table provided no other transac
tion holds a lock of any kind on the row(s) being
modified.

Obtains an exclusive table lock on the table, prevent


ing other transactions from accessing the table. No
other transaction can execute queries, updates, or
any other action against the table.

(Default)

Exclusive mode

7. Click OK.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.4 Truncating Materialized View Data


Truncate and refresh the materialized view to increase performance. Truncation cleans up stale materialized
view data without deleting the view definition, and without removing any rows from the underlying table.

Prerequisites
Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the materialized view

One of:

TRUNCATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

TRUNCATE permission on the materialized view

You own the materialized view

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The materialized view is enabled.

632

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Context
Materialized view data is read-only.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Truncate Data. If the Truncate Data option is unavailable, refresh the data first.
5. Click Yes to confirm truncation.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.5 Validating Materialized View Data


Validate the data in an enabled materialized view.

Prerequisites
Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the materialized view

VALIDATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


The materialized view is enabled.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

633

Context
Materialized view data is read-only.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Validate Data.
The Status column indicates the validation status of each materialized view listed.
5. Click OK.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.6 Setting a Clustered Index


Using a clustered index increases the chance that two rows from adjacent index entries will appear on the
same page in the database. This can lead to performance benefits by reducing the number of times a table
page needs to be read into the buffer pool.

Prerequisites
Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

634

DBA authority

You own the materialized view

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Materialized View Privileges Required

SAP IQ 16.0

One of:

ALTER ANY MATERIALIZED VIEW system privilege

ALTER ANY OBJECT system privilege

You own the materialized view

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The materialized view is enabled.
At least one index for the materialized view exists.

Context
Materialized view data is read-only. Materialized views are only supported for IQ (catalog) system store tables.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. Select a materialized view from the right pane, click the arrow to the right of the selected name, and click
Set Clustered Index.
4. Select Specify an index on this table to be clustered.
5. Select an index from the list and click OK.
The Clustered value for the index is set to true and changes the Clustered value on all other indexes listed
to false.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

635

5.11.7 Recompiling and Enabling a Materialized View


Recompile and enable a disabled materialized view to make it available for use by the database server.

Prerequisites
Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the materialized view and have one of the following:

SELECT permission on the underlying tables of the materialized view

You own the underlying tables of the view

One of:

ALTER ANY MATERIALIZED VIEW system privilege

ALTER ANY OBJECT system privilege

You own the materialized view

You must also have one of:

SELECT ANY TABLE system privilege

SELECT permission on the underlying tables of the materialized view

You own the underlying tables of the materialized view

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The materialized view is disabled.
Recompile and enable any disabled materialized views referenced by this view.

Context
Materialized view data is read-only.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

636

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Recompile and Enable.
5. Click Yes.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.8 Disabling a Materialized View


Disabling a materialized view makes it unusable, but retains the definition of the materialized view in the
database. You can enable and recompile the disabled materialized view at a later time.

Prerequisites
Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the materialized view

One of:

ALTER ANY MATERIALIZED VIEW system privilege

ALTER ANY OBJECT system privilege

You own the materialized view

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The materialized view is enabled.

Context
Materialized view data is read-only.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

637

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Disable.
5. Click Yes.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.9 Deleting a Materialized View


Delete an enabled or disabled materialized view to remove it from the database. Deleting a materialized view
deletes the definition of materialized view and its data, because a materialized view has its own physical
storage (dbspace).

Prerequisites
Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

DROP ANY MATERIALIZED VIEW system privilege

DROP ANY OBJECT system privilege

You own the materialized view

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

638

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Context
Materialized view data is read-only.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Click Yes to confirm deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.10 Generating Materialized View DDL Commands


Display the data description language SQL code for adding a materialized view to the database. The SQL code
can be a useful reference and training tool.

Prerequisites
Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

639

Context
Materialized view data is read-only.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view shows the SQL code used to add the selected materialized views to the database.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

640

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.11.11 Viewing or Modifying Materialized View Properties


View or change materialized view properties including the SQL view definition (including the column
definition), the amount of free space you want to reserve for each materialized view page, permissions on the
materialized view, and the refresh type.

Prerequisites
Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

View any materialized view property page none


Modify materialized view permissions one of:

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

Modify the SQL page of the materialized view properties one of:

DBA authority

You own the materialized view and have SELECT permission on the underlying ta
bles

Modify any other materialized view property except those relating to indexes one of:

DBA authority

ALTER permission on the underlying tables

SELECT permission on the underlying tables

You own the materialized view

For privileges relating to materialized view indexes, see Materialized View Index Privi
lege Summary [page 671]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

641

Database Version

Materialized View Privileges Required

SAP IQ 16.0

View any materialized view property page none


Modify materialized view permissions one of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

Modify a materialized view comment one of:

CREATE ANY MATERIALIZED VIEW system privilege

ALTER ANY MATERIALIZED VIEW system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the materialized view

Modify the SQL page of the materialized view properties one of:

DROP ANY MATERIALIZED VIEW system privilege

DROP ANY OBJECT system privilege

You own the materialized view

You must also have one of:

CREATE ANY MATERIALIZED VIEW system privilege

CREATE ANY OBJECT system privilege

Modify any other materialized view property except those relating to indexes one of:

ALTER ANY MATERIALIZED VIEW system privilege

ALTER ANY OBJECT system privilege

You own the materialized view

For privileges relating to materialized view indexes, see Materialized View Index Privi
lege Summary [page 671]

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Context
Materialized view data is read-only.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.

642

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Read-only)

Name of the materialized view.

Owner (Read-only)

Owner of the materialized view.

Dbspacev

Name of the dbspace the materialized


view resides on.

Database (Read-only)

Name of the database the material


ized view resides on.

Status

Current status of the materialized


view. Valid statuses are

SAP IQ Cockpit
Administer SAP IQ

Enabled

Disable

Optimized

Select to enable optimization on the


materialized view.

Initialized

Indicates current initialized status of


the materialized view. Valid status
are:

Yes

No

Refresh

Click to refresh the current material


ized view.

Truncate

Click to truncate the materialized


view.

Refresh type (Read-only)

Tthe refresh method defined for the


materialized view.

Immediate compatible (Read-only)

Current immediate compatible status


of materialized view. Valid statuses
are:

Yes

No

Last refresh time (Read-only)

Date and time last refresh performed

Known stale time (Read-only)

Length of time between refreshes.

Comment

Text field for adding optional com


ments.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

643

Page

Property

Description
The SELECT statement used to cre

SQL

ate the materialized view.


Columns (Read-only)

Name

Columns referenced by the material


ized view.

ID

ID of the columns referenced by the


materialized view.

Data Type

Data type of the referenced columns.

Allows null

Indicates whether the column allows


(Yes) or disallows (No) NULL values.

Note

Data

For 15.3 and 15.4, requires SELECT permission on the underlying table
to view data.

For 16.0, requires the SELECT ANY TABLE system privilege to view
data.

Displays the first 500 rows of data.

644

Permissions

See Materialized View Permissions [page 652].

Referenced Objects (Read-only)

Name

Name of the table referenced by the


materialized view.

Dependent Views (Read-only)

Name

Name of the dependent view.

Owner

Owner of the dependent view.

View Type

Type of the dependent view.

Dependency Type

Dependency type of the materialized


view. Valid values are:

Direct

Indirect

Indexes

See Materialized View Indexes [page 662].

Options (Read-only)

date_format

The format for dates retrieved from


the database. The default is YYYYMM-DD.

date_order

The interpretation of date formats.


The default is YMD. For Open Client
and jConnect connections, the default
is set to MDY.

default_timestamp_increment

The number of microseconds to add


to a column of type TIMESTAMP to
keep values in the column unique. The
default is 1.

first_day_of_week

The numbering of the days of the


week. The default is 7 (Sunday is the
first day of the week).

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Miscellaneous

Property

Description

nearest_century

The interpretation of two-digit years


in string-to-date conversions. The de
fault is 50.

precision

The maximum number of digits in the


result of any decimal arithmetic. The
default is 30.

scale

The minimum number of digits after


the decimal point when an arithmetic
result is truncated to the maximum
precision. The default is 6.

time_format

The format for times retrieved from


the database. The default is
HH:NN:SS.SSS.

timestamp_format

The format for timestamps that are


retrieved from the database. The de
fault is YYYY-MM-DD HH:NN:SS.SSS.

timestamp_with_timezone_format

The format for timestamps that are


retrieved from the database. The de
fault is YYYY-MM-DD HH:NN:SS.SSS
+HH:NN.

uuid_has_hyphens

The formatting of unique identifier


values when they are converted to
strings. Valid values are:

ON (default)

OFF

Number of rows (approximate)

Approximate number of rows in the


view. Click Calculate to update this
value.

Calculate

Calculates the number of rows in the


view.

Default

Select to reserve 200 bytes in each


page.

Percentage

Select to specify an integer between


0 and 100. The former specifies that
no free space is to be left on each
pageeach page is to be fully packed.
A high value causes each row to be in
serted into a page by itself.

Materialized view data is encrypted

(Available only when the database


was created with table encryption
scope.) Select to encrypt the materi
alize view.

6. Click OK to update any changes to the database and close the page.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

645

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.12 Materialized View Privilege Summary


A list of the system privileges and object permissions required to complete the various materialized view tasks.

Creating a Materialized View


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

Materialized view to be owned by self RESOURCE authority with SELECT permission


on tables in the view definition. You must also have CREATE permission on the selected
dbspace to create a view owned by you.
Materialized view to be owned by any user DBA authority

SAP IQ 16.0

Materialized view to be owned by self CREATE MATERIALIZED VIEW system privi


lege. You must also have one of:

CREATE ANY OBJECT system privilege

CREATE object permission on the dbspace where the materialized view is being
created

Finally, you must have one of:

SELECT ANY TABLE system privilege

SELECT object permission on the underlying tables of the materialized view

Materialized view to be owned by any user CREATE object permission on the


dbspace where the materialized view is being created. You must also have one of:

CREATE ANY MATERIALIZED VIEW system privilege

CREATE ANY OBJECT system privilege

Finally, you must have one of:

SELECT ANY TABLE system privilege

SELECT object permission on the underlying tables of the materialized view

Viewing Materialized View Data in the Execute SQL Window


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

None. Queries execute with the user's current permissions.

646

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Materialized View Privileges Required

SAP IQ 16.0

None. Queries execute with the user's current permissions.

Truncating Materialized View Data


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the materialized view

One of:

TRUNCATE ANY TABLE system privilege

ALTER ANY TABLE system privilege

ALTER ANY OBJECT system privilege

TRUNCATE permission on the materialized view

You own the materialized view

Validating Materialized View Data


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the materialized view

VALIDATE ANY OBJECT system privilege

Refreshing Materialized View Data


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

DBA authority along with both of:

SAP IQ Cockpit
Administer SAP IQ

INSERT permission on the underlying tables of the materialized view or you own
the materialized view

SELECT permission on the underlying tables of the materialized view or you own
the underlying tables of the materialized view

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

647

Database Version

Materialized View Privileges Required

SAP IQ 16.0

One of:

INSERT ANY TABLE system privilege

INSERT permission on the materialized view

You own the materialized view

You must also have one of:

SELECT ANY TABLE system privilege

SELECT permission on the underlying tables of the materialized view

You own the underlying tables of the materialized view

Recompiling and Enabling Materialized View Data


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the materialized view and have one of the following:

SELECT permission on the underlying tables of the materialized view

You own the underlying tables of the view

One of:

ALTER ANY MATERIALIZED VIEW system privilege

ALTER ANY OBJECT system privilege

You own the materialized view

You must also have one of:

SELECT ANY TABLE system privilege

SELECT permission on the underlying tables of the materialized view

You own the underlying tables of the materialized view

Disabling Materialized View Data


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

648

DBA authority

You own the materialized view

One of:

ALTER ANY MATERIALIZED VIEW system privilege

ALTER ANY OBJECT system privilege

You own the materialized view

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Deleting a Materialized View


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

DROP ANY MATERIALIZED VIEW system privilege

DROP ANY OBJECT system privilege

You own the materialized view

Generating Materialized View DDL Commands


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Setting a Clustered Index on a Materialized View


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Administer SAP IQ

DBA authority

You own the materialized view

One of:

ALTER ANY MATERIALIZED VIEW system privilege

ALTER ANY OBJECT system privilege

You own the materialized view

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

649

Viewing or Modifying Materialized View Properties


Database Version

Materialized View Privileges Required

SAP IQ 15.3 and 15.4

View any materialized view property page none


Modify materialized view permissions one of:

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

Modify the SQL page of the materialized view properties one of:

DBA authority

You own the materialized view and have SELECT permission on the underlying ta
bles

Modify any other materialized view property except those relating to indexes one of:

DBA authority

ALTER permission on the underlying tables

SELECT permission on the underlying tables

You own the materialized view

For privileges relating to materialized view indexes, see Materialized View Index Privi
lege Summary [page 671]

650

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Materialized View Privileges Required

SAP IQ 16.0

View any materialized view property page none


Modify materialized view permissions one of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

Modify a materialized view comment one of:

CREATE ANY MATERIALIZED VIEW system privilege

ALTER ANY MATERIALIZED VIEW system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the materialized view

Modify the SQL page of the materialized view properties one of:

DROP ANY MATERIALIZED VIEW system privilege

DROP ANY OBJECT system privilege

You own the materialized view

You must also have one of:

CREATE ANY MATERIALIZED VIEW system privilege

CREATE ANY OBJECT system privilege

Modify any other materialized view property except those relating to indexes one of:

ALTER ANY MATERIALIZED VIEW system privilege

ALTER ANY OBJECT system privilege

You own the materialized view

For privileges relating to materialized view indexes, see Materialized View Index Privi
lege Summary [page 671]

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

651

Adding an Authority to a Group [page 776]


Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.11.13 Materialized View Permissions


Grant or revoke materialized view permissions to users and roles.

Related Information
About the Materialized View Permissions List [page 652]
Following the Materialized View Permission Trail [page 653]
Granting Permissions on a Materialized View [page 655]
Removing Permissions from a Materialized View [page 656]
Adding Administrative Rights to a Granted Materialized View Permission [page 658]
Removing Administrative Rights Only from a Materialized View Permission [page 659]
Materialized View Permissions Privilege Summary [page 661]

5.11.13.1 About the Materialized View Permissions List


The materialized view permissions list displays details on the specific object permissions directly granted to
users or roles for a single view.
There are four object permissions for views or materialized views, which you can grant with or with out
administrative rights:
SELECT
INSERT
DELETE
UPDATE
You can grant object permissions in several ways:
You own the object.
You are granted the MANAGE ANY OBJECT PRIVILEGE system privilege.
You are indirectly granted specific permissions through membership in a role to which permissions are
directly or indirectly granted.
You are directly granted specific permissions.
Users or roles with object ownership or the MANAGE ANY OBJECT PRIVILEGE system privilege are
automatically granted all possible object permissions with administrative rights.

652

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

The permissions list only lists those permissions granted directly to users or roles. The list indicates to whom
the permissions are granted (grantee), by whom (grantor), and the permissions and their corresponding
administrative rights. The permissions list does not list object permissions obtained through ownership, the
MANAGE ANY SYSTEM OBJECT system privilege, or role membership.
All members of the role inherit permissions granted to a role, including administrative rights. The role, not the
users indirectly granted the permissions through inheritance, appears on the permissions list.
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.
If multiple permissions are granted, you can revoke some or all of the permissions. However, if you revoke a
permission granted administrative rights, and the grantee has granted the permission to other users, who in
turn have granted it to other users, and so on, every grantee in the chain who has received the permission
indirectly, with or without administrative rights, also has their permission revoked. For example, UserA is
granted the SELECT permission with the With grant option. UserA grants SELECT to UserB with the
With grant option. UserB grants SELECT to UserC and UserD without administrative rights and to UserE
with administrative rights. When you revoke the SELECT permission from UserA, it is also revoked for UserB,
UserC, UserD and UserE.
Permissions can be granted on the same view or materialized view, to the same grantee, by multiple grantors,
resulting in the same grantee appearing multiple times on the list. If the same permission is granted to the
same grantee, with and without administrative rights, the grant with the administrative right takes precedence.
When you revoke a permission granted multiple times, the permission is revoked from all instances, regardless
of administrative rights. For example, Manager1 grants User2 INSERT with administrative rights. User1 also
grants INSERT to User2, without administrative rights. Both instances of INSERT are revoked for User2,
regardless of which instance of INSERT is revoked.

5.11.13.2 Following the Materialized View Permission Trail


Before revoking a grantee's permission, you need to identify grantees directly or indirectly granted the
permission from the original grantee.
The grant chain traces how a grantee has in turn granted a permission to other grantees.
Consider the following:
Bob is granted all permissions with administrative rights.
Bob grants Joe SELECT permission without administrative rights. Bob also grants Jane SELECT and
INSERT permissions with administrative rights.
Jane grants Mike and Joe SELECT and DELETE permissions with administrative rights. Jane also grants
Beth and Mary SELECT permissions without administrative rights.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

653

Note
Joe has now been granted the SELECT permission twice, with different administrative rights, by
different grantors.
Joe grants Beth SELECT permission without administrative rights

Note
Beth has now been granted the SELECT permission twice, by different grantors.
Mike grants Sarah SELECT and UPDATE permission with administrative rights. Mike also grants Alice
SELECT permission without administrative rights.
Sarah grants Alex, Beth, and Role1 SELECT and UPDATE permissions without administrative rights.

Note
Beth has now been granted the SELECT permission multiple times, by different grantors.
You want to revoke SELECT permission from Jane. To determine the potential impact on other users and
roles, do the following:

Tip
For complex grant trails, create a tree diagram to visually track the grant chain.
1. Sort the list by Grantor and locate all instances of administrative grants of SELECT by Jane.

Note
There are four instances of Jane granting permissions. Since we are revoking the SELECT permission
only, only those grants involving the SELECT permission will be impacted. Therefore, revoking Jane's
SELECT permission will also revoke the permission from Mary, Mike, and Beth. Of the SELECT
permissions, we need to follow those involving administrative rights.
2. Locate Mike in the Grantor column.

Note
Mike granted SELECT to Sarah and Alice. Both were granted the SELECT permission as an indirect
(once removed) result of Jane. It does not matter whether the grant included administrative rights.
Therefore, their SELECT permission will also be revoked when Jane's is revoked. Since Alice was
granted SELECT without administrative rights, her grant chain ends. Since Sarah was granted SELECT
with administrative rights, her grant chain continues.
3. Locate Sarah in the Grantor column.

Note
Sarah granted SELECT to Beth and Alex. Both were granted the SELECT permission as an indirect
(twice removed) result of Jane. Again, administrative rights do not matter, and since neither grant was
with administrative rights, the grant chain ends.

654

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

To summarize, revoking Jane's SELECT permission revokes the permission from Mike, Joe, Beth, and Mary,
through direct granting or permissions by Jane, but also revokes the permission from Alice, Sarah, Alex,
and Role1 as a result of indirect from Jane.
It is important to note that it is possible for a user to retain an "identified" permission after revoke it the same
permission was granted by multiple grantors. In this scenario, both Bob and Jane granted the SELECT
permission to Joe, so Joe retains the SELECT permission granted by Bob. If a grantee has been granted
multiple permissions, only those permissions explicitly selected are revoked. In this scenario, only the SELECT
permission was revoked from Joe. The DELETE permission remains granted, even though it was also granted
by Jane.

5.11.13.3 Granting Permissions on a Materialized View


Grant materialized view permissions to users and roles.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

655

5. In the left pane, click Permissions, then click Grant in the right pane.
6. On the Welcome page, indicate whether the permission is being granted to users or roles/groups.
7. On the Grantees page, select one or more grantees. Click the box in the header row to select all available
grantees.
8. On the Permissions page, select one or more permissions. Click the box in the header row to select all
available permissions.
9. (Optional) Click With grant option to grant the selected permissions administrative rights.

Note
The With grant option option applies to all selected permissions. You cannot apply the With
grant option option to individual permissions.
10. Click Finish.
11. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.13.4 Removing Permissions from a Materialized View


Remove materialized view permissions from users and roles.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

656

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Context
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.
If multiple permissions are granted, you can revoke some or all of the permissions. However, if you revoke a
permission granted administrative rights, and the grantee has granted the permission to other users, who in
turn have granted it to other users, and so on, every grantee in the chain who has received the permission
indirectly, with or without administrative rights, also has their permission revoked. For example, UserA is
granted the SELECT permission with the With grant option. UserA grants SELECT to UserB with the
With grant option. UserB grants SELECT to UserC and UserD without administrative rights and to UserE
with administrative rights. When you revoke the SELECT permission from UserA, it is also revoked for UserB,
UserC, UserD and UserE.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
A list of permissions currently granted (regardless of administrative rights) appears..
6. In the right pane, select a grantee granted permissions to be revoked, and click Revoke.
7. Select one or more permissions to revoke, or click the box in the header row to select all available
permissions.

Caution
Revoking permissions may result in unexpected revocation from other users, roles, or groups. See
Following the Materialized View Permission Grant Trail.
8. Click Finish.
9. Click OK to update any changes to the database and close the page.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

657

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.13.5 Adding Administrative Rights to a Granted


Materialized View Permission
Add administrative rights only to a granted materialized view permission.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
A list of permissions currently granted (regardless of administrative rights) appears..
6. In the right pane, select the grantee to have administrative rights granted. and then click Grant in the right
pane. If the grantee appears on the list multiple times with the same permission granted, it does not
matter which instance is selected.

658

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

7. On the Welcome page, indicate whether the grantee is a user or role.


8. On the Grantees page, select the grantee..
9. On the Permissions page, select the permissions to which administrative rights are to be granted.
10. Click With grant option to grant the selected permissions administrative rights.

Note
The With grant option option applies to all selected permissions. You cannot apply the With
grant option option to individual permissions.
11. Click Finish.
12. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.13.6 Removing Administrative Rights Only from a


Materialized View Permission
Remove administrative rights only from a granted materialized view permission.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
You are logged in as the original grantor of the permission with administrative rights to be removed.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

659

Context
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions, then click Grant in the right pane.
6. On the Welcome page, indicate whether the grantee is a user or role.
7. On the Grantees page, select the grantee..
8. On the Permissions page, select the permissions from which administrative rights are being revoked.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

660

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.11.13.7 Materialized View Permissions Privilege Summary


A list of the system privileges and object permissions required to complete the various materialized view
permission tasks.

Grant and Revoke Permissions on a Materialized View


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

Adjust Administration Permissions on a Materialized View


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

661

Adding EXECUTE Permission to a User or Role [page 922]


Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.11.14 Materialized View Indexes


You can add multiple indexes to any column in the materialized view to better support the queries you plan to
run.
It is more efficient to create all the indexes needed before you insert any data into your database. You can drop
any of the optional indexes later if you decide you do not need them.
Indexes can greatly improve the performance of searches on the indexed columns. However, indexes take up
space within the database and slow down insert, update, and delete operations. This section helps you
determine when you should create an index and how to achieve maximum performance from your index.
There are many situations in which creating an index improves the performance of a database. An index
provides an ordering of a table's rows based on the values in some or all of the columns. An index allows the
database server to find rows quickly. It permits greater concurrency by limiting the number of database pages
accessed. An index also affords the database server a convenient means of enforcing a uniqueness constraint
on the rows in a table.

Related Information
Creating a Materialized View Index [page 663]
Deleting a Materialized View Index [page 664]
Rebuilding a Materialized View Index [page 665]
Validating a Materialized View Index [page 667]
Generating Materialized View Index DDL Commands [page 668]
Viewing or Modifying Materialized View Index Properties [page 669]
Materialized View Index Privilege Summary [page 671]

662

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.11.14.1 Creating a Materialized View Index


Create an index on a materialized view.

Prerequisites
Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the underlying database object of the index

One of:

CREATE ANY OBJECT system privilege

CREATE permission on the dbspace, along with one of:

CREATE ANY INDEX system privilege

You own the materialized view index

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Context
Indexes improve search performance on the indexed column or columns. Indexes take up space in the
database, however, and slow down the performance of insert, delete, and update operations.
When creating indexes, the order in which you specify the columns becomes the order in which the columns
appear in the index. Duplicate references to column names in the index definition are not allowed.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Indexes, then click New in the right pane.
6. On the Index Name page, specify a name for the index.
7. On the Columns page, highlight one or more columns and click Add Asc or Add Desc

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

663

Tip
Use Shift-click or Control-click to select multiple items.
a. In the Columns in index list, highlight a single column and click the up and down buttons to reposition
the column.
b. Highlight one or more columns and click Remove to remove columns from the index.
8. On the Uniqueness page, indicate if the index is unique.
9. On the Index Clustering page, indicate if the index is clustered and the dbspace to store the index.
10. (Optional) On the Comment page, enter a text description for the index.
11. Click Finish.
The index appears in the properties view, but is not saved to the database until you click OK or Apply.
12. Click OK to update any changes to the database and close the page.

Related Information
Column Index Types [page 542]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.14.2 Deleting a Materialized View Index


Unused indexes take up space in your database. Delete a materialized view index if you do not require it.

Prerequisites
Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority with ALTER permission on the underlying database object of


the index

You own the underlying database object of the index

One of:

DROP ANY INDEX system privilege

DROP ANY OBJECT system privilege

You own the materialized index

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

664

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Indexes, then select one or more indexes from the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Delete.

Caution
There is no confirmation prompt before the indexes are deleted.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.14.3 Rebuilding a Materialized View Index


As data is modified in the underlying tables that the indexes operate on, the indexes become fragmented.
Rebuild fragmented indexes on materialized views to improve performance.

Prerequisites
Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

RESOURCE authority with ALTER permission on the underlying database object of


the index

You own the underlying database object of the index

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

665

Database Version

Materialized View Index Privileges Required

SAP IQ 16.0

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

You own the underlying database object of the index

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Indexes then select one or more indexes from the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Rebuild.
The Rebuild Indexes view appears when complete and indicates the rebuild status of each selected index.
7. Click OK.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

666

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.11.14.4 Validating a Materialized View Index


Validate an index on a materialized view.

Prerequisites
Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

VALIDATE authority

VALIDATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Indexes, then select one or more indexes from the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Validate.

Note
Validate does not appear when the underlying table is an IQ store (main store) table.
The Validate Indexes view appears when complete and indicates the validation status of each selected
index.
7. Click OK.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

667

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.14.5 Generating Materialized View Index DDL


Commands
Display the data description language SQL code for adding an index to a materialized view. The SQL code can
be a useful reference and training tool.

Prerequisites
Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Indexes.
6. Select one or more indexes from the right pane and click Generate DDL.

Tip
Use Shift-click or Control-click to select multiple items.
7. Click Generate DDL.
The DDL window shows the SQL code used to add the selected index to the table or materialized view.

668

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.14.6 Viewing or Modifying Materialized View Index


Properties
Display and edit the properties for the selected materialized view index.

Prerequisites
Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

View any materialized view index property page none


Modify any materialized view index property one of:

DBA authority

RESOURCE authority with ALTER permission on the underlying database object of

You own the underlying database object of the index

the index

SAP IQ 16.0

View any materialized view index property page none


Modify a materialized view index comment one of:

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

Note
ALTER permission on the materialized view is not required to modify the comment
only.
Modify any other materialized view index property one of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace, along with one of:

ALTER ANY INDEX system privilege

You own the materialized view

The SAP IQ system is running, registered, and authenticated.


(Modifying properties only) In a multiplex configuration, the coordinator node is running.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

669

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Materialized Views.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Indexes, then click Edit in the right pane.
6. View or modify the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name

Name of the index.

Unique (Read-only)

Indicates hether values in the index must be unique. The unique value
is set when you create a new index.

Table (Read-only)

Name and owner of the table with which the index is associated.

Dbspace (Read-only)

Database file, or dbspace, where the index is located.

Index Type (Read-only)

Index type (High Non-Group, for example).

Clustered (Read-only)

Indicates whether this is a clustered index. Clustered indexes store the


table rows in approximately the same order as they appear in the cor
responding index. Using a clustered index can lead to performance
benefits by reducing the number of times each page needs to be read
into memory. Only one index on a table can be a clustered index.

Format (Read-only)

Store type of the index.

Comment

Text field for adding optional comments.

Name

Name of the columns indexed.

Sequence

Columns are sorted by their sequence, which is a unique number start


ing at 0. The order of the numbers determines the relative position of
the columns in the index.

Order

Ascending or descending order. Set the order when you create a new
index.

Data Type

Data type of the columns indexed.

Dbspace

Dbspace occupied by the object.

Size

Size of the object.

% File

Percentage of the file used by this object.

First Block

First block used by this object.

Columns (Readonly)

Placement (Readonly)

670

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Fragmentation
(Read-only)

Property

Description

Last Block

Last block used by this object.

Fill Percent

Range of how full pages are, for example, between 11 and 20% full. All
percentages are truncated to the nearest percentage point.

BTree Pages

Number of B-tree pages in the index with a particular fill percent.

GArray Pages

Number of GArray pages in the index with a particular fill percent.

Bitmap Pages

Number of bitmap pages in the index with a particular fill percent.

7. Click OK.
Index property modifications are not yet saved to the database.
8. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.11.14.7 Materialized View Index Privilege Summary


A list of the system privileges and object permissions required to complete the various index tasks
materialized views.

Creating a Materialized View Index


Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Administer SAP IQ

DBA authority

You own the underlying database object of the index

One of:

CREATE ANY OBJECT system privilege

CREATE permission on the dbspace, along with one of:

CREATE ANY INDEX system privilege

You own the materialized view index

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

671

Deleting a Materialized View Index


Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority with ALTER permission on the underlying database object of


the index

You own the underlying database object of the index

One of:

DROP ANY INDEX system privilege

DROP ANY OBJECT system privilege

You own the materialized index

Rebuilding a Materialized View Index


Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority with ALTER permission on the underlying database object of


the index

You own the underlying database object of the index

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

You own the underlying database object of the index

Validating a Materialized View Index


Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

672

DBA authority

VALIDATE authority

VALIDATE ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Generating Materialized View Index DDL Commands


Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Materialized View Index Properties


Database Version

Materialized View Index Privileges Required

SAP IQ 15.3 and 15.4

View any materialized view index property page none


Modify any materialized view index property one of:

DBA authority

RESOURCE authority with ALTER permission on the underlying database object of

You own the underlying database object of the index

the index

SAP IQ 16.0

View any materialized view index property page none


Modify a materialized view index comment one of:

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

Note
ALTER permission on the materialized view is not required to modify the comment
only.
Modify any other materialized view index property one of:

ALTER ANY OBJECT system privilege

CREATE permission on the dbspace, along with one of:

ALTER ANY INDEX system privilege

You own the materialized view

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

673

Adding a System Privilege to a Standalone Role [page 886]


Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.12 Domains
Domains are user-defined data types. They improve convenience and encourage consistency in the database.
Domains allow you to define columns on the same data type automatically throughout a database. Domains
can have the same NULL or NOT NULL condition, with the same DEFAULT setting and the same CHECK
condition.

Related Information
Creating a Domain [page 675]
Deleting a Domain [page 680]
Generating Domain DDL Commands [page 681]
Viewing Domain Properties [page 682]
Domain Privilege Summary [page 683]

674

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.12.1 Creating a Domain


Use the Create Domain wizard to create an SAP IQ domain.

Prerequisites
Database Version

Domain Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority

One of:

CREATE DATATYPE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Domains.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the domain will be created

Select a system.

What do you want to name the domain?

Enter a unique name for the new domain; maximum of


128 characters.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

675

Property

Description

Which built-in type do you want to use?

Select the domain type. Specify the size, scale and unit
when enabled for specify types.

Note
For appropriate data type options and default values,
in the SAP IQ documentation, see Reference: Building
Blocks, Tables, and Procedures > SQL Data Types.

6. On the Clauses page, specify:


Property

Description

This domain has a default value

Select to define a default value.

Null values

Select whether null values will be allowed. Default is to


use the database default setting, which allows null values.

7. On the Check Constraint page, specify a check constraint for the domain.
8. Click Finish.

Related Information
Constraints and Defaults with Domains [page 676]
Compatibility Considerations for Domains [page 677]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.12.1.1 Constraints and Defaults with Domains


Many of the attributes associated with columns, such as allowing NULL values, having a DEFAULT value, and
so on, can be built into a user-defined data type.
Any column that is defined on the data type automatically inherits the NULL setting, CHECK condition, and
DEFAULT values. This allows uniformity to be built into columns with a similar meaning throughout a database.
For example, many primary key columns in the demo database are integer columns holding ID numbers. The
following statement creates a data type that may be useful for such columns:
CREATE DOMAIN id INT
NOT NULL
DEFAULT AUTOINCREMENT
CHECK( @col > 0 )
Any column created using the data type id is not allowed to hold NULLs, defaults to an autoincremented value,
and must hold a positive number. Any identifier could be used instead of <col> in the <@col> variable.

676

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

The attributes of the data type can be overridden if needed by explicitly providing attributes for the column. A
column created on data type id with NULL values explicitly allowed does allow NULLs, regardless of the setting
in the id data type.

5.12.1.2 Compatibility Considerations for Domains


Ensure compatibility with SQL Anywhere and Adaptive Server Enterprise when you create domains.

NULL in Columns

For compatible treatment of NULL:


SQL Anywhere and SAP IQ assume that columns can be null unless NOT NULL is stated in the column
definition. You can change this behavior by setting the database option ALLOW_NULLS_BY_DEFAULT to
the Transact-SQL compatible setting OFF.
SQL Anywhere and SAP IQ assume that BIT columns cannot be NULL.
Adaptive Server Enterprise assumes that columns cannot be null unless NULL is stated.

Check Constraints

SAP IQ enforces check constraints on base, global temporary, and local temporary tables, and on user-defined
data types. Users can log check integrity constraint violations and specify the number of violations that can
occur before a LOAD statement rolls back.
SAP IQ does not allow the creation of a check constraint that it cannot evaluate, such as those composed of
user-defined functions, proxy tables, or non-SAP IQ tables. Constraints that cannot be evaluated are detected
the first time the table on which the check constraint is defined is used in a LOAD, INSERT, or UPDATE
statement. SAP IQ does not allow check constraints containing:
Subqueries
Expressions specifying a host language parameter, a SQL parameter, or a column as the target for a data
value
Set functions
Invocations of nondeterministic functions or functions that modify data
Adaptive Server Enterprise and SQL Anywhere enforce CHECK constraints. SQL Anywhere allows subqueries in
check constraints.
SAP IQ supports user-defined data types that allow constraints to be encapsulated in the data type definition.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

677

Referential Integrity Constraints

Actions for enforcing integrity are supported as follows:


SAP IQ supports all ANSI actions: SET NULL, CASCADE, DEFAULT, RESTRICT.
Adaptive Server Enterprise supports two of these actions: SET NULL, DEFAULT.

Note
You can achieve CASCADE in Adaptive Server Enterprise by using triggers instead of referential
integrity.
SAP IQ supports the RESTRICT action only.
SAP IQ does not support NOT NULL FOREIGN KEY.
SAP IQ has the restriction that a column cannot be both a candidate key and a foreign key at the same
time.

Default Values in a Column

Default value support differs as follows:


Adaptive Server Enterprise and SQL Anywhere support specifying a default value for a column.
Only SQL Anywhere supports DEFAULT UTC TIMESTAMP.
SAP IQ supports specifying a default value for a column, except for the special values DEFAULT UTC
TIMESTAMP and DEFAULT CURRENT UTC TIMESTAMP. SAP IQ also ignores settings for the
DEFAULT_TIMESTAMP_INCREMENT database option.

Identity Columns

Identity column support differs as follows:


SAP IQ supports IDENTITY or DEFAULT AUTOINCREMENT as a default value. SAP IQ supports identity
columns of any numeric type with any precision and scale 0, and the column can be NULL. SAP IQ identity
columns must be positive and are limited by the range of the data type. SAP IQ supports a single identity
column per table, and requires database option IDENTITY_INSERT set to a table name for explicit inserts
and updates. To drop a table with an IDENTITY column, you cannot have IDENTITY_INSERT set to that
table. The table can contain data when adding an identity column. Tables derived using SELECT INTO do
not have Identity/Autoincrement columns. SAP IQ views cannot contain IDENTITY/DEFAULT
AUTOINCREMENT columns.
SQL Anywhere supports the AUTOINCREMENT default value. SQL Anywhere supports identity columns of
any numeric type with any allowable scale and precision. The identity column value can be positive,

678

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

negative, or zero, limited by the range of the data type. SQL Anywhere supports any number of identity
columns per table, and does not require identity_insert for explicit inserts, drops, and updates. The table
must be empty when adding identity columns. SQL Anywhere identity columns can be altered to be
nonidentity columns, and vice versa. You can add or drop AUTOINCREMENT columns from SQL Anywhere
views.
Adaptive Server Enterprise supports a single identity column per table. Adaptive Server Enterprise identity
columns are restricted to only numeric data type scale 0, maximum precision 38. They must be positive,
are limited by the range of the data type, and cannot be null. Adaptive Server Enterprise requires
identity_insert for explicit inserts and drops, but not for updates to the identity column. The table can
contain data when you add an identity column. Adaptive Server Enterprise users cannot explicitly set the
next value chosen for an identity column. Adaptive Server Enterprise views cannot contain IDENTITY/
AUTOINCREMENT columns. When using SELECT INTO under certain conditions, Adaptive Server
Enterprise allows Identity/Autoincrement columns in the result table if they were in the table being
selected from.

Computed Columns

Computed column support differs as follows:


SQL Anywhere supports computed columns that can be indexed.
Adaptive Server Enterprise and SAP IQ do not.

Temporary Tables

You can create a temporary table by placing a pound sign (#) without an owner specification in front of the
table name in a CREATE TABLE statement. These temporary tables are SAP IQ-declared temporary tables and
are available only in the current connection.

Locating Tables
Physical placement of a table is carried out differently in Adaptive Server Enterprise and SAP IQ. SAP IQ
supports the ON <segment-name >clause, but <segment-name >refers to an SAP IQ dbspace.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

679

5.12.2 Deleting a Domain


Delete a domain to remove it from the database.

Prerequisites
Database Version

Domain Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

DROP DATATYPE system privilege

DROP ANY OBJECT system privilege

You own the domain

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Domains.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Click Yes to confirm deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

680

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.12.3 Generating Domain DDL Commands


Display the data description language SQL code for adding a domain to the database. The SQL code is a useful
reference and training tool.

Prerequisites
Database Version

Domain Privileges Required

SAP IQ15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, at least one server is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Domains.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL
The DDL view shows the SQL code used to add the selected domains to the database.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

681

5.12.4 Viewing Domain Properties


Display the properties for the selected domain.

Prerequisites
Database Version

Domain Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Domains.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
The Domain Properties view appears. All property pages are read-only.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

682

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.12.5 Domain Privilege Summary


A list of the system privileges and object permissions required to complete the various domain tasks.

Creating a Domain
Database Version

Domain Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority

One of:

CREATE DATATYPE system privilege

CREATE ANY OBJECT system privilege

Deleting a Domain
Database Version

Domain Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

DROP DATATYPE system privilege

DROP ANY OBJECT system privilege

You own the domain

Generating Domain DDL Commands


Database Version

Domain Privileges Required

SAP IQ15.3 and 15.4

None

SAP IQ 16.0

None

Viewing Domain Properties


Database Version

Domain Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

683

Database Version

Domain Privileges Required

SAP IQ 16.0

None

5.13 Text Configuration Objects


Create, delete, generate DDL, and manage the properties of text configuration objects.
For detailed information on text configuration objects, in the SAP IQ documentation, see SAP IQ Unstructured
Data Analytics.

Related Information
Creating a Text Configuration Object [page 684]
Deleting a Text Configuration Object [page 687]
Generating Text Configuration Object DDL Commands [page 688]
Viewing or Modifying Text Configuration Object Properties [page 689]
Text Configuration Privilege Summary [page 691]

5.13.1 Creating a Text Configuration Object


Create a text configuration for use with a text index.

Prerequisites
Database Version

Text Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Text configuration object to be owned by self RESOURCE authority


Text configuration object to be owned by any user DBA authority

684

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Text Configuration Object Privileges Required

SAP IQ 16.0

Text configuration object to be owned by self CREATE TEXT CONFIGURATION sys


tem privilege
Text configuration object to be owned by any user one of:

CREATE ANY TEXT CONFIGURATION system privilege

CREATE ANY OBJECT system privilege

You must also have one of:

ALTER ANY TEXT CONFIGURATION system privilege

ALTER ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

Context
For detailed information on stoplists, in the SAP IQ documentation, see SAP IQ Unstructured Data Analytics >
TEXT Indexes and Text Configuration Objects > Text Configuration Objects > Text Configuration Object Settings
> Stoplist Setting (STOPLIST).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Text Configuration Objects.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Text Configuration Name page, specify:
Property

Description

Select a resource on which the text configuration will be


created

Select a system.

Which user do you want to own the text configuration ob


ject?

Select the user to own the text configuration object.

What do you want to name the view?

Enter a unique name for the new text configuration object;


maximum of 128 characters.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

685

Property

Description

For which database collation will this text configuration


object be used

Each database has a CHAR collation and an NCHAR colla


tion, configured when the database is created. Valid
choices are:
ISO_BINENG (default) binary ordering, English ISO/
ASCII 7-bit letter case mappings
UCA standard default Unicode Collation Algorithm
collation

(Optional) Comment

Specify an option comment for the text configuration ob


ject.

6. On the Choose the Term Breaker page, specify:


Property

Description

Which term breaker algorithm should be used?

Valid settings are Generic or N-gram.

What is the minimum term length?

Valid entries are:


Generic valid range is 1-60. Default value is 1.
N-gram not available.

What is the maximum term length?

Valid entries are:


Generic valid range is 1-60. Default is 20.
N-gram valid range is 1-60. Default is 4.

(Optional) Use an external term breaker? (For database


collation ISO_BINENG and Generic term breaker algo
rithm)

Specify an external library function to break the text into


terms, using one of these formats:

function-name@library-file-name

Windows-function-name@library-file-name.dll

UNIX:UNIX-function-name@library-file-name.so

7. (For ISO_BINENG database collation only) (Optional) On the Specify an Option Prefilter page, select Use
an external prefilter and specify the external prefilter function and library.
8. (Optional) On the Specify the Stoplist page, indicate the terms to be ignored when building a text index.
Separate terms with spaces. Terms in the stoplist are also ignored in queries.

Note
Many non-alphanumeric characters are ignored in stoplists; others (including spaces, apostrophes, and
dashes) are interpreted as term delimiters. Consequently, including contractions and hyphenated
terms may lead to undesirable results, even when you enclose the terms in quotes. How the stoplist is
parsed depends on the term breaker and term lengths you specified in step 6 [page 686].
9. Click Finish.

Next Steps
Create a text index that uses your new text configuration.

686

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.13.2 Deleting a Text Configuration Object


Remove one or more text configuration objects.

Prerequisites
Database Version

Text Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Text configuration object owned by self none


Table configuration object owned by any user DBA authority

SAP IQ 16.0

Text configuration object owned by self none


Table configuration object owned by any user one of:

DROP ANY TEXT CONFIGURATION system privilege

DROP ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Text Configuration Objects.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete. You cannot delete the default text configuration objects default_char and or default_nchar.
5. Click Yes to confirm deletion.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

687

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.13.3 Generating Text Configuration Object DDL Commands


Generate data description language for one or more text configuration objects. The DDL code can be a useful
reference and training tool.

Prerequisites
Database Version

Text Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Text Configuration Objects.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view shows the SQL code used to add the selected text configurations to the database.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

688

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.13.4 Viewing or Modifying Text Configuration Object


Properties
Display and change the properties of a text configuration object for a text index.

Prerequisites
Database Version

Text Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

View any text object configuration property page none


Modify any text object configuration property one of:

SAP IQ 16.0

DBA authority

You own the text configuration object

View any text object configuration property page none


Modify a text configuration object term breaker or external prefilter property CREATE
ANY EXTERNAL REFERENCE system privilege. You must also have one of:

ALTER ANY TEXT CONFIGURATION system privilege

ALTER ANY OBJECT system privilege

You own the text configuration object

Modify a text configuration object comment one of:

CREATE ANY TEXT CONFIGURATION system privilege

ALTER ANY TEXT CONFIGURATION system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the text configuration

Modify any other text configuration object properties one of:

ALTER ANY TEXT CONFIGURATION system privilege

ALTER ANY OBJECT system privilege

You own the text configuration object

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Text Configuration Objects.

3. In the right pane, select an item, and do one of:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

689

Click the arrow to the right of the name.


Click the Actions button.
4. Select Properties.
5. View or modify the properties.

Note
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in
read-only mode.
Page

Property

Description

General

Name (Read-only)

Name of the text configuration.

Type (Read-only)

Type of object.

Owner (Readonly)

Owner of the text configuration object.

Collation se
quence (Readonly)

Type of database collation. Valid entries are:


ISO_BINENG (default) binary ordering, English ISO/ASCII 7-bit letter
case mappings.
UCA standard default Unicode Collation Algorithm collation

Settings

Comment

Text field for adding optional comments.

Which term
breaker algorithm
should be used?

Valid settings are Generic or N-gram.

What is the mini


Valid entries are:
mum term length?
Generic valid range is 1-60. Default value is 1.
N-gram not available.
What is the maxi
Valid entries are:
mum term length?
Generic valid range is 1-60. Default is 20.
N-gram valid range is 1-60. Default is 4.
(Optional) Use an Specify an external library function to break the text into terms, using one of
these formats:
external term
breaker? (For da
function-name@library-file-name
tabase collation
Windows-function-name@library-file-name.dll
ISO_BINENG and
UNIX:UNIX-function-name@library-file-name.so
Generic term
breaker algorithm)
Use an external
prefilter (For
ISO_BINENG col
lation sequence
only.)
Stoplist

690

Specify the external prefilter function and library

Indicate the terms to be ignored when building a text index. Click Sort Terms to sort the term list.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Options (Readonly)

The option settings the text configuration object was created with.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.13.5 Text Configuration Privilege Summary


A list of the system privileges and object permissions required to complete the various text configuration
tasks.

Creating a Text Configuration Object


Database Version

Text Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Text configuration object to be owned by self RESOURCE authority


Text configuration object to be owned by any user DBA authority

SAP IQ 16.0

Text configuration object to be owned by self CREATE TEXT CONFIGURATION sys


tem privilege
Text configuration object to be owned by any user one of:

CREATE ANY TEXT CONFIGURATION system privilege

CREATE ANY OBJECT system privilege

You must also have one of:

ALTER ANY TEXT CONFIGURATION system privilege

ALTER ANY OBJECT system privilege

Deleting a Text Configuration Object


Database Version

Text Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Text configuration object owned by self none


Table configuration object owned by any user DBA authority

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

691

Database Version

Text Configuration Object Privileges Required

SAP IQ 16.0

Text configuration object owned by self none


Table configuration object owned by any user one of:

DROP ANY TEXT CONFIGURATION system privilege

DROP ANY OBJECT system privilege

Generating Text Configuration Object DDL Commands


Database Version

Text Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Text Configuration Object Properties


Database Version

Text Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

View any text object configuration property page none


Modify any text object configuration property one of:

692

DBA authority

You own the text configuration object

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Text Configuration Object Privileges Required

SAP IQ 16.0

View any text object configuration property page none


Modify a text configuration object term breaker or external prefilter property CREATE
ANY EXTERNAL REFERENCE system privilege. You must also have one of:

ALTER ANY TEXT CONFIGURATION system privilege

ALTER ANY OBJECT system privilege

You own the text configuration object

Modify a text configuration object comment one of:

CREATE ANY TEXT CONFIGURATION system privilege

ALTER ANY TEXT CONFIGURATION system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the text configuration

Modify any other text configuration object properties one of:

ALTER ANY TEXT CONFIGURATION system privilege

ALTER ANY OBJECT system privilege

You own the text configuration object

5.14 Text Indexes


Create, delete, generate DDL, and manage the properties of text indexes and text configuration objects. A text
index stores positional information for terms in an indexed column. Text indexes are created using settings
stored in a text configuration object.
Text indexes significantly speed up full-text searching. You must configure a text index for a table before it is
subjected to a full-text search.
Each text index requires a text configuration object. SAP provides two default text configuration objects, one
for CHAR collation, one for NCHAR collation. When you set up a text index, you can use one of the default text
configuration objects or create a custom text configuration object.
In the SAP IQ documentation, see SAP IQ Unstructured Data Analytics for detailed information on text indexes.

Related Information
Creating a Text Index [page 694]
Deleting a Text Index [page 696]
Refreshing a Text Index [page 697]
Truncating a Text Index [page 700]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

693

Generating Text Index DDL Commands [page 701]


Viewing or Modifying Text Index Properties [page 702]
Text Index Privilege Summary [page 706]

5.14.1 Creating a Text Index


Set up a text index for a table.

Prerequisites
Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

REFERENCE permission on the underlying table being indexed along with CREATE
permission on the dbspace where the index is being created

You own the underlying table being indexed along with CREATE permission on the
dbspace where the index is being created

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes.
SAP IQ 16.0

One of:

CREATE ANY INDEX system privilege along with CREATE permission on the
dbspace where the index is being created

CREATE ANY OBJECT system privilege

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes:

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


The text configuration to be used with a text index already exists.
You must be licensed for the Unstructured Data Analytics option (IQ_UDA).

694

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Text Indexes.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Text Index Name page, specify
Property

Description

Select a resource on which the text index will be created

Select a system.

For which table do you want to create the text index?

Select the table.

What do you want to name the text index?

Enter a unique name for the new text index; maximum of


128 characters.

6. On the Columns page, select the columns to be included in the index.


7. On the Text Configuration page, select the text configuration object to be included in the index.
If the index is on a IQ main store table, skip to step 9 [page 695].
8. (IQ (catalog) system store tables only) On the Refresh Type page, specify:
Property

Description

Immediate

The text index is automatically refreshed when data in the


underlying table changes.

Manual

The text index is refreshed only when explicitly requested.

Automatic

The text index is automatically refreshed using a time in


terval that you specify. If you select Automatic, set the in
terval at which the text index refreshes

Note
If the index is on a IQ main store table, it refreshes automatically whenever the data in the underlying
table changes.
9. On the Dbspace page, select the dbspace in which you want to store the text index.
10. (Optional) On the Comment page, enter a comment for the text index.
11. Click Finish to create the text index.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

695

5.14.2 Deleting a Text Index


Remove one or more text indexes.

Prerequisites
Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

REFERENCE permission on the underlying table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes.
SAP IQ 16.0

One of:

DROP ANY INDEX system privilege

DROP ANY OBJECT system privilege

REFERENCE permission on the underlying table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes:

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


You must be licensed for the Unstructured Data Analytics option (IQ_UDA).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Text Indexes.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

696

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Verify that the list of text indexes to be deleted is correct and click Yes.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.14.3 Refreshing a Text Index


Refresh a text index for a IQ (catalog) system store table to bring it up to date when the underlying data has
changed.

Prerequisites
Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

REFERENCE permission on the underlying table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

697

Database Version

Text Index Privileges Required

SAP IQ 16.0

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

REFERENCE permission on the underlying table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes:

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


You must be licensed for the Unstructured Data Analytics option (IQ_UDA).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Text Indexes.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Refresh Data. If the text is not available for refreshing, the Refresh Data button is grayed out.
5. In the Text Index Refresh Data view, select the isolation level for the refresh:
Level
Read uncommitted (level 0)

698

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Description

Can read rows with or without write lock

Applies no read locks

Data may change during the refresh

Allows dirty reads, nonrepeatable reads, and phan


tom rows

SAP IQ Cockpit
Administer SAP IQ

Level
Read committed (level 1)

Repeatable read (level 2)

Serializable (level 3)

Snapshot

Share mode (the default)

Exclusive mode

Description

Can read only rows with no write lock

Read-locks only the current row and releases it im


mediately after reading

Data may change during the refresh

Prevents dirty reads

Allows nonrepeatable reads and phantom rows

Can read only rows with no write lock

Read-locks each row as it is read; holds the lock until


the refresh is done

Prevents dirty reads and nonrepeatable reads

Allows phantom rows

Can read only rows with no write lock

Read-locks every row for the duration of the refresh


operation

Prevents dirty reads, nonrepeatable reads, and phan


tom rows

Applies no read locks

Can read any row

The database takes a snapshot of committed data


when the refresh operation reads the first row

Allows other transactions to read the underlying ta


ble during the refresh operation

Uses shared table locks

Does not change the isolation level

Locks the underlying table to ensure that the text in


dex is updated to be consistent with committed data
in the table

If an exclusive table lock cannot be obtained, the re


fresh fails

6. Click OK to refresh the text index.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

699

5.14.4 Truncating a Text Index


Truncate a text index for a IQ (catalog) system store table.

Prerequisites
Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

ALTER permission on the table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes.
SAP IQ 16.0

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes:

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


You must be licensed for the Unstructured Data Analytics option (IQ_UDA).

Context
Truncating lets you delete data from a text index without dropping the text index definition. For example, to
modify the stoplist for a text index:
Truncate the text index.
Edit the stoplist in the text configuration object associated with the text index.
Refresh the text index to bring in the new stoplist.
If a text index is set to immediate refresh, you cannot truncate it. Instead, drop it and create a new one.

700

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Text Indexes.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Truncate Data. If the text index is not available for truncating, the Truncate Data option is grayed
out.
5. At the confirmation prompt, click Yes.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.14.5 Generating Text Index DDL Commands


Generate data description language for one or more text indexes. The DDL code can be a useful reference and
training tool.

Prerequisites
Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

None required to generate DDL commands; however, you must have EXECUTE permis
sion on the sa_text_index_stats system procedure to display a list of existing
text indexes.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

701

Database Version

Text Index Privileges Required

SAP IQ 16.0

None required to generate DDL commands; however, you must also have EXECUTE
permission on the sa_text_index_stats system procedure to display a list of ex
isting text indexes:

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


You must be licensed for the Unstructured Data Analytics option (IQ_UDA).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Text Indexes.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view shows the SQL code used to add the selected text indexes to the database.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.14.6 Viewing or Modifying Text Index Properties


Display or change the properties of a text index for a IQ main store or IQ (catalog) system store table.

702

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Prerequisites
Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

EXECUTE permission on the sa_text_index_stats system procedure to display


a list of existing text indexes.
View text index properties none
Rename a text index one of:

DBA authority

REFERENCE permission on the underlying table

You own the underlying table being indexed

Move a text index one of:

DBA authority

SPACE ADMIN authority

You own the underlying table being indexed and have CREATE permission on the
target dbspace

Modify comment on a text index one of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

You own the underlying table being indexed

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

703

Database Version

Text Index Privileges Required

SAP IQ 16.0

EXECUTE permission on the sa_text_index_stats system procedure to display


a list of existing text indexes along with one of:

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

View any text index property page none


Rename a text index one of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

REFERENCE permission on the underlying table

You own the underlying table being indexed

Move a text index one of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE

One of the following:

You own the underlying table being indexed

REFERENCE permission on the table along with one of the following:

CREATE ANY OBJECT system privilege

CREATE permission on the target dbspace

Modify a text index comment MANAGE ANY STATISTICS system privilege along with
one of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

CREATE ANY OBJECT system privilege

CREATE ANY INDEX system privilege

COMMENT ANY OBJECT system privilege

You own the underlying table being indexed

The SAP IQ system is running, registered, and authenticated.


You must be licensed for the Unstructured Data Analytics option (IQ_UDA).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

704

IQ Servers

Schema Objects , and then click Text Indexes.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.

Note
When modifying properties, it is not necessary to click Apply before changing screens.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in
read-only mode.
Page

Property

Description

General

Name

Name of the text index.

Type (Red-only)

Type of text index.

Table (Read-only)

Name of the table the text index references.

Dbspace (Read-only)

Name of the dbspace the text index was created on.

Text Configuration Ob
ject (Read-only)

Name of the text configuration object used to create the text index.

Refresh type

Indicates how the text index refreshes.


IMMEDIATE text index refreshes automatically whenever the
data in the underlying table changes. A refresh type of IMME
DIATE can only be set during text index creation and cannot be
changed after the fact.
Manual (for IQ (catalog) system store tables only) text index is
refreshed only when explicitly requested.
Automatic (for IQ (catalog) system store tables only) text in
dex automatically refreshes using a specified time interval.

Last refresh time (Read- Date and time the text index was last refreshed.
only) (IQ (catalog) sys
tem store tables only)
Refresh Now (IQ (cata
log) system store tables
only)

Click to force a refresh of the text index. If the data has not changed
since the last refresh, the refresh date does not change. If the text
index cannot be manually refreshed, the Refresh Now button is
grayed out. To force a refresh, truncate the text index, then refresh
it.

Truncate Now (IQ (cata Click to delete data from a text index without dropping the text in
log) system store tables dex definition. If the text index cannot be truncated, the Truncate
only)
Now button is grayed out.
Comment
Columns (Read-only)

Text field for adding optional comments.

Select a column and click Details to view the details of the column.

6. Click OK to update any changes to the database and close the page.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

705

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.14.7 Text Index Privilege Summary


A list of the system privileges and object permissions required to complete the various text index tasks.

Creating a Text Index


Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

REFERENCE permission on the underlying table being indexed along with CREATE
permission on the dbspace where the index is being created

You own the underlying table being indexed along with CREATE permission on the
dbspace where the index is being created

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes.
SAP IQ 16.0

One of:

CREATE ANY INDEX system privilege along with CREATE permission on the
dbspace where the index is being created

CREATE ANY OBJECT system privilege

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes:

706

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Deleting a Text Index


Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

REFERENCE permission on the underlying table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes.
SAP IQ 16.0

One of:

DROP ANY INDEX system privilege

DROP ANY OBJECT system privilege

REFERENCE permission on the underlying table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes:

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

Refreshing a Text Index


Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

REFERENCE permission on the underlying table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

707

Database Version

Text Index Privileges Required

SAP IQ 16.0

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

REFERENCE permission on the underlying table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes:

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

Truncating a Text Index


Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

ALTER permission on the table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes.
SAP IQ 16.0

One of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

ALTER permission on the table being indexed

You own the underlying table being indexed

You must also have EXECUTE permission on the sa_text_index_stats system


procedure to display a list of existing text indexes:

708

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Generating Text Index DDL Commands


Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

None required to generate DDL commands; however, you must have EXECUTE permis
sion on the sa_text_index_stats system procedure to display a list of existing
text indexes.

SAP IQ 16.0

None required to generate DDL commands; however, you must also have EXECUTE
permission on the sa_text_index_stats system procedure to display a list of ex
isting text indexes:

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

Viewing or Modifying Text Index Properties


Database Version

Text Index Privileges Required

SAP IQ 15.3 and 15.4

EXECUTE permission on the sa_text_index_stats system procedure to display


a list of existing text indexes.
View text index properties none
Rename a text index one of:

DBA authority

REFERENCE permission on the underlying table

You own the underlying table being indexed

Move a text index one of:

DBA authority

SPACE ADMIN authority

You own the underlying table being indexed and have CREATE permission on the
target dbspace

Modify comment on a text index one of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

You own the underlying table being indexed

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

709

Database Version

Text Index Privileges Required

SAP IQ 16.0

EXECUTE permission on the sa_text_index_stats system procedure to display


a list of existing text indexes along with one of:

MANAGE ANY STATISTICS system privilege

CREATE ANY INDEX system privilege

ALTER ANY INDEX system privilege

DROP ANY INDEX system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

DROP ANY OBJECT system privilege

View any text index property page none


Rename a text index one of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

REFERENCE permission on the underlying table

You own the underlying table being indexed

Move a text index one of:

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY DBSPACE

One of the following:

You own the underlying table being indexed

REFERENCE permission on the table along with one of the following:

CREATE ANY OBJECT system privilege

CREATE permission on the target dbspace

Modify a text index comment MANAGE ANY STATISTICS system privilege along with
one of:

710

ALTER ANY INDEX system privilege

ALTER ANY OBJECT system privilege

CREATE ANY OBJECT system privilege

CREATE ANY INDEX system privilege

COMMENT ANY OBJECT system privilege

You own the underlying table being indexed

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.15 Sequence Generators


Sequence generators are used to generate values that are unique across multiple tables, and to generate
default values that are something other than the set of natural numbers (1, 2, 3...).

Related Information
Creating a Sequence Generator [page 711]
Deleting a Sequence Generator [page 713]
Restarting a Sequence at Start Value [page 714]
Generating Sequence Generator DDL Command [page 715]
Viewing or Modifying Sequence Generator Properties [page 716]
Granting Sequence Generator USAGE Permission [page 718]
Revoking Sequence Generator USAGE Permission [page 719]
Sequence Generator Privilege Summary [page 720]

5.15.1 Creating a Sequence Generator


Create a sequence generator on a specified system.

Prerequisites
Database Version

Sequence Generator Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority

One of:

CREATE ANY SEQUENCE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

711

2. In the left pane, expand

IQ Servers

Schema Objects , and then click Sequence Generators.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the sequence generator will be Select a system.


created
What do you want to name the new sequence generator?

Enter a unique name for the new sequence generator;


maximum of 128 characters.

Which user do you want to own the sequence generator?

Select the user designated as the owner of the sequence


generator.

6. On the Values page, specify:


Property

Description

What is the minimum value for this sequence generator?

Minimum value for the sequence generator. Default value


is 1. Valid range is -9223372036854775808 to
9223372036854775807.

What is the maximum value for this sequence generator?

Maximum value for the sequence generator. Default value


is 1. Valid range is -9223372036854775808 to
9223372036854775807.

7. On the Increment page, specify:


Property

Description

What is the start value for this sequence generator?

Starting value for the sequence generator. Default value is


1. Valid range is -9223372036854775808 to
9223372036854775807.

What is the increment value for this sequence generator?

Incremental value for the sequence generator. Default


value is 1. Valid range is -9223372036854775808 to
9223372036854775807.

8. On the Options page, specify:


Property

Description

Cycle values (Optional)

Select if the sequence generator is to continue generating


values [starting over at the start value] once minimum or
maximum values have been reached.

Cache size

Number of preallocated sequence values that are kept in


memory for faster access. Default value is 100. Valid
range is 0 to unlimited.

9. (Optional) On the Comment page, specify a comment for the sequence generator.
10. Click Finish to create the sequence generator as defined.

712

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.15.2 Deleting a Sequence Generator


Delete one or more sequence generators.

Prerequisites
Database Version

Sequence Generator Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the sequence generator

One of:

DROP ANY SEQUENCE system privilege

DROP ANY OBJECT system privilege

You own the sequence generator

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Sequence Generators.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Verify that the list of sequence generators to be deleted is correct and click Yes.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

713

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.15.3 Restarting a Sequence at Start Value


Restart the sequence generator at the start value defined.

Prerequisites
Database Version

Sequence Generator Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the sequence generator

One of:

ALTER ANY SEQUENCE system privilege

ALTER ANY OBJECT system privilege

You own the sequence generator

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Sequence Generators.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Restart At Start Value.
5. At the confirmation prompt, click Yes.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

714

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.15.4 Generating Sequence Generator DDL Command


Generate data description language for one or more sequence generators. The DDL code can be a useful
reference and training tool.

Prerequisites
Database Version

Sequence Generator Privileges Required

SAP IQ 15.3 and 15.4

None.

SAP IQ 16.0

None.

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Sequence Generators.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
5. The DDL view opens, showing the SQL code used to create the selected sequence generators.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

715

5.15.5 Viewing or Modifying Sequence Generator Properties


View or change the properties of a sequence generator.

Prerequisites
Database Version

Sequence Generator Permissions

SAP IQ 15.3 and 15.4

View sequence generator properties none.


Modify a sequence comment one of:

DBA authority

RESOURCE authority

You own the sequence generator

Modify sequence permissions one of:

DBA authority

PERMS ADMIN authority

You own the sequence generator

Modify any other sequence property one of:

SAP IQ 16.0

DBA authority

You own the sequence generator

View any sequence property page none.


Modify a sequence comment one of:

CREATE ANY SEQUENCE system privilege

ALTER ANY SEQUENCE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

Modify sequence permissions one of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the sequence generator

Modify any other sequence property one of:

ALTER ANY SEQUENCE system privilege

ALTER ANY OBJECT system privilege

You own the sequence generator

The SAP IQ system is running, registered, and authenticated.

716

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Sequence Generators.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
When modifying properties, clicking Apply before changing screens is not necessary, but will save any
changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Read-only)

Name of the selected sequence generator.

Owner (Read-only)

Owner of the selected sequence generator.

Minimum value

Minimum value for the sequence generator. Default value is 1. Valid


range is -9223372036854775808 to 9223372036854775807.

Maximum value

Maximum value for the sequence generator. Default value is 1. Valid


range is -9223372036854775808 to 9223372036854775807.

Start value

Starting value for the sequence generator. Default value is 1. Valid


range is -9223372036854775808 to 9223372036854775807.

Increment value

Incremental value for the sequence generator. Default value is 1. Valid


range is -9223372036854775808 to 9223372036854775807.

Cycle values (Op


tional)

Select if the sequence generator is to continue generating values


[starting over at the start value] once minimum or maximum values
have been reached.

Cache size

Number of preallocated sequence values that are kept in memory for


faster access. Default value is 100. Valid range is 0 to unlimited.

Comment

Text field for adding optional comments.

Permissions

See Granting Sequence Generator USAGE Permission [page 718] and Revoking Sequence
Generator USAGE Permission [page 719].

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

717

5.15.6 Granting Sequence Generator USAGE Permission


Grant sequence generator usage permission to users and roles.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the sequence generator

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the sequence generator

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Sequence Generators.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions, then click Grant in the right pane.
6. On the Welcome page, indicate whether the permission is being granted to users or roles/groups.
7. On the Grantees page, select one or more grantees. Click the box in the header row to select all available
grantees.
8. On the Permissions page, ensure Usage is selected.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

718

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.15.7 Revoking Sequence Generator USAGE Permission


Remove sequence generator usage permission from users and roles.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the sequence generator

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the sequence generator

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Schema Objects , and then click Sequence Generators.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
A list of grantees currently granted permission on the sequence generator appears.
6. In the right pane, select a grantee, and click Revoke.

Caution
There is no confirmation prompt before the permission is revoked.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

719

5.15.8 Sequence Generator Privilege Summary


A list of the system privileges and object permissions required to complete the various sequence generator
tasks.

Creating a Sequence Generator


Database Version

Sequence Generator Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

RESOURCE authority

One of:

CREATE ANY SEQUENCE system privilege

CREATE ANY OBJECT system privilege

Deleting a Sequence Generator


Database Version

Sequence Generator Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the sequence generator

One of:

DROP ANY SEQUENCE system privilege

DROP ANY OBJECT system privilege

You own the sequence generator

Restarting a Sequence at Start Value


Database Version

Sequence Generator Privileges Required

SAP IQ 15.3 and 15.4

One of:

720

DBA authority

You own the sequence generator

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Sequence Generator Privileges Required

SAP IQ 16.0

One of:

ALTER ANY SEQUENCE system privilege

ALTER ANY OBJECT system privilege

You own the sequence generator

Generating Sequence Generator DDL Commands


Database Version

Sequence Generator Privileges Required

SAP IQ 15.3 and 15.4

None.

SAP IQ 16.0

None.

Viewing or Modifying Sequence Generator Properties


Database Version

Sequence Generator Permissions

SAP IQ 15.3 and 15.4

View sequence generator properties none.


Modify a sequence comment one of:

DBA authority

RESOURCE authority

You own the sequence generator

Modify sequence permissions one of:

DBA authority

PERMS ADMIN authority

You own the sequence generator

Modify any other sequence property one of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

You own the sequence generator

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

721

Database Version

Sequence Generator Permissions

SAP IQ 16.0

View any sequence property page none.


Modify a sequence comment one of:

CREATE ANY SEQUENCE system privilege

ALTER ANY SEQUENCE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

Modify sequence permissions one of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the sequence generator

Modify any other sequence property one of:

ALTER ANY SEQUENCE system privilege

ALTER ANY OBJECT system privilege

You own the sequence generator

Granting and Revoking Sequence Generator USAGE Permission


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the sequence generator

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the sequence generator

5.16 Spatial Support


A spatial reference system describes where local, regional or global features are located. It defines a specific
map projection, as well as transformations between different spatial reference systems.
Spatial reference systems only support IQ (catalog) system store tables. For more information on Spatial
Support, in the SAP IQ documentation, see SAP IQ Administration: Spatial Data.

722

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Creating a Spatial Reference System [page 723]
Deleting a Spatial Reference System [page 725]
Generating Spatial Reference System DDL Commands [page 726]
Viewing or Modifying Spatial Reference System Properties [page 727]
Spatial Units of Measure [page 732]
Spatial Support Privilege Summary [page 739]

5.16.1 Creating a Spatial Reference System


Create a spatial reference system on a specified system.

Prerequisites
Database Version

Spatial Reference System Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

One of:

MANAGE ANY SPATIAL OBJECT system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Context
If you want to create a unique, new spatial reference system, you must first create a spatial reference system
using an existing, pre-defined system and then modify the properties of the system, including the system
name, to create a unique spatial reference system.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Reference Systems.

SAP IQ Cockpit
Administer SAP IQ

IQ Servers

Schema Objects

Spatial Support , and then click Spatial

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

723

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page of the wizard, specify:
Property

Description

Select a resource on which the spatial reference system


will be created

Select a system.

(Multiplex only) Select a multiplex server on which the


spatial reference system will be created

Select a multiplex server.

How would you like to choose the spatial reference sys


tem?

Indicate the method to locate the predefined spatial refer


ence system.

Note
If you select Let me choose from the list..., skip to
step 7 [page 724].

6. On the Well Known Text Definition page, enter the well-known text definition (as defined by SQL/MM and
OGC) for the spatial reference system that you want to use, and click Validate.

Note
You cannot proceed until the definition is deemed valid.
7. On the SRS Selection page, select a predefined spatial referenced system.
8. On the Line Interpretation page, specify:
Property

Description

Line interpretation method

For geographic spatial reference system type only.


Round earth uses an ellipsoid to represent the Earth.
Points are mapped to the ellipsoid for computations,
all lines follow the shortest path and arc toward the
pole, and geometries can cross the date line.
Planar flat-earth or planar reference systems project
all or a portion of the surface of the Earth to a flat,
two dimensional plane (planar), and use a simple 2D
Euclidean geometry. Lines between points are
straight (except for circular strings), and geometries
cannot wrap over the edge (cross the dateline).

Name

724

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Specify a unique name for the spatial reference system to


a maximum of 128 characters.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Spatial reference system ID

Specify a unique ID for the spatial reference system.


To reduce the possibility of choosing a spatial reference
system ID reserved by a defining authority such as OGC
or other vendors, do not choose numbers in ranges:

0-32,767 (reserved by EPSG)

2,147,483,547-2,147,483,647 (reserved by SAP)

9. (Optional) On the Comment page, specify a text description of the spatial reference system.
10. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.16.2 Deleting a Spatial Reference System


Delete one or more spatial reference systems.

Prerequisites
Database Version

Spatial Reference System Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

One of:

MANAGE ANY SPATIAL OBJECT system privilege

DROP ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Reference Systems.

SAP IQ Cockpit
Administer SAP IQ

IQ Servers

Schema Objects

Spatial Support , and then click Spatial

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

725

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Verify that the list of spatial reference systems to be deleted is correct and click Yes.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.16.3 Generating Spatial Reference System DDL Commands


Generate data description language for one or more spatial reference systems. The DDL code can be a useful
reference and training tool.

Prerequisites
Database Version

Spatial Reference System Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Reference Systems.

IQ Servers

Schema Objects

Spatial Support , and then click Spatial

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

726

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
5. The DDL view opens, showing the SQL code used to create the selected spatial reference systems.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.16.4 Viewing or Modifying Spatial Reference System


Properties
View or change the properties of a spatial reference system.

Prerequisites
Database Version

Spatial Reference System Privileges Required

SAP IQ 15.3 and 15.4

View spatial reference system properties none


Modify spatial reference system properties or comments one of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

View spatial reference system properties none


Modify spatial reference system properties one of:

MANAGE ANY SPATIAL OBJECT system privilege

ALTER ANY OBJECT system privilege

Modify spatial reference system comment one of:

COMMENT ANY OBJECT system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY SPATIAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

727

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Reference Systems.

IQ Servers

Schema Objects

Spatial Support , and then click Spatial

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name

Name of the selected spatial reference system.

Spatial reference sys


tem ID

Unique numeric identifier for your spatial reference system.


When you create a spatial reference system based on an existing
spatial reference system, set the SRID value to be 1000000000
plus the Well Known value.

Note
SRSIDs 0, 2147483646, and 2147483647 are restricted.

Settings

Organization

Name of the organization that defined the spatial reference sys


tem.

Organization coordinate
reference system ID

Integer identifier assigned by the organization that defined the


spatial reference system.

Comment

Text field for adding optional comments.

Spatial reference sys


tem type

Valid values are Geographic or Non-geographic.

Line interpretation

For geographic spatial reference system type only.


Round earth uses an ellipsoid to represent the Earth. Points
are mapped to the ellipsoid for computations, all lines follow
the shortest path and arc toward the pole, and geometries
can cross the date line.
Planar flat-earth or planar reference systems project all or a
portion of the surface of the Earth to a flat, two dimensional
plane (planar), and use a simple 2D Euclidean geometry.
Lines between points are straight (except for circular
strings), and geometries cannot wrap over the edge (cross
the dateline).

Axis order (Read-only)

728

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Order of axis in the spatial reference system (for example,


Long./Lat./Z/M).

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Polygon format

Specifies the orientation of polygon rings of the input data. Inter


nally, SAP IQ interprets polygons by looking at the orientation of
the constituent rings. As one travels a ring in the order of the de
fined points, the inside of the polygon is on the left side of the
ring. The same rules are applied in planar and round earth spatial
reference systems.
Counterclockwise input follows SAP IQ's internal interpre
tation: the inside of the polygon is on the left side while fol
lowing ring orientation.
Clockwise input follows the opposite of SAP IQ's approach:
the inside of the polygon is on the right side while following
ring orientation.
EvenOdd (default) orientation of rings is ignored and the in
side of the polygon is instead determined by looking at the
nesting of the rings, with the exterior ring being the largest
ring and interior rings being smaller rings inside this ring. A
ray is traced from a point within the rings and radiating out
ward crossing all rings. If the number the ring being crossed
is an even number, it is an outer ring. If it is odd, it is an inner
ring.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

729

Page

Property

Description

Storage format

When you insert spatial data into the database from an external
format (such as WKT or WKB), the database server normalizes
the data to improve the performance and semantics of spatial
operations. The normalized representation may differ from the
original representation (for example, in the orientation of poly
gon rings or the precision stored in individual coordinates). While
spatial equality is maintained after the normalization, some origi
nal input characteristics may not be reproducible, such as preci
sion and ring orientation. In some cases you may want to store
the original representation, either exclusively, or in addition to
the normalized representation.
Internal database server stores only the normalized repre
sentation. Specify this value when the original input charac
teristics do not need to be reproduced. This is the default
for planar spatial reference systems.
Original database server stores only the original represen
tation. The original input characteristics can be reproduced,
but all operations on the stored values must repeat normali
zation steps, possibly slowing down operations on the data.
Mixed database server stores the internal version and, if it is
different from the original version, it stores the original ver
sion as well. By storing both versions, the original represen
tation characteristics can be reproduced and operations on
stored values do not need to repeat normalization steps.
However, storage requirements may increase significantly
because potentially two representations are being stored
for each geometry.
Semi-major axis (for geographic spatial reference system
type only) earth is not a perfect sphere because the rotation
of the Earth causes a flattening so that the distance from
the center of the Earth to the North or South pole is less
than the distance from the center to the equator. For this
reason, the Earth is modeled as an ellipsoid with different
values for the semi-major axis (distance from center to
equator) and semi-minor axis (distance from center to the
pole). It is most common to define an ellipsoid using the
semi-major axis and the inverse flattening, but it can instead
be specified using the semi-minor axis (for example, this ap
proach must be used when a perfect sphere is used to ap
proximate the Earth).
Inverse flattening (for geographic spatial reference system
type only) inverse flattening (1/f) is a ratio:

1/f = (semi-major-axis) / (semi-majoraxis - semi-minor-axis)


where f measures symmetry axis compression relative to
the equatorial radius of the ellipsoid.
Coordinates

Latitude

For geographic spatial reference system type only.


Bounded between north north boundary.
and south south boundary.
Unbounded area is not bounded.

730

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Longitude

For geographic spatial reference system type only.


Bounded between west west boundary.
and east east boundary.
Unbounded area is not bounded.

X (For non-geographic
X-coordinate value of a geometry.
spatial reference system
Bounded between minimum minimum value.
type only)
and maximum maximum value.
Unbounded area is not bounded.
Y (For non-geographic
Y-coordinate value of a geometry.
spatial reference system
Bounded between minimum minimum value.
type only.)
and maximum maximum value.
Unbounded area is not bounded.
Z

Z-coordinate value of a geometry.


Bounded between minimum minimum value.
and maximum maximum value.
Unbounded area is not bounded.

M-coordinate value of a geometry.


Bounded between minimum minimum value.
and maximum maximum value.
Unbounded area is not bounded.

Transform definition
(Read-only)

Snap to grid (For Planar


line interpretation only)

Action of positioning the points in a geometry so they align with


intersection points on a grid. When aligning a point with the grid,
the X and Y values may be shifted by a small amount, similar to
rounding. In the context of spatial data, a grid is a framework of
lines that is laid down over a two-dimensional representation of a
spatial reference system.

Tolerance

Defines the distance within which two points or parts of geome


tries are considered equal. This can be thought of as all geome
tries being represented by points and lines drawn by a marker
with a thick tip, where the thickness is equal to the tolerance.
Any parts that touch when drawn by this thick marker are con
sidered equal within tolerance. If two points are exactly equal to
tolerance apart, they are considered not equal within tolerance.

Linear unit of measure

Specifies a linear unit of measure.

Transform definition text.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

731

5.16.5 Spatial Units of Measure


You can add predefined spatial units of measure (UOM) or create custom units of measure.
By default, five units of measure are available. Additional predefined units of measure can be added. Each
default and predefined unit of measure has a unit type and conversion factor assigned. These values cannot be
modified during creation, but can be modified after the fact.
You can also create a custom unit of measure, assigning a name, unit type and conversion factor during the
creation process.

Related Information
Creating a Custom Spatial Unit of Measure [page 732]
Adding a Predefined Spatial Unit of Measure [page 734]
Deleting a Spatial Unit of Measure [page 735]
Generating Spatial Unit of Measure DDL Commands [page 736]
Viewing or Modifying Spatial Unit of Measure Properties [page 737]

5.16.5.1 Creating a Custom Spatial Unit of Measure


Create a custom unit of measure for the spatial reference system.

Prerequisites
Database Version

Spatial Unit of Measure Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

One of:

CREATE ANY OBJECT system privilege

MANAGE ANY SPATIAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.

732

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

2. In the left pane, expand


Measure.

IQ Servers

Schema Objects

Spatial Support , and then click Units of

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, select a system on which to create the custom unit of measure.
6. For Multiplex only, select a multiplex server on which to create the custom unit of measure.
7. Select Create a custom unit of measure.
8. On the Custom Settings page, specify:
Property

Description

Name

The name of a unit of measure must be unique. If the


name entered already exists, an error message appears.

Type

Specify the type of unit of measure:


Linear if you are using a projected coordinate sys
tem, the individual coordinate values represent a lin
ear distance along the surface of the Earth to a point.
Coordinate values can be measured by the meter,
foot, mile, or yard. The projected coordinate system
must explicitly state the linear unit of measure in
which the coordinate values are expressed. Meter,
metre, and planar degree are linear units of measure.
Angular geographic features can be measured in de
grees of latitude, radians, or other angular units of
measure. Every spatial reference system must ex
plicitly state the name of the unit in which geographic
coordinates are measured. Radian and degree are
angular units of measure.

Unit of Measure Conversion Factor

Specify the conversion factor for the custom unit of


measure.

9. (Optional) On the Comment page, specify a text description for the custom unit of measure.
10. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

733

5.16.5.2 Adding a Predefined Spatial Unit of Measure


Add a predefined unit of measure for the spatial reference system.

Prerequisites
Database Version

Spatial Unit of Measure Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

One of:

CREATE ANY OBJECT system privilege

MANAGE ANY SPATIAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

Context
Each predefined unit of measure has it's own unit type and conversion factor, which cannot be modified during
the create process. However, with the exception of the predefined units of measure degree, metre, planar
degree and radian, the unit type and conversion factor can be modified after the fact, if needed.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Measure.

IQ Servers

Schema Objects

Spatial Support , and then click Units of

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, select a resource on which to create the predefined unit of measure.
6. For Multiplex only, select a multiplex server on which to create the predefined unit of measure.
7. Select Let me choose from the list of predefined units of measure.
8. On the Unit Selection page, highlight a predefined unit of measure.

734

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Note
The name of a unit of measure must be unique. If you select a predefined unit of measure that already
exists, an error message appears when you click Finish.
9. (Optional) On the Comment page, specify a text description for the predefined unit of measure.
10. Click Finish.
The predefined unit of measure appears on the list. You can modify the unit type and conversion factor of
the unit of measure via Properties.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.16.5.3 Deleting a Spatial Unit of Measure


Delete one or more spatial units of measure.

Prerequisites
Database Version

Spatial Unit of Measure Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

One of:

MANAGE ANY SPATIAL OBJECT system privilege

DROP ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

Context
The predefined units of measure degree, meter, metre, planar degree, and radian cannot be deleted. All other
predefined units of measure can be deleted.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

735

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Measure.

IQ Servers

Schema Objects

Spatial Support , and then click Units of

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Verify that the list of units of measure to be deleted is correct and click Yes.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.16.5.4 Generating Spatial Unit of Measure DDL Commands


Generate data description language for one or more spatial units of measure. The DDL code can be a useful
reference and training tool.

Prerequisites
Database Version

Spatial Unit of Measure Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Measure.

736

IQ Servers

Schema Objects

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Spatial Support , and then click Units of

SAP IQ Cockpit
Administer SAP IQ

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
5. The DDL view opens, showing the SQL code used to create the selected spatial units of measure.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.16.5.5 Viewing or Modifying Spatial Unit of Measure


Properties
View or change the properties of a spatial unit of measure.

Prerequisites
Database Version

Spatial Unit of Measure Privileges Required

SAP IQ 15.3 and 15.4

View spatial unit of measure properties none


Modify spatial unit of measure properties or comments one of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

View any spatial unit of measure property page none


Modify a spatial unit of measure comment one of:

COMMENT ANY OBJECT system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY SPATIAL OBJECT system privilege

Modify any other spatial unit of measure property one of:

SAP IQ Cockpit
Administer SAP IQ

MANAGE ANY SPATIAL OBJECT system privilege

ALTER ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

737

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Measure.

IQ Servers

Schema Objects

Spatial Support , and then click Units of

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name

Name of the selected spatial unit of


measure.

Unit type (Read-only for predefined


units of measure degree, metre, pla
nar degree and radian only)

Specify the type of unit of measure:


Linear if you are using a pro
jected coordinate system, the in
dividual coordinate values repre
sent a linear distance along the
surface of the Earth to a point.
Coordinate values can be meas
ured by the meter, foot, mile, or
yard. The projected coordinate
system must explicitly state the
linear unit of measure in which
the coordinate values are ex
pressed. Meter, metre, and pla
nar degree are linear units of
measure.
Angular geographic features can
be measured in degrees of lati
tude, radians, or other angular
units of measure. Every spatial
reference system must explicitly
state the name of the unit in
which geographic coordinates
are measured. Radian and de
gree are angular units of meas
ure.

738

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Conversion factor (Read-only for pre


defined units of measure degree, me
tre, planar degree and radian only)

Conversion factor for unit of measure


to another unit of measure of the
same type. Must be a double-preci
sion floating-point value.

Comment

Text field for adding optional com


ments.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.16.6 Spatial Support Privilege Summary


A list of the system privileges and object permissions required to complete the various spatial support tasks.

Creating a Spatial Reference System


Database Version

Spatial Reference System Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

One of:

MANAGE ANY SPATIAL OBJECT system privilege

CREATE ANY OBJECT system privilege

Deleting a Spatial Reference System


Database Version

Spatial Reference System Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

739

Database Version

Spatial Reference System Privileges Required

SAP IQ 16.0

One of:

MANAGE ANY SPATIAL OBJECT system privilege

DROP ANY OBJECT system privilege

Generating Spatial Reference System DDL Commands


Database Version

Spatial Reference System Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Spatial Reference System Properties


Database Version

Spatial Reference System Privileges Required

SAP IQ 15.3 and 15.4

View spatial reference system properties none


Modify spatial reference system properties or comments one of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

View spatial reference system properties none


Modify spatial reference system properties one of:

MANAGE ANY SPATIAL OBJECT system privilege

ALTER ANY OBJECT system privilege

Modify spatial reference system comment one of:

740

COMMENT ANY OBJECT system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY SPATIAL OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Creating a Spatial Unit of Measure


Database Version

Spatial Unit of Measure Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

One of:

CREATE ANY OBJECT system privilege

MANAGE ANY SPATIAL OBJECT system privilege

Deleting a Spatial Unit of Measure


Database Version

Spatial Unit of Measure Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

One of:

MANAGE ANY SPATIAL OBJECT system privilege

DROP ANY OBJECT system privilege

Generating Spatial Unit of Measure DDL Commands


Database Version

Spatial Unit of Measure Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Spatial Unit of Measure Properties


Database Version

Spatial Unit of Measure Privileges Required

SAP IQ 15.3 and 15.4

View spatial unit of measure properties none


Modify spatial unit of measure properties or comments one of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

You are a member of the SYS_SPATIAL_ADMIN_ROLE group

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

741

Database Version

Spatial Unit of Measure Privileges Required

SAP IQ 16.0

View any spatial unit of measure property page none


Modify a spatial unit of measure comment one of:

COMMENT ANY OBJECT system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

MANAGE ANY SPATIAL OBJECT system privilege

Modify any other spatial unit of measure property one of:

MANAGE ANY SPATIAL OBJECT system privilege

ALTER ANY OBJECT system privilege

5.17 Security and User Management


Security encompasses the areas of user, authentication and login management.
SAP IQ Cockpit administration supports SAP IQ Cockpit database versions 15.3 or later. Security for versions
15.3 and 15.4 uses authority-based security, while 16.0 uses role-based security.
Authority-Based and Role-Based and their sub items appear in the EXPLORE workset regardless of the
selected system. However, the functionality of the underlying items is dependant on the version of the system.
If the selected item is not supported by the system version, the right pane remains empty. For example, if the
system is version 16.0 and you select
appears in the right pane.

IQ Server

Security

Authority-Based

Groups , nothing

Related Information
Authority-Based Security [page 742]
Role-Based Security [page 808]
Login Mappings [page 1010]
Login Policies [page 1018]
LDAP Servers [page 1033]

5.17.1 Authority-Based Security


Manage users, groups and database authorities.
Authority-based security is supported with database versions 15.3 and 15.4 only.

742

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Authority-Based Users [page 743]
Authority-Based Groups [page 764]
Authority-Based Object Permissions on Users and Groups [page 781]

5.17.1.1 Authority-Based Users


Add, change, and delete users.
Users are objects within the database.

Related Information
Creating an Authority-Based User [page 744]
Deleting an Authority-Based User [page 746]
Converting an Authority-Based User to a Group [page 747]
Viewing or Modifying Authority-Based User Options [page 748]
Generating Authority-Based User DDL Commands [page 749]
Viewing or Modifying Authority-Based User Properties [page 751]
Changing an Authority-Based User Password [page 754]
Forcing an Authority-Based User to Change their Password [page 755]
Unlocking an Authority-Based User Account [page 756]
Changing an Authority-Based User Login Policy [page 757]
Adding an Authority to an Authority-Based User [page 758]
Removing an Authority from an Authority-Based User [page 759]
Authority-Based User Privilege Summary [page 760]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

743

5.17.1.1.1 Creating an Authority-Based User


Add a new user to the database using the Create User wizard.

Prerequisites
Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

Both USER ADMIN and PERMS ADMIN authorities

Not supported

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports authority-based security.

Context
All new users are automatically added to the PUBLIC group.

Note
This task applies to the creation of a regular user account. If you are creating the technical user account,
see Creating the Technical User for an Authority-Based System.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:

744

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Select a resource on which the user will be created

Select a system.

Note
If the selected system does not support the selected
security mode (role-based or authority-based), an er
ror message appears.
What do you want to name the new user?

Enter a unique user ID..

Create as technical user

Leave unselected.

6. On the Password page:


Property

Description

Enable password

Select to allow a user to connect to the database with


password security. Leave this option unselected to disa
ble the password and confirm password options.

Password

Create a strong user password. Characters appear as as


terisks.

Confirm password

Confirm the password. The contents of the two password


fields must match exactly.

Requires password change on next login

Force the user to change the password at the next login.

Note
This functionality is not currently implemented in SAP
IQ Cockpit. When logging in to SAP IQ Cockpit, a user
will not be prompted to change their password. He or
she will be prompted, however, when logging in to SAP
IQ outside of SAP IQ Cockpit (for example, using Inter
active SQL).
Login policy

Select a login policy.

7. (Optional) On the Select Authorities page, select one or more the authorities you want to assign to the new
user:
Authority

Description

Backup

Grants the ability to perform database backups.

DBA

Grants the ability fully administer the database.

Multiplex Admin

Grants the ability for Multiplex server administration.

Operator

Grants the ability for Multiplex server administration.

Perms Admin

Grants the ability to manage data permission, groups, au


thorities, and passwords.

Profile

Grants the ability to perform application and procedure


profiling, request log creation and analysis, and by the In
dex Consultant.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

745

Authority

Description

Read client file

Grants the ability to read from a file on the client com


puter, for example when loading data.

Read file

Grants the ability to the group to execute SELECT state


ments against a file using the OPENSTRING clause.

Remote DBA

Grants Remote DBA authority to any table the group can


access. To ensure that actions are secure, run the
SQL Remote Message agent using a user ID with this type
of authority.

Resource

Grants the ability to create database objects.

Space Admin

Grants the ability to perform dbspace management (in


cluding CREATE permission) and read-only selective da
tabase restoration.

User Admin

Grants the ability to manage users, external logins, and


login policies management.

Validate

Grants the ability to validate tables, materialized views,


and indexes.

Write client file

Grants the ability to write to a file on the client computer,


for example when downloading data.

8. (Optional) On the Specify a comment page, enter a comment for this user.
9. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.1.2 Deleting an Authority-Based User


Delete a user from the database.

Prerequisites
Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

746

DBA authority

USER ADMIN authority

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Click Yes to confirm deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.1.3 Converting an Authority-Based User to a Group


Change an existing user into a group that retains the users authorities.

Prerequisites
Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

747

The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Change to Group.
5. Click Yes to confirm the change.
The user disappears from the Users list and appears on the Groups list.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.1.4 Viewing or Modifying Authority-Based User


Options
View or change database option settings assigned to a user.

Prerequisites
Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

Not supported

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports authority-based security.

748

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Context
For database options that can be set at either level, when set at the user level, the setting overrides the current
value for that user only. When set it at the database level, the value becomes the new default, and is applied to
any existing users who have not had the option overridden at the user level.
For information on the level at each option can be set and the system privilege required, in the SAP IQ 15.x
documentation, see the alphabetical list of Database options in SAP IQ Reference: Statements and Options.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Options.
5. To change a setting, click in the Setting column for the option and enter the new value.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.1.5 Generating Authority-Based User DDL Commands


Display the SQL data description language for creating a user. The SQL code can be a useful reference and
training tool.

Prerequisites
Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

749

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view opens, showing the SQL code used to create the selected authority-based users.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

750

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.1.1.6 Viewing or Modifying Authority-Based User


Properties
View or change the details of login parameters and authorities for authority-based users.

Prerequisites
Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

View any user property page none


Modify a password one of:

DBA authority

USER ADMIN authority

PERMS ADMIN authority

Modify a login policy one of:

DBA authority

USER ADMIN authority

Modify any other user property except those relating to permissions DBA authority
For privileges relating to user permissions, see Authority-Based Database Object Per
missions Privilege Summary [page 806]
SAP IQ 16.0

Not supported

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or edit the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

751

Page

Property

Description

General

Name (Read-only)

Name of the user.

Enable Password

Allows the user to connect to the data


base with password security. Clearing
this option disables the Password and
Confirm Password options. User can
log in without specifying a password.

Change Password

Click to change the password for the


user.

Password

The new password for the user. Char


acters appear as asterisks.

Confirm password

Confirmation of the new password en


tered. The contents of the two fields
must match exactly to proceed.

Password creation time (Read-only)

Date and time when the password was


created.

Change password on next login

Select to force the user to change the


password at the next login.

Login policy

Login policy for the user.

Last login time (Read-only)

Last time the user successfully logged


in.

Failed login attempts

Number of times the user has tried to


log in with an incorrect password.

Locked (Read-only)

Indicates if the account is locked.


Valid values are:
false the account is unlocked
true account is locked because
the user has exceeded the al
lowed number of failed login at
tempts.

Authorities

752

Unlock now

Select to unlock the account when


Locked is true.

Comment

Text field for adding optional com


ments.

Backup

Grants the ability to perform database


backups.

DBA

Grants the ability fully administer the


database.

Multiplex Admin

Grants the ability for Multiplex server


administration.

Operator

Grants the ability for Multiplex server


administration.

Perms Admin

Grants the ability to manage data per


mission, groups, authorities, and
passwords.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Profile

Grants the ability to perform applica


tion and procedure profiling, request
log creation and analysis, and by the
Index Consultant.

Read client file

Grants the ability to read from a file on


the client computer, for example when
loading data.

Read file

Grants the ability to the group to exe


cute SELECT statements against a
file using the OPENSTRING clause.

Permission

Remote DBA

Grants Remote DBA authority to any


table the group can access. To ensure
that actions are secure, run the
SQL Remote Message agent using a
user ID with this type of authority.

Resource

Grants the ability to create database


objects.

Space Admin

Grants the ability to perform dbspace


management (including CREATE per
mission) and read-only selective data
base restoration.

User Admin

Grants the ability to manage users, ex


ternal logins, and login policies man
agement.

Validate

Grants the ability to validate tables,


materialized views, and indexes.

Write client file

Grants the ability to write to a file on


the client computer, for example when
downloading data.

See Authority-Based Object Permissions on Users and Groups [page 806].

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

753

5.17.1.1.7 Changing an Authority-Based User Password


Change the password for another authority-base user.

Prerequisites
Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. On the General Properties page, type the new password in the Password and Confirm password fields.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

754

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.1.1.8 Forcing an Authority-Based User to Change their


Password
Force an authority-based user to change their password on next log in.

Prerequisites
Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. On the General Properties page, select Require password change on next login.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

755

5.17.1.1.9 Unlocking an Authority-Based User Account


Unlock a locked authority-based user account.

Prerequisites
Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. On the General Properties page, select Unlock Now.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

756

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.1.1.10 Changing an Authority-Based User Login Policy


Assign an authority-based user a different login policy

Prerequisites
Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. Select a new login policy.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

757

5.17.1.1.11 Adding an Authority to an Authority-Based User


Add authorities to a user to allow him or her to perform specified database operations, such as the ability to
manage dbspaces.

Prerequisites
Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Authorities.
6. In the right pane, select one or more authorities:

758

Authority

Description

Backup

Grants the ability to perform database backups.

DBA

Grants the ability fully administer the database.

Multiplex Admin

Grants the ability for Multiplex server administration.

Operator

Grants the ability for Multiplex server administration.

Perms Admin

Grants the ability to manage data permission, groups, au


thorities, and passwords.

Profile

Grants the ability to perform application and procedure


profiling, request log creation and analysis, and by the In
dex Consultant.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Authority

Description

Read client file

Grants the ability to read from a file on the client com


puter, for example when loading data.

Read file

Grants the ability to the group to execute SELECT state


ments against a file using the OPENSTRING clause.

Remote DBA

Grants Remote DBA authority to any table the group can


access. To ensure that actions are secure, run the
SQL Remote Message agent using a user ID with this type
of authority.

Resource

Grants the ability to create database objects.

Space Admin

Grants the ability to perform dbspace management (in


cluding CREATE permission) and read-only selective da
tabase restoration.

User Admin

Grants the ability to manage users, external logins, and


login policies management.

Validate

Grants the ability to validate tables, materialized views,


and indexes.

Write client file

Grants the ability to write to a file on the client computer,


for example when downloading data.

7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.1.12 Removing an Authority from an Authority-Based


User
Remove a user's ability to perform specific authorized database operations.

Prerequisites
Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Administer SAP IQ

DBA authority

PERMS ADMIN authority

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

759

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Authorities.
6. Clear the check box beside the authorities you want to revoke from the user.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.1.13 Authority-Based User Privilege Summary


A list of the system privileges and object permissions required to complete the various authority-based user
tasks.

Creating an Authority-Based User


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

760

DBA authority

Both USER ADMIN and PERMS ADMIN authorities

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Deleting an Authority-Based User


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

Converting an Authority-Based User to a Group


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

Viewing or Modifying Authority-Based User Options


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

Not supported

Generating Authority-Based User DDL Commands


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

Not supported

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

761

Viewing or Modifying Authority-Based User Properties


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

View any user property page none


Modify a password one of:

DBA authority

USER ADMIN authority

PERMS ADMIN authority

Modify a login policy one of:

DBA authority

USER ADMIN authority

Modify any other user property except those relating to permissions DBA authority
For privileges relating to user permissions, see Authority-Based Database Object Per
missions Privilege Summary [page 806]
SAP IQ 16.0

Not supported

Changing an Authority-Based User Password


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

Forcing an Authority-Based User Password Change


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

762

DBA authority

USER ADMIN authority

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Unlocking an Locked Authority-Based User Account


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

Changing an Authority-Based User Login Policy


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

Granting or Revoking an Authority from a User


Database Version

Authority-Based User Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

763

Adding an Authority to a Group [page 776]


Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.17.1.2 Authority-Based Groups


Add, change, and delete authority-based groups containing users and/or other groups.
Both users and groups are objects within the database. Groups are also containers for containing users and
other groups. Think of a group as a user ID with special permissions, such as the ability to have members. You
grant and revoke authorities for a group in exactly the same manner as you do for users.
For most databases, manage authorities by using groups, rather than by assigning authorities to individual
users one at a time.

Related Information
Creating an Authority-Based Group [page 765]
Deleting an Authority-Based Group [page 767]
Converting an Authority-Based Group to a User [page 768]
Adding Authority-Based Users and Groups to Groups [page 769]
Removing Authority-Based Users or Groups from a Group [page 770]
Viewing or Modifying Authority-Based Group Options [page 771]
Generating Authority-Based Group DDL Commands [page 772]
Viewing or Modifying Authority-Based Group Properties [page 773]
Adding an Authority to a Group [page 776]
Removing an Authority from a Group [page 777]
Authority-Based Group Privilege Summary [page 778]

764

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.1.2.1 Creating an Authority-Based Group


Add a new group to the database using the Create Group wizard.

Prerequisites
Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

Both USER ADMIN and PERMS ADMIN authorities

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Groups.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the user will be created

Select a system.

Note
If the selected system does not support the selected
security mode (role-based or authority-based), an er
ror message appears.
What do you want to name the new user?

Enter a unique user ID..

6. On the Password page:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

765

Property

Description

Enable password

Select to allow a user to connect to the database with


password security. Leave this option unselected to disa
ble the password and confirm password options.

Password

Create a strong user password. Characters appear as as


terisks.

Confirm password

Confirm the password. The contents of the two password


fields must match exactly.

Requires password change on next login

Force the user to change the password at the next login.

Note
This functionality is not currently implemented in SAP
IQ Cockpit. When logging in to SAP IQ Cockpit, a user
will not be prompted to change their password. He or
she will be prompted, however, when logging in to SAP
IQ outside of SAP IQ Cockpit (for example, using Inter
active SQL).
Login policy

Select a login policy.

7. (Optional) On the Select Authorities page, select the authorities you want to assign to the new group:
Authority

Description

Backup

Grants the ability to perform database backups.

DBA

Grants the ability fully administer the database.

Multiplex Admin

Grants the ability for Multiplex server administration.

Operator

Grants the ability for Multiplex server administration.

Perms Admin

Grants the ability to manage data permission, groups, au


thorities, and passwords.

Profile

Grants the ability to perform application and procedure


profiling, request log creation and analysis, and by the In
dex Consultant.

Read client file

Grants the ability to read from a file on the client com


puter, for example when loading data.

Read file

Grants the ability to the group to execute SELECT state


ments against a file using the OPENSTRING clause.

766

Remote DBA

Grants Remote DBA authority to any table the group can


access. To ensure that actions are secure, run the
SQL Remote Message agent using a user ID with this type
of authority.

Resource

Grants the ability to create database objects.

Space Admin

Grants the ability to perform dbspace management (in


cluding CREATE permission) and read-only selective da
tabase restoration.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Authority

Description

User Admin

Grants the ability to manage users, external logins, and


login policies management.

Validate

Grants the ability to validate tables, materialized views,


and indexes.

Write client file

Grants the ability to write to a file on the client computer,


for example when downloading data.

8. (Optional) On the Specify a comment page, enter a comment for this user.
9. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.2.2 Deleting an Authority-Based Group


Delete a group from the database.

Prerequisites
Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Groups.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

767

Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Click Yes to confirm deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.2.3 Converting an Authority-Based Group to a User


Change an existing group into a user.

Prerequisites
Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Change to user.
5. Click Yes to confirm the change.

768

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.2.4 Adding Authority-Based Users and Groups to


Groups
Add users and group to the current group or a higher-level parent group.

Prerequisites
Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Members.
5. To add members to the group or parent group, select one or more entries in the left-hand list and click
Add. The selected entries move to the right-hand list.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click OK to update any changes to the database and close the page.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

769

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.2.5 Removing Authority-Based Users or Groups from a


Group
Remove users and groups from the current group or a higher-level parent group.

Prerequisites
Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Members.
5. To remove members from the group or parent group, select one or more entries in the right-hand list and
click Remove.
The selected entries move to the left-hand list.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

770

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.1.2.6 Viewing or Modifying Authority-Based Group


Options
View or change database option settings assigned to a group.

Prerequisites
Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Context
For database options that can be set at either level, when set at the user level, the setting overrides the current
value for that user only. When set it at the database level, the value becomes the new default, and is applied to
any existing users who have not had the option overridden at the user level.
For information on the level at each option can be set and the system privilege required, in the SAP IQ 15.x
documentation, see the alphabetical list of Database options in SAP IQ Reference: Statements and Options.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Options.
5. To change a setting, click in the Setting column for the option, and enter the new value.
6. Click OK to update any changes to the database and close the page.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

771

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.2.7 Generating Authority-Based Group DDL Commands


Display the SQL data description language for creating a group. The SQL code can be a useful reference and
training tool.

Prerequisites
Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Groups.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view opens, showing the SQL code used to create the selected authority-based groups.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

772

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.1.2.8 Viewing or Modifying Authority-Based Group


Properties
View or change the details of login parameters and authorities for a group.

Prerequisites
Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

View any property page none


Modify a password one of:

DBA authority

USER ADMIN authority

PERMS ADMIN authority

Modify a login policy one of:

DBA authority

USER ADMIN authority

Modify any other group property except those relating to permissions DBA authority
For privileges relating to user permissions, see Authority-Based Database Object Per
missions Privilege Summary [page 806]
SAP IQ 16.0

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or edit the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

773

Area
General

Description
Name (read-only) name of the group.
Enable Password allows the group to connect to the
database with password security. Clearing this op
tion disables the Password and Confirm Password
options.
Password password for the group. Characters ap
pear as asterisks.
Confirm password a field for confirming the pass
word that you typed in the Password text box. The
contents of the two fields must match exactly.
Password creation time date and time when the
password was created.
Change password on next login force the group to
change the password at the next login.
Login policy (read-only) the login policy that applies
for this group.
Last login time (read-only) last time the group suc
cessfully logged in.
Failed login attempts (read-only) number of times
the group has tried to log in with an incorrect pass
word.
Locked (read-only) indicates if the account is locked.
Valid values are:
false the account is unlocked
true account is locked because the user has ex
ceeded the allowed number of failed login at
tempts.
Unlock now Select to unlock the account when
Locked is true.
Comment text description for the group.

774

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Area

Description

Authorities

Available authorities are:


Backup grants the ability to perform database back
ups.
DBA grants the ability fully administer the database.
Multiplex Admin grants the ability for Multiplex
server administration.
Operator grants the ability to backup and checkpoint
databases, perform system monitoring, and drop
connections.
Perms Admin grants the ability to manage data per
mission, groups, authorities, and passwords.
Profile grants the ability to perform application and
procedure profiling, request log creation and analy
sis, and by the Index Consultant.
Read client file rants the ability to read from a file on
the client computer, for example when loading data.
Read file grants the ability to the group to execute
SELECT statements against a file using the OPEN
STRING clause.
Remote DBA grants Remote DBA authority to any
table the group can access. To ensure that actions
are secure, run the SQL Remote Message agent us
ing a user ID with this type of authority.
Resource grants the ability to create database ob
jects.
Space Admin grants the ability to perform dbspace
management (including CREATE permission) and
read-only selective database restoration.
User Admin grants the ability to manage users, ex
ternal logins, and login policies management.
Validate grants the ability to validate tables, materi
alized views, and indexes.
Write client file grants the ability to write to a file on
the client computer, for example when downloading
data.

Permission

See Authority-Based Object Permissions on Users and


Groups [page 806].

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

775

5.17.1.2.9 Adding an Authority to a Group


Add authorities to allow members of a group to perform specified database operations, such as the ability to
manage dbspaces.

Prerequisites
Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Authorities.
6. In the right pane, select one or more authorities:

776

Authority

Description

Backup

Grants the ability to perform database backups.

DBA

Grants the ability fully administer the database.

Multiplex Admin

Grants the ability for Multiplex server administration.

Operator

Grants the ability for Multiplex server administration.

Perms Admin

Grants the ability to manage data permission, groups, au


thorities, and passwords.

Profile

Grants the ability to perform application and procedure


profiling, request log creation and analysis, and by the In
dex Consultant.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Authority

Description

Read client file

Grants the ability to read from a file on the client com


puter, for example when loading data.

Read file

Grants the ability to the group to execute SELECT state


ments against a file using the OPENSTRING clause.

Remote DBA

Grants Remote DBA authority to any table the group can


access. To ensure that actions are secure, run the
SQL Remote Message agent using a user ID with this type
of authority.

Resource

Grants the ability to create database objects.

Space Admin

Grants the ability to perform dbspace management (in


cluding CREATE permission) and read-only selective da
tabase restoration.

User Admin

Grants the ability to manage users, external logins, and


login policies management.

Validate

Grants the ability to validate tables, materialized views,


and indexes.

Write client file

Grants the ability to write to a file on the client computer,


for example when downloading data.

7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.2.10 Removing an Authority from a Group


Remove a group's ability to perform specific authorized database operations.

Prerequisites
Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

777

The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Authorities.
6. Clear the check box beside the authorities you want to revoke from the group.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.2.11 Authority-Based Group Privilege Summary


A list of the system privileges and object permissions required to complete the various authority-based group
tasks.

Creating an Authority-Based Group


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

778

DBA authority

Both USER ADMIN and PERMS ADMIN authorities

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Deleting an Authority-Based Group


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

Converting an Authority-Based Group to a User


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

Adding Authority-Based Users and Groups to Groups


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

Removing Authority-Based Users and Groups from a Group


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Administer SAP IQ

DBA authority

PERMS ADMIN authority

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

779

Viewing or Modifying Authority-Based Group Options


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

Not supported

Generating Authority-Based Group DDL Commands


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

Not supported

Viewing or Modifying Authority-Based Group Properties


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

View any property page none


Modify a password one of:

DBA authority

USER ADMIN authority

PERMS ADMIN authority

Modify a login policy one of:

DBA authority

USER ADMIN authority

Modify any other group property except those relating to permissions DBA authority
For privileges relating to user permissions, see Authority-Based Database Object Per
missions Privilege Summary [page 806]
SAP IQ 16.0

780

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Granting or Revoking an Authority to a Group


Database Version

Authority-Based Group Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.17.1.3 Authority-Based Object Permissions on Users and


Groups
Permissions on database objects can be granted and revoked to users and groups, with or without
administrative rights

Related Information
Authority-Based Table and Column Permissions [page 782]
Authority-Based View or Materialized View Permissions [page 790]
Authority-Based Procedure or Function Permission [page 798]
Authority-Based Dbspace Permission [page 801]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

781

Authority-Based Sequence Generator Permission [page 803]


Authority-Based Database Object Permissions Privilege Summary [page 806]

5.17.1.3.1 Authority-Based Table and Column Permissions


Permissions on tables and columns can be granted and revoked to authority-based users and groups, with or
without administrative rights.

Related Information
About the User or Group Table Permissions List [page 782]
Following the User or Group Table Permissions Grant Trail [page 784]
Adding Permissions on a Table or Column to a User or Group [page 784]
Removing Permissions on a Table or Column from a User or Group [page 786]
Adding Administrative Rights on a Granted Table or Column Permission to a User or Group [page 788]
Removing Administrative Rights Only on a Table or Column Permission from a User or Group [page 789]

5.17.1.3.1.1 About the User or Group Table Permissions List


The Tables permissions list displays permission details the tables and column directly granted to an authoritybased user or group.
There are several table object permissions, which can be granted with or with out administrative rights. Some
permissions can be granted at the table level only, while others can be granted at either the table or column
level.
SELECT table or column level
INSERT table level only
DELETE table level only
UPDATE table or column level
ALTER table level only
REFERENCE table or column level
These object permissions can be granted in several ways:
You own the object.
You are granted the DBA or PERMS ADMIN authority.
You have been indirectly granted specific permissions through membership in a group to which
permissions have been directly or indirectly granted.
You have been directly granted specific permissions.
Users or groups with object ownership or the DBA or PERMS ADMIN authority are automatically granted all
possible object permissions with administrative rights.

782

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Object permissions can be granted with or without administrative rights. When granted without administrative
rights, the grantee can perform authorized tasks requiring the permission, but cannot in turn grant the
permission to another user or group. When granted with administrative rights (With grant option), the grantee
can do both.
The permissions list only lists those tables or columns object permissions granted directly to the selected user
or group. The list indicates the table and column the permission is granted on, by who (grantor), and the
permissions and their corresponding administrative rights. The permissions list does not list object
permissions obtained through ownership, DBA or PERMS ADMIN authority, or group membership.
For each table, permissions granted to all columns on the table are listed first (all), followed by each column,
sorted alphabetically by column name.
When granted to a group, permissions, including administrative rights, are inherited by all members of the
group. The group, not the users indirectly granted the permissions through inheritance, appear on the
permissions list.
The REVOKE command applies to the database object permission itself, not to any administrative right granted
on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or group.
If multiple permissions are granted, you can revoke some or all of the permissions. However, if you revoke a
permission granted administrative rights, and the grantee has granted the permission to other users, who in
turn have granted it to other users, and so on, every grantee in the chain who has received the permission
indirectly, with or without administrative rights, also has their permission revoked. For example, UserA is
granted the SELECT permission with the With grant option. UserA grants SELECT to UserB with the
With grant option. UserB grants SELECT to UserC and UserD without administrative rights and to UserE
with administrative rights. When you revoke the SELECT permission from UserA, it is also revoked for UserB,
UserC, UserD and UserE.
Permissions can be granted on the same table or column, by multiple grantors, resulting in the same table or
column appearing multiple times on the list. If the same permission is granted to the same table or column,
with and without administrative rights, the grant with the administrative right takes precedence.
For example, the user is granted the SELECT permission by both DBA and Alex, with different administrative
rights. When the same permission is granted with different administrative rights, the higher administrative
right takes precedence.
When you revoke a permission granted multiple times, the permission is revoked from all instances, regardless
of administrative rights. For example, Manager1 grants User2 INSERT with administrative rights. User1 also
grants INSERT to User2, without administrative rights. Both instances of INSERT are revoked for User2,
regardless of which instance of INSERT is revoked.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

783

5.17.1.3.1.2 Following the User or Group Table Permissions


Grant Trail
Before revoking a grantee's permission, you need to identify grantees directly or indirectly granted the
permission from the original grantee.
The grant chain traces how a grantee has in turn granted a permission to other grantees.
However, when you view the object permissions granted to a specific user, or group, you only see the
permissions granted to the selected user or group. You do not see who the user or group has granted the
permissions to.
To determine who the selected user or group has in turn granted an object permission to, note the table,
column name (if applicable), and the permission to be traced, then display the permissions list for the table
object to be tranced. See Setting Table Permissions > Following the Table Permissions Grant Trail for details.

Related Information
Following the Table Permissions Grant Trail [page 506]

5.17.1.3.1.3 Adding Permissions on a Table or Column to a


User or Group
Add permissions on a table or column to an authority-based user or group.

Prerequisites
Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You have administrative rights (with grant option) to the permission

You own the database object

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

784

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users or Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions, then click Grant in the right pane.
6. On the Welcome page, based on the table level to which permission is being granted, select Tables or
Table columns.
7. Do one of:
Choice

Action

If Tables was se
lected

Select the table to apply permissions to. Click the box in the header row to select all available
tables.

If Table Column
was selected

Click the Table dropdown arrow and select the table containing the column to which per
missions are to be applied.
Select one or more columns to apply permissions to. Click the box in the header row to se
lect all available columns on the table.

8. On the Permissions page, select one or more permissions. Click the box in the header row to select all
available permissions.
9. (Optional) Click With grant option to grant the selected permissions administrative rights.

Note
The With grant option option applies to all selected permissions. You cannot apply the With
grant option option to individual permissions.
10. Click Finish.
11. (Optional) To view details on the permissions currently granted on a table or column, expand the table
name in the Name column.
12. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

785

5.17.1.3.1.4 Removing Permissions on a Table or Column


from a User or Group
Remove permissions on a table or column from an authority-based user or group.

Prerequisites
Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You have administrative rights (with grant option) to the permission

You own the database object

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Context
The REVOKE command applies to the database object permission itself, not to any administrative right granted
on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or group.
If multiple permissions are granted, you can revoke some or all of the permissions. However, if you revoke a
permission granted administrative rights, and the grantee has granted the permission to other users, who in
turn have granted it to other users, and so on, every grantee in the chain who has received the permission
indirectly, with or without administrative rights, also has their permission revoked. For example, UserA is
granted the SELECT permission with the With grant option. UserA grants SELECT to UserB with the
With grant option. UserB grants SELECT to UserC and UserD without administrative rights and to UserE
with administrative rights. When you revoke the SELECT permission from UserA, it is also revoked for UserB,
UserC, UserD and UserE.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.

786

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users or Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
6. In the right pane, expand the table containing the permission to be removed and then highlight the row
containing the specific permission to be removed.

Note
If the permission appears on the list multiple times with different grantors, with or without
administrative rights, it does not matter which instance is selected.
7. Click Revoke.
A list of permissions currently granted (regardless of administrative rights) appears.
8. Select one or more permissions to revoke, or click the box in the header row to select all available
permissions.

Caution
Revoking permissions may result in unexpected revocation from other users, roles, or groups. See
Following the User or Group Table Permission Grant Trail.
9. Click Finish.
10. (Optional) To view details on the permissions currently granted on a table or column, expand the table
name in the Name column.
11. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

787

5.17.1.3.1.5 Adding Administrative Rights on a Granted Table


or Column Permission to a User or Group
Add user or group administrative rights only to a granted table or column permission.

Prerequisites
Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

Not supported

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users or Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions, then click Grant in the right pane.
6. On the Welcome page, based on the table level of the existing permission to be granted administrative
rights, select Tables or Table columns.
7. Do one of:
Choice

Action

If Tables was se
lected

Select the table containing the existing permission to which apply administrative rights are to
be applied.

If Table Column
was selected

Click the Table dropdown arrow and select the table containing the column to which ad
ministrative rights are to be applied.
Select the columns containing the existing permission to which apply administrative rights
are to be applied.

8. On the Permissions page, select the granted permissions to which administrative rights are to be granted.

788

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

9. Click With grant option to grant the selected permissions administrative rights.

Note
The With grant option option applies to all selected permissions. You cannot apply the With
grant option option to individual permissions.
10. Click Finish.
11. (Optional) To view details on the permissions currently granted on a table or column, expand the table
name in the Name column.
12. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.3.1.6 Removing Administrative Rights Only on a Table


or Column Permission from a User or Group
Remove administrative rights only from a permission granted to an authority-based user or group, on a table
or column.

Prerequisites
Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

Not supported

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports authority-based security.
You are logged in as the original grantor of the permission with administrative rights to be removed.

Context
The REVOKE command applies to the database object permission itself, not to any administrative right granted
on the permission. Therefore, to remove the administrative right only and leave the database object

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

789

permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or group.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users or Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions, then click Grant in the right pane.
6. On the Welcome page, based on the table level of the permission to be regranted, select Tables or Table
columns.
7. On the Permissions page, select the permissions from which administrative rights are being revoked.
8. Click Finish.
9. (Optional) To view details on the permissions currently granted on a table or column, expand the table
name in the Name column.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.3.2 Authority-Based View or Materialized View


Permissions
Permissions on views and materialized view can be granted and revoked to authority-based users and groups,
with or without administrative rights.

Related Information
About the User or Group View Permissions List [page 791]
Following the User or Group View or Materialized View Permissions Grant Trail [page 792]

790

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Adding Permissions on a View or Materialized View to a User or Group [page 793]


Removing Permissions on a View or Materialized View from a User or Group [page 794]
Adding Administrative Rights to a Granted View or Materialized View Permission to a Use or Group [page
796]
Removing Administrative Rights Only on a View or Materialized View Permission from a User or Group [page
797]

5.17.1.3.2.1 About the User or Group View Permissions List


The Views permissions list displays permission details the tables and column directly granted to an authoritybased user or group.
There are four object permissions for views or materialized views, which you can grant with or with out
administrative rights:
SELECT
INSERT
DELETE
UPDATE
These object permissions can be granted in several ways:
You own the object.
You are granted the DBA or PERMS ADMIN authority.
You have been indirectly granted specific permissions through membership in a group to which
permissions have been directly or indirectly granted.
You have been directly granted specific permissions.
Users or groups with object ownership or the DBA or PERMS ADMIN authority are automatically granted all
possible object permissions with administrative rights.
Object permissions can be granted with or without administrative rights. When granted without administrative
rights, the grantee can perform authorized tasks requiring the permission, but cannot in turn grant the
permission to another user or group. When granted with administrative rights (With grant option), the grantee
can do both.
The permissions list only lists those view and materialized view object permissions granted directly to the
selected user or group. The list indicates the view or materialized view the permission is granted on, by who
(grantor), and the permissions and their corresponding administrative rights. The permissions list does not list
object permissions obtained through ownership, DBA or PERMS ADMIN authority, or group membership.
The permissions list is sorted alphabetically by Grantor.
When granted to a group, permissions, including administrative rights, are inherited by all members of the
group. The group, not the users indirectly granted the permissions through inheritance, appear on the
permissions list.
The REVOKE command applies to the database object permission itself, not to any administrative right granted
on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

791

rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or group.
If multiple permissions are granted, you can revoke some or all of the permissions. However, if you revoke a
permission granted administrative rights, and the grantee has granted the permission to other users, who in
turn have granted it to other users, and so on, every grantee in the chain who has received the permission
indirectly, with or without administrative rights, also has their permission revoked. For example, UserA is
granted the SELECT permission with the With grant option. UserA grants SELECT to UserB with the
With grant option. UserB grants SELECT to UserC and UserD without administrative rights and to UserE
with administrative rights. When you revoke the SELECT permission from UserA, it is also revoked for UserB,
UserC, UserD and UserE.
Permissions can be granted on the same view or materialized view, by multiple grantors, resulting in the same
view or materialized view appearing multiple times on the list. If the same permission is granted to the same
view or materialized view, with and without administrative rights, the grant with the administrative right takes
precedence.
When you revoke a permission granted multiple times, the permission is revoked from all instances, regardless
of administrative rights. For example, Manager1 grants User2 INSERT with administrative rights. User1 also
grants INSERT to User2, without administrative rights. Both instances of INSERT are revoked for User2,
regardless of which instance of INSERT is revoked.

5.17.1.3.2.2 Following the User or Group View or Materialized


View Permissions Grant Trail
Before revoking a grantee's permission, you need to identify grantees directly or indirectly granted the
permission from the original grantee.
The grant chain traces how a grantee has in turn granted a permission to other grantees.
However, when you view the object permissions granted to a specific user, or group, you only see the
permissions granted to the selected user or group. You do not see who the user or group has granted the
permissions to.
To determine who the selected user or group has in turn granted an object permission to, note the table,
column name (if applicable), and the permission to be traced, then display the permissions list for the table
object to be tranced. See Setting View Permissions > Following the View Permissions Grant Trail or Setting
Materialized View Permissions > Following the Materialized View Permissions Grant Trail for details.

Related Information
Following the View Permission Grant Trail [page 609]
Following the Materialized View Permission Trail [page 653]

792

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.1.3.2.3 Adding Permissions on a View or Materialized


View to a User or Group
Add permissions on a view or materialized view to an authority-based user or group.

Prerequisites
Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

Not supported

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users or Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
6. In the right pane, click Grant, then click Grant in the right pane.
7. On the Welcome page, select Views.
8. On the Objects page, select the view or materialized view on which the permission is being granted.
9. On the Permissions page, select one or more permissions. Click the box in the header row to select all
available permissions.
10. (Optional) Click With grant option to grant the selected permissions administrative rights.

Note
The With grant option option applies to all selected permissions. You cannot apply the With
grant option option to individual permissions.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

793

11. Click Finish.


12. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.3.2.4 Removing Permissions on a View or Materialized


View from a User or Group
Remove permissions from a view or materialized view for an authority-based user or group.

Prerequisites
Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

Not supported

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports authority-based security.

Context
The REVOKE command applies to the database object permission itself, not to any administrative right granted
on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or group.
If multiple permissions are granted, you can revoke some or all of the permissions. However, if you revoke a
permission granted administrative rights, and the grantee has granted the permission to other users, who in
turn have granted it to other users, and so on, every grantee in the chain who has received the permission

794

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

indirectly, with or without administrative rights, also has their permission revoked. For example, UserA is
granted the SELECT permission with the With grant option. UserA grants SELECT to UserB with the
With grant option. UserB grants SELECT to UserC and UserD without administrative rights and to UserE
with administrative rights. When you revoke the SELECT permission from UserA, it is also revoked for UserB,
UserC, UserD and UserE.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users or Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
6. In the right pane, select Views.
A list of permissions currently granted appears.
7. In the right pane, select the view or materialized view containing the permission to be revoked and click
Revoke.
A list of permissions currently granted (regardless of administrative rights) appears.
8. Select one or more permissions to revoke, or click the box in the header row to select all available
permissions.

Caution
Revoking permissions may result in unexpected revocation from other users, roles, or groups. See
Following the User or Group View Permission Grant Trail.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

795

5.17.1.3.2.5 Adding Administrative Rights to a Granted View


or Materialized View Permission to a Use or
Group
Add administrative rights only to a view or materialized view permission.

Prerequisites
Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

Not supported

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users or Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
6. In the left pane, click Permissions, then click Grant in the right pane.
7. On the Welcome page, select Views.
8. On the Objects page, select the view or materialized view on which the existing permission to be granted
administrative rights resides.
9. On the Permissions page, select the permissions to which administrative rights are to be granted.
10. Click With grant option to grant the selected permissions administrative rights.

Note
The With grant option option applies to all selected permissions. You cannot apply the With
grant option option to individual permissions.

796

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

11. Click Finish.


12. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.3.2.6 Removing Administrative Rights Only on a View


or Materialized View Permission from a User or
Group
Remove administrative rights only from a permission granted to an authority-based user or group, on a view or
materialized view.

Prerequisites
Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

Not supported

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports authority-based security.
You are logged in as the original grantor of the permission with administrative rights to be removed.

Context
The REVOKE command applies to the database object permission itself, not to any administrative right granted
on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or group.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

797

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users or Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
6. In the right pane, select Views from the list.
A list of permissions currently granted appears.
7. In the right pane, click Grant.
8. On the Welcome page, select Views.
9. On the Objects page, select the view or materialized view on which the administrative rights on a
permissible are being removed.
10. On the Permissions page, select the permissions from which administrative rights are being revoked.
11. Click Finish.
12. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.3.3 Authority-Based Procedure or Function Permission


Grant and revoke execute permission on a function or procedure for an authority-based user or group

Related Information
Adding EXECUTE Permission to a User or Group [page 799]
Removing EXECUTE Permission from a User or Group [page 800]

798

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.1.3.3.1 Adding EXECUTE Permission to a User or Group


Grant execute permission on a function or procedure to an authority-based user or group.

Prerequisites
Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users or Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions, then click Grant in the right pane.
6. On the Welcome page, select Procedures or Functions.
7. On the Objects page, select one or more objects to grant execute permission to.

Tip
Use Shift-click or Control-click to select multiple items.
8. On the Permissions page, select Execute.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

799

5.17.1.3.3.2 Removing EXECUTE Permission from a User or


Group
Remove execute permission on a function or procedure from an authority-based user or group.

Prerequisites
Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users or Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions.
6. In the right pane, select Procedures or Functions from the list.
A list of permissions currently granted appears.
7. In the right pane, highlight the permission to be revoked and click Revoke.
8. At the confirmation prompt, click Yes.
9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

800

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.1.3.4 Authority-Based Dbspace Permission


Grant and revoke create permission on a dbspace for an authority-based user or group

Related Information
Adding CREATE Permission to a User or Group [page 801]
Removing CREATE Permission from a User or Group [page 802]

5.17.1.3.4.1 Adding CREATE Permission to a User or Group


Add create permission on a dbspace to an authority-based user or group.

Prerequisites
Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users or Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions, then click Grant in the right pane.
6. On the Welcome page, select Dbspaces.
7. On the Objects page, select one or more objects to grant usage permission to.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

801

Tip
Use Shift-click or Control-click to select multiple items.
8. On the Permissions page, select Create.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.3.4.2 Removing CREATE Permission from a User or


Group
Remove create permission on a dbspace from an authority-based user or group.

Prerequisites
Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users or Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.

802

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5. In the left pane, select Permissions.


6. In the right pane, select Dbspace from the list.
A list of permissions currently granted appears.
7. In the right pane, highlight the permission to be revoked and click Revoke.
8. At the confirmation prompt, click Yes.
9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.3.5 Authority-Based Sequence Generator Permission


Grant and revoke usage permission on a sequence generator for an authority-based user or group

Related Information
Adding USAGE Permission to a User or Group [page 803]
Removing USAGE Permission from a User or Group [page 804]

5.17.1.3.5.1 Adding USAGE Permission to a User or Group


Add usage permission on a sequence generator to an authority-based user or group.

Prerequisites
Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the sequence generator

Not supported

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

803

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users or Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions, then click Grant in the right pane.
6. On the Welcome page, select Sequence Generators.
7. On the Objects page, select one or more objects to grant usage permission to.

Tip
Use Shift-click or Control-click to select multiple items.
8. On the Permissions page, select Usage.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.1.3.5.2 Removing USAGE Permission from a User or


Group
Remove usage permission on a sequence generator from an authority-based user or group.

Prerequisites
Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

804

DBA authority

PERMS ADMIN authority

You own the sequence generator

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports authority-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Authority-Based , and then click Users or Groups.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions.
6. In the right pane, select Sequence Generators from the list.
A list of permissions currently granted appears.
7. In the right pane, highlight the permission to be revoked and click Revoke.
8. At the confirmation prompt, click Yes.
9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

805

5.17.1.3.6 Authority-Based Database Object Permissions


Privilege Summary
A list of the system privileges and object permissions required to complete the various authority-based user
and group tasks pertaining to database objects.

Grant or Revoke Permissions on a Table or Column


Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You have administrative rights (with grant option) to the permission

You own the database object

Not supported

Modify Administrative Permissions on a Table or Column


Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

Not supported

Grant or Revoke Permissions on a View or Materialized View


Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

806

DBA authority

PERMS ADMIN authority

Administrative rights over the permission

You own the database object

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Modify Administrative Permissions on a View or Materialized View


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

Grant or Revoke Permissions on a Sequence Generator


Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the sequence generator

Not supported

Grant or Revoke Permissions on a Function or Procedure


Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Administer SAP IQ

DBA authority

PERMS ADMIN authority

You own the database object

Not supported

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

807

Grant or Revoke Permissions on a Dbspace


Database Version

Authority-Based Database Object Permissions Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

Not supported

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.17.2 Role-Based Security


Add, change, and delete users and roles and grant or revoke database system roles to same.
Role-based security is supported with database version 16.0 only.

Related Information
Role Types [page 809]
Role-Based Users [page 809]
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
User-Extended Roles [page 834]

808

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Standalone Roles [page 874]


Role-Based Object Permissions on Users and Roles [page 904]
System Roles [page 931]
Compatibility Roles [page 948]
System Privileges [page 958]

5.17.2.1 Role Types


In role-based security, there are several types of roles.
User-defined Role can be granted privileges on other objects. Membership to a user-defined role can be
granted to users or other user-defined roles. User-defined roles include:
Standalone role an independent database object without login privileges, which can own objects. You
cannot convert a standalone role to a user-extended role, and vice versa.
User-extended role a user ID that has been extended to act as a role. If an original user has login
privileges, a user-extended role inherits the login privileges.
System roles are automatically created in each newly created or upgraded database and are granted
specific system privileges. System roles cannot be dropped and cannot own objects. They do not follow
any specific naming conventions.
Compatibility Roles are automatically created in each newly created or upgraded database and are
granted specific system roles and privileges. Compatibility roles can be migrated and dropped under
specific conditions and use a naming convention that begin with SYS_AUTH_ and end with _ROLE. Also
called predefined roles, they are created for backward compatibility with earlier versions of SAP IQ.

5.17.2.2 Role-Based Users


Add, change, and delete role-based users.

Related Information
Creating a Role-Based User [page 810]
Deleting a Role-Based User [page 813]
Converting a Role-Based User to a User-Extended Role [page 814]
Adding a Role to a Role-Based User [page 815]
Changing a Role-Based User's Administrative Rights on a Role [page 816]
Removing a Role from a Role-Based User [page 817]
Adding a System Privilege to a Role-Based User [page 819]
Changing a User's Administrative Rights on a System Privilege [page 820]
Removing a System Privilege from a Role-Based User [page 821]
Viewing or Modifying Role-Based User Options [page 822]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

809

Generating Role-Based User DDL Commands [page 823]


Viewing or Modifying Role-Based User Properties [page 824]
Changing a Role-Based User Password [page 826]
Forcing a Role-Based User to Change their Password [page 827]
Unlocking a Role-Based User Account [page 828]
Changing a Role-Based User Login Policy [page 829]
Role-Based User Privilege Summary [page 830]

5.17.2.2.1 Creating a Role-Based User


Add a new role-based user to the database using the Create User wizard.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Create a user MANAGE ANY USER system privilege


Grant a role during the user creation process you must have one of:

Administrative rights over the role being granted (role administrator)

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

Grant a system privilege during user creation you must have administrative rights
over the system privilege being granted.

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.
In a multiplex configuration, the coordinator is running.

Context

Note
This task applies to the creation of a regular user account. If you are creating the technical user account,
see Creating the Technical User for a Role-Based System.

810

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the user will be created

Select a system.

Note
If the selected system does not support the selected
security mode (role-based or authority-based), an er
ror message appears.
What do you want to name the new user?

Enter a unique user ID..

Create as technical user

Leave unselected..

6. On the Password page:


Property

Description

Enable password

Select to allow a user to connect to the database with


password security. Leave this option unselected to disa
ble the password and confirm password options.

Password

Create a strong user password. Characters appear as as


terisks.

Confirm password

Confirm the password. The contents of the two password


fields must match exactly.

Requires password change on next login

Force the user to change the password at the next login.

Note
This functionality is not currently implemented in SAP
IQ Cockpit. When logging in to SAP IQ Cockpit, a user
will not be prompted to change their password. He or
she will be prompted, however, when logging in to SAP
IQ outside of SAP IQ Cockpit (for example, using Inter
active SQL).
Login policy

Select a login policy.

7. (Optional) On the Roles page, highlight a role to be granted. Click in the Grant Option column, click the
arrow, and select the administrative rights to be granted.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

811

Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

Only roles to which you have administrative rights appear on the list.
By default, a new user or user-extended role is automatically granted the PUBLIC system role with the
"Role only" privilege (user is a member of the role, but has no administrative rights on the role). There
is no need to add the PUBLIC role when creating a user, user-extended role, or standalone role.
When you grant a role to a user, user-extended role, or standalone role, unless otherwise noted, any
underlying system privileges of the role being granted are automatically inherited by the user, userextended role, or standalone role.
8. Repeat step 7 [page 811] to grant additional roles.
9. (Optional) On the System Privileges page, highlight a system privilege to be granted. Click in the Grant
Option column, click the arrow, and select the administrative rights to be granted.

Note
Only system privileges to which you have administrative rights appear on the list.
Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

10. Repeat step 9 [page 812] to grant additional privileges.


11. (Optional) On the Comment page, enter a comment for this user.
12. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

812

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.2.2 Deleting a Role-Based User


Delete a role-based user from the database.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.
The user being deleted does not own any database objects and is not currently connected to the database.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Click Yes to confirm deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

813

5.17.2.2.3 Converting a Role-Based User to a User-Extended


Role
Change an existing user to act as a role. The user-extended role retains membership roles already granted to
the user.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ROLES system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Change to Role.
5. Click Yes to confirm conversion.

Results
After converting the user, if any of the following roles were granted to the original user, the underlying system
privileges and roles are automatically inherited by any users added to the role. This can be prevented, for
these roles only, by changing the administrative rights on the role along with the no inheritance option.
SYS_AUTH_DBA_ROLE
SYS_AUTH_BACKUP_ROLE
SYS_RUN_REPLICATION_ROLE
SYS_AUTH_RESOURCE_ROLE
SYS_AUTH_VALIDATE_ROLE

814

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Changing Administrative Rights on an Underlying Role of a User-Extended Role [page 846]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.2.4 Adding a Role to a Role-Based User


Add a role-based user a member of a role. The user inherits all underlying system privileges and roles of the
granted role.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

You must have one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Roles.
A list of roles currently granted to the user appears.
5. Click Grant.
6. Select one or more roles to grant. Only roles to which you have administrative rights appear on the list.

Tip
Use Shift-click or Control-click to select multiple items.
7. Click OK to grant the roles.
The selected roles appear with Role only rights (no administrative rights).

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

815

8. (Optional) To modify the administrative rights of a role, highlight a role. Click in the Grant Options column,
click the arrow, and select the administrative rights to be granted.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.2.5 Changing a Role-Based User's Administrative


Rights on a Role
Change a role-based user's ability to manage a role.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

You must have one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

816

IQ Servers

Security

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Role-Based , and then click Users.

SAP IQ Cockpit
Administer SAP IQ

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Roles.
A list of roles currently granted and their administrative rights appears.
5. Highlight a role to be modified. Click in the Grant Options column, click the arrow, and select the
administrative rights to be granted.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.2.6 Removing a Role from a Role-Based User


Remove a role-based user's membership in a role.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

You must have one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

817

Context
By default, a minimum of one role administrator (or global role administrator with a login password) for each
role must exist at all times. This minimum requirement is validated before you can remove a member who is a
role administrator from a role.
If removing membership in a role would result in a failure to meet the minimum number of role administrators
for the selected role, an error message appears, and the task fails.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Roles.
A list of roles currently granted to the user appears.
5. Highlight a role to be removed and click Revoke.

Note
Revoke is unavailable if you do not have administrative rights to the selected role.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

818

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.2.7 Adding a System Privilege to a Role-Based User


Allows a role-based user to perform privileged tasks associated with a system privilege.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

You must have administrative rights over the system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage System Privileges.
A list of system privileges currently granted to the user appears.
5. Click Grant.
6. Select one or more system privileges to grant. Only system privileges to which you have administrative
rights appear on the list.

Tip
Use Shift-click or Control-click to select multiple items.
7. Click OK to grant the system privileges.
The selected system privileges appear granted with Privilege only rights (no administrative rights).
8. (Optional) To modify the administrative rights of a system privilege, highlight a system privilege. Click in
the Grant Options column, click the arrow, and select the administrative rights to be granted.
Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

819

Grant Option

Description

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.2.8 Changing a User's Administrative Rights on a


System Privilege
Changes a user's ability to manage a system privilege.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

You must have administrative rights over the system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage System Privileges.
A list of system privileges currently granted to the user appears.

820

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5. Highlight a system privilege to be modified. Click in the Grant Options column, click the arrow, and select
the administrative rights to be granted.
Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.2.9 Removing a System Privilege from a Role-Based


User
Remove a system privilege from a role-based user.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

You must have administrative rights over the system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the right pane, select an item, and do one of:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

821

Click the arrow to the right of the name.


Click the Actions button.
4. Select Manage System Privileges.
A list of system privileges currently granted to the user appears.
5. Highlight a system privilege to be removed and click Revoke.

Note
Revoke is unavailable if you do not have administrative rights to the selected system privilege.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.2.10 Viewing or Modifying Role-Based User Options


View or change database option settings assigned to a user.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

View the list of options none.


Modify any option Depending on the option being modified, requires one of:

SET ANY PUBLIC OPTION system privilege

SET ANY SECURITY OPTION system privilege

SET ANY SYSTEM OPTION system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
For database options that can be set at either level, when set at the user level, the setting overrides the current
value for that user only. When set it at the database level, the value becomes the new default, and is applied to
any existing users who have not had the option overridden at the user level.

822

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

For information on the level at which each option can be set and the system privilege required, in the SAP IQ
16.x documentation, see the alphabetical list of Database options in SAP IQ Reference: Statements and
Options.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Options.
A list of the current setting for each option appears.
5. To change a setting, click in the Setting column of the option, and enter the new value.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.2.11 Generating Role-Based User DDL Commands


Display the SQL data description language for creating a user. The SQL code can be a useful reference and
training tool.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None.

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

823

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view opens, showing the SQL code used to create the selected role-based users.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.2.12 Viewing or Modifying Role-Based User Properties


View or change user properties such as password, login policy and database object permissions.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

View any user property page none.


Modify a password CHANGE PASSWORD system privilege
Modify a login policy, comment, or refresh DN MANAGE ANY USER system privilege
Refresh LDAP DN - MANAGE ANY USER system privilege
For privileges relating to user permissions, see Role-Based Database Object Permis
sions Privilege Summary [page 928]

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

824

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or edit the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Read-only)

Name of the user.

Enable Password

Allows the user to connect to the da


tabase with password security. Clear
ing this option disables the Password
and Confirm Password options. User
can log in without specifying a pass
word.

Change Password

Click to change the password for the


user.

Password

The new password for the user. Char


acters appear as asterisks.

Confirm password

Confirmation of the new password


entered. The contents of the two
fields must match exactly to proceed.

Password creation time (Read-only)

Date and time when the password


was created.

Change password on next login

Select to force the user to change the


password at the next login.

Login policy

Login policy for the user.

Last login time (Read-only)

Last time the user successfully log


ged in.

Failed login attempts

Number of times the user has tried to


log in with an incorrect password.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

825

Page

Property

Description

Locked (Read-only)

Indicates if the account is locked.


Valid values are:
false the account is unlocked
true account is locked because
the user has exceeded the al
lowed number of failed login at
tempts.

Unlock now

Select to unlock the account when


Locked is true.

Comment

Text field for adding optional com


ments.

LDAP

Refresh the user DN.

Permission

See Role-Based Object Permissions on Users and Roles [page 904].

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.2.13 Changing a Role-Based User Password


Change the password for another role-base user.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

CHANGE PASSWORD system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.

826

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. On the General Properties page, type the new password in the Password and Confirm password fields.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.2.14 Forcing a Role-Based User to Change their


Password
Force a role-based user to change their password the next time he or she logs in.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
This functionality is not currently implemented in SAP IQ Cockpit. When logging in to SAP IQ Cockpit, a user is
not prompted to change their password. He or she is prompted, however, when logging in to SAP IQ outside of
SAP IQ Cockpit (for example, using Interactive SQL).

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

827

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. On the General Properties page, select Require password change on next login.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.2.15 Unlocking a Role-Based User Account


Unlock a locked role-based user account.

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.

828

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

4. Select Properties.
5. On the General Properties page, click Unlock Now.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.2.16 Changing a Role-Based User Login Policy


Assign a role-based user a different login policy

Prerequisites
Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Users.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. Select a new login policy.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

829

5.17.2.2.17 Role-Based User Privilege Summary


A list of the system privileges and object permissions required to complete the various role-based user tasks.

Creating a Role-Based User


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Create a user MANAGE ANY USER system privilege


Grant a role during the user creation process you must have one of:

Administrative rights over the role being granted (role administrator)

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

Grant a system privilege during user creation you must have administrative rights
over the system privilege being granted.

Deleting a Role-Based User


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

Converting a Role-Based User to a User Extended Role


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ROLES system privilege

Adding and Removing a User from a Role


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

830

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Role-Based User Privileges Required

SAP IQ 16.0

You must have one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Adding and Removing System Privileges from a User


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

You must have administrative rights over the system privilege

Viewing or Modifying Role-Based User Options


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

View the list of options none.


Modify any option Depending on the option being modified, requires one of:

SET ANY PUBLIC OPTION system privilege

SET ANY SECURITY OPTION system privilege

SET ANY SYSTEM OPTION system privilege

Generating Role-Based User DDL Commands


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None.

Viewing or Modifying Role-Based User Properties


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

831

Database Version

Role-Based User Privileges Required

SAP IQ 16.0

View any user property page none.


Modify a password CHANGE PASSWORD system privilege
Modify a login policy, comment, or refresh DN MANAGE ANY USER system privilege
Refresh LDAP DN - MANAGE ANY USER system privilege
For privileges relating to user permissions, see Role-Based Database Object Permis
sions Privilege Summary [page 928]

Changing a Role-Based User Password


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

Forcing a Role-Based User Password Change


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

CHANGE PASSWORD system privilege

Unlocking a Role-Based User Account


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

Changing a Role-Based User Login Policy


Database Version

Role-Based User Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

832

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

5.17.2.3 Security Implications of the Managing Grantees and


Managing Roles Options
A role can be granted to another role as a grantee (member) or as an underlying role. Each grant type has
different security inheritance implications.
Grantees are members granted directly to a role. A grantee can be either a user or another role. Granting
membership in a role allows grantees to inherit all system privileges and underlying roles of the role.
When granting a role to another role, the role can be granted as a grantee (member)) or as an underlying role.
When a role is granted as a member, each member of the role being granted (the child role) becomes a
grantee of the receiving role (the parent role). Each new grantee inherits all system privileges and roles already
granted to the parent role, while still retaining all system privileges and roles from the child role. Existing
members of the parent role do not inherit any system privileges and roles from the child role.
When a role is granted as an underlying role, all system privileges and roles of the underlying role (child role)
are inherited by all members of the receiving role (parent role). However, members of the child role do not
become members of the parent role.

Consider the following:


There are three users: User1, User2, User3.
There are five roles: Role1, Role2, Role3, Role4, Role5.
There are three system privileges: Priv1, Priv2, Priv3.

Grant a role as a member:


Role1 is granted Priv1 and Role4.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

833

User1 and User2 are members of Role1.


Role2 is granted Priv2 and Role5.
User3 is a member of Role2.
Role1 is made a member of Role2 (Manage Grantee).
As members of Role1, User1 and User2 (indirectly) become members of Role2 and inherit Priv2. Since
Role4 is also a member of Role1, they also (indirectly) inherit all system privileges and roles granted to
Role4.
As a member of Role2, User3 does not inherit Priv1 from Role1, or any system privileges or roles of Role4.

Grant a role as an underlying role:


Role1 is granted Priv1 and Role4.
User1 and User2 are members of Role1.
Role2 is granted Priv2 and Role5.
User3 is a member of Role2.
Role1 is made an underlying role of Role2 (Manage Roles).
As a member of Role2, User3 inherits the following from Role1: Priv1 and (indirectly) all system privileges
and roles of Role4.
As members of Role1, User1 and User2 do not become members of Role2 and do not inherit Priv2 or any
system privileges and roles granted to Role4.
As you can see, there is a significant difference in how system privileges and roles of a child role are inherited
by the parent role and by whom. Use of the wrong grant method can lead to unexpected behavior and potential
security concerns.

5.17.2.4 User-Extended Roles


Add, change, and delete user-extended roles.

Related Information
Creating a User-Extended Role [page 835]
Deleting a User-Extended Role [page 838]
Converting a User-Extended Role to a User [page 839]
Adding a Grantee to a User-Extended Role [page 840]
Changing a Grantee's Administrative Rights on a User-Extended Role [page 841]
Removing a Grantee From a User-Extended Role [page 842]
Adding a Role to a User-Extended Role [page 844]
Changing Administrative Rights on an Underlying Role of a User-Extended Role [page 846]
Removing a Role from a User-Extended Role [page 847]

834

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Adding a System Privilege to a User-Extended Role [page 849]


Changing Administrative Rights on a User-Extended Role Granted Privilege [page 850]
Removing a System Privilege from a User-Extended Role [page 851]
Viewing or Modifying Role-Based User-Extended Role Options [page 852]
Manage Role Administrators of a User-Extended Role [page 853]
Manage Global Role Administrators of a User-Extended Role [page 858]
Generating User-Extended Role DDL Commands [page 861]
Viewing or Modifying User-Extended Role Properties [page 862]
Changing a User-Extended Role Password [page 865]
Forcing a User-Extended Role to Change their Password [page 866]
Unlocking a User-Extended Role Account [page 867]
Changing a User-Extended Role Login Policy [page 868]
Role-Based User-Extended Role Privilege Summary [page 869]

5.17.2.4.1 Creating a User-Extended Role


Add a new user-extended role to the database.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Create a role both the MANAGE ANY USER and MANAGE ROLES system privileges.
Grant a role during user-extended role creation one of:

Administrative rights over the role being granted (role administrator)

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

Grant a system privilege during user-extended role creation administrative rights


over the system privilege being granted

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

SAP IQ Cockpit
Administer SAP IQ

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

835

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the user will be created

Select a system.

Note
If the selected system does not support the selected
security mode (role-based or authority-based), an er
ror message appears.
What do you want to name the new user?

Enter a unique user ID..

6. On the Password page:


Property

Description

Enable password

Select to allow a user to connect to the database with


password security. Leave this option unselected to disa
ble the password and confirm password options.

Password

Create a strong user password. Characters appear as as


terisks.

Confirm password

Confirm the password. The contents of the two password


fields must match exactly.

Requires password change on next login

Force the user to change the password at the next login.

Note
This functionality is not currently implemented in SAP
IQ Cockpit. When logging in to SAP IQ Cockpit, a user
will not be prompted to change their password. He or
she will be prompted, however, when logging in to SAP
IQ outside of SAP IQ Cockpit (for example, using Inter
active SQL).
Login policy

Select a login policy.

7. (Optional) On the Administrators page, select one or more administrators.

Note
SAP recommends that you do not select any role administrators when creating a new role; add them
once the creation process is complete. If at least one role administrator is specified during creation,
global role administrators will be unable to manage the role because the MANAGE ROLES system
privilege is not automatically granted to the role.

836

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

a. (Optional) If an administrator is selected, indicate whether the administrator is to be granted


membership in the role along with administrative rights (Administrative and role) or administrative
rights only (default).

Note
Only one privilege level can be defined for all selected administrators when specified during the
create process. However, the privilege level can be later modified.
8. (Optional) On the Roles page, highlight a role to be granted. Click in the Grant Option column, click the
arrow, and select the administrative rights to be granted.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

Only roles to which you have administrative rights appear on the list.
By default, a new user or user-extended role is automatically granted the PUBLIC system role with the
"Role only" privilege (user is a member of the role, but has no administrative rights on the role). There
is no need to add the PUBLIC role when creating a user, user-extended role, or standalone role.
When you grant a role to a user, user-extended role, or standalone role, unless otherwise noted, any
underlying system privileges of the role being granted are automatically inherited by the user, userextended role, or standalone role.
9. Repeat step 8 [page 837] to grant additional roles.
10. (Optional) On the System Privileges page, highlight a system privilege to be granted. Click in the Grant
Option column, click the arrow, and select the administrative rights to be granted.

Note
Only system privileges to which you have administrative rights appear on the list.
Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

11. Repeat step 10 [page 837] to grant additional privileges.


12. (Optional) On the Comment page, enter a comment for this user.
13. Click Finish.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

837

Related Information
Manage Role Administrators of a User-Extended Role [page 853]
Manage Global Role Administrators of a User-Extended Role [page 858]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.2 Deleting a User-Extended Role


Delete a user-extended role from the database.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.
The user-extended role being deleted does not own any database objects and is not currently connected
to the database.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Click Yes to confirm deletion.

838

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.3 Converting a User-Extended Role to a User


Change a user-extended role back to a regular user.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the role being converted

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
The user retains any login privileges, system privileges and roles granted to the user-extended role. The user
remains as the owner of the objects that were created after the user was extended to act as a role. Any users
granted to the user-extended role are immediately revoked.
A minimum number of role or global role administrators (as defined by the MIN_ROLE_ADMINS database
option) with a login password must exist for each role at all times. When converting a user-extended role back
to a user, all dependent roles of the user-extended role must continue to meet this minimum requirement, or
the conversion fails.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Change to User.
5. Click Yes to confirm conversion.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

839

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.4 Adding a Grantee to a User-Extended Role


Add a user or role as a member (grantee) of a user-extended role. Grantee inherits all underlying system
privileges and roles of the user-extended role.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users and roles currently granted to the role appears.
5. Click Grant.
6. Select one or more users or roles to become members. Only roles to which you have administrative rights
appear on the list.

Tip
Use Shift-click or Control-click to select multiple items.
7. Click OK.
The new grantees appear with Role only rights (no administrative rights).

840

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

8. (Optional) To modify the administrative rights of a role, highlight a role. Click in the Grant Options column,
click the arrow, and select the administrative rights to be granted.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

9. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.5 Changing a Grantee's Administrative Rights on a


User-Extended Role
Change a member's (grantee's) ability to manage a user-extended role.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

841

2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users and roles currently granted to the role appears.
5. Highlight a user or role to be modified. Click in the Grant Option column, click the arrow, and select the
administrative rights to be granted.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

6. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.6 Removing a Grantee From a User-Extended Role


Remove a user or role as a member (grantee) of a user-extended role. Grantees lose the ability to use any
underlying system privileges or roles of the user-extended role.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

842

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Context
By default, a minimum of one role administrator (or global role administrator with a login password) for each
role must exist at all times. This minimum requirement is validated before you can remove a member who is a
role administrator from a role.
If revoking membership in a role would result in a failure to meet the minimum number of role administrators
for the selected role, an error message appears, and the removal fails.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users and roles currently granted to the role appears.
5. Highlight a user or role to be removed form the user-extended role and click Revoke.

Note
Revoke is unavailable if you do not have administrative rights to the selected role.
6. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

843

5.17.2.4.7 Adding a Role to a User-Extended Role


Add a role as an underlying role of a user-extended role. Members of the user-extended role inherit all system
privileges and roles of the underlying role, but do not become members of the underlying role. Members of the
underlying role do not become members of the user-extended role.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Enable the Manage Roles option one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Add an underlying system role MANAGE ROLES system privilege


Add an underlying user-defined or compatibility role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Roles.
A list of roles currently granted to the user-extended role appears.
5. Click Grant.
6. Select one or more system or compatibility roles to grant. Only roles to which you have administrative
rights appear on the list.

Tip
Use Shift-click or Control-click to select multiple items.
7. Click OK.

844

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

The selected roles appear with Role only rights (no administrative rights).
8. (Optional) (For compatibility and user-defined roles only) To modify the administrative rights of an
underlying role, highlight a role. Click in the Grant Options column, click the arrow, and select the
administrative rights to be granted.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

Note
The following steps represent a behavior change with SAP IQ 16.0, for the following roles only.
SYS_AUTH_DBA_ROLE
SYS_AUTH_BACKUP_ROLE
SYS_RUN_REPLICATION_ROLE
SYS_AUTH_RESOURCE_ROLE
SYS_AUTH_VALIDATE_ROLE
Prior to 16.0, when granting membership to one of these roles, the default inheritance behavior was to
not allow members of the role to automatically inherit the underlying system privileges and roles of the
compatibility role. Only the log in user (of the role) would inherit. As of 16.0, the default behavior is to
allow automatic inheritance by all members of the role.
9. (Optional for SYS_AUTH_DBA_ROLE only) To prevent automatic inheritance of the
SYS_AUTH_DBA_ROLE when granted with the Administrative and Role option, click in the
Inheritance column, and select No Inheritance.
10. (Optional for SYS_AUTH_DBA_ROLE, SYS_AUTH_BACKUP_ROLE, SYS_RUN_REPLICATION_ROLE,
SYS_AUTH_RESOURCE_ROLE, or SYS_AUTH_VALIDATE_ROLE only) To prevent automatic inheritance
when granted with Role only option, click in the Inheritance column, and select No Inheritance.
11. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

845

5.17.2.4.8 Changing Administrative Rights on an Underlying


Role of a User-Extended Role
Changes a member's (grantee's) ability to manage an underlying role of a user-extended role.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
Administrative rights cannot be modified on underlying roles which are system roles.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Roles.
A list of underlying roles currently granted to the role appears.
5. (Not applicable to system roles) Highlight a role to be modified. Click in the Grant Option column, click the
arrow, and select the administrative rights to be granted.

846

Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Grant Option

Description

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

Note
The following steps represent a behavior change with SAP IQ 16.0, for the following roles only.
SYS_AUTH_DBA_ROLE
SYS_AUTH_BACKUP_ROLE
SYS_RUN_REPLICATION_ROLE
SYS_AUTH_RESOURCE_ROLE
SYS_AUTH_VALIDATE_ROLE
Prior to 16.0, when granting membership to one of these roles, the default inheritance behavior was to
not allow members of the role to automatically inherit the underlying system privileges and roles of the
compatibility role. Only the log in user (of the role) would inherit. As of 16.0, the default behavior is to
allow automatic inheritance by all members of the role.
6. (Optional for SYS_AUTH_DBA_ROLE only) To prevent automatic inheritance of the
SYS_AUTH_DBA_ROLE when granted with the Administrative and Role option, click in the
Inheritance column, and select No Inheritance.
7. (Optional for SYS_AUTH_DBA_ROLE, SYS_AUTH_BACKUP_ROLE, SYS_RUN_REPLICATION_ROLE,
SYS_AUTH_RESOURCE_ROLE, or SYS_AUTH_VALIDATE_ROLE only) To prevent automatic inheritance
when granted with Role only option, click in the Inheritance column, and select No Inheritance.
8. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.9 Removing a Role from a User-Extended Role


Remove a role as an underlying role of a user-extended role. Members of the user-extended role lose the ability
to use any system privileges of the underlying role.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

847

Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 16.0

Enable the Manage Roles option one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Add an underlying system role MANAGE ROLES system privilege


Add an underlying user-defined or compatibility role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
By default, a minimum of one role administrator (or global role administrator with a login password) for each
role must exist at all times. This minimum requirement is validated before you can remove a member who is a
role administrator from a role.
If removing membership in a role would result in a failure to meet the minimum number of role administrators
for the selected role, an error message appears, and the task fails.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Roles.
A list of underlying roles currently granted to the user-extended role appears.
5. Highlight a role to be removed and click Revoke.

Note
Revoke is unavailable if you do not have administrative rights to the selected role.
6. Click OK to update any changes to the database and close the page.

848

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.10 Adding a System Privilege to a User-Extended


Role
Add the ability of a user-extended role to perform privileged tasks associated with a system privilege.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the system privilege. Administrative rights on the role is not
required.

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage System Privileges.
A list of system privileges currently granted to the user-extended role appears.
5. Click Grant.
6. Select one or more system privileges to grant. Only system privileges to which you have administrative
rights appear on the list.

Tip
Use Shift-click or Control-click to select multiple items.
7. Click OK to grant the system privilege.
The selected system privileges appear granted with Privilege only rights (no administrative rights).

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

849

8. (Optional) To modify the administrative rights of a system privilege, highlight a system privilege. Click in
the Grant Options column, click the arrow, and select the administrative rights to be granted.
Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.11 Changing Administrative Rights on a UserExtended Role Granted Privilege


Change the administrative rights on a system privilege granted to a user-extended role.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the system privilege. Administrative rights on the role is not
required.

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

850

IQ Servers

Security

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Role-Based , and then click User-Extended Roles.

SAP IQ Cockpit
Administer SAP IQ

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage System Privileges.
A list of system privileges currently granted to the user-extended role appears.
5. Highlight a system privilege to be modified. Click in the Grant Option column, click the arrow, and select
the administrative rights to be granted.
Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.12 Removing a System Privilege from a UserExtended Role


Remove a system privilege from a user-extended role.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the system privilege. Administrative rights on the role is not
required.

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

851

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage System Privileges.
A list of system privileges currently granted to the user-extended role appears.
5. Highlight a system privilege and click Revoke.

Note
Revoke is unavailable if you do not have administrative rights to the selected system privilege.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.13 Viewing or Modifying Role-Based User-Extended


Role Options
View or change database option settings assigned to a user.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

View user-extended role options only none


Modify user-extended role options depending on the option being modified, one of:

SET ANY PUBLIC OPTION system privilege

SET ANY SECURITY OPTION system privilege

SET ANY SYSTEM OPTION system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

852

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Context
For database options that can be set at either level, when set at the user level, the setting overrides the current
value for that user only. When set it at the database level, the value becomes the new default, and is applied to
any existing users who have not had the option overridden at the user level.
For information on the level at which each option can be set and the system privilege required, in the SAP IQ
16.x documentation, see the alphabetical list of Database options in SAP IQ Reference: Statements and
Options.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Options.
A list of the current settings of each option appears.
5. To change a setting, click in the Setting column for the option and enter the new value.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.14 Manage Role Administrators of a User-Extended


Role
Role administrators are responsible for granting and revoking user-extended roles to users and other roles.
You can add and remove role administrators as needed.
There are two types of role administrators:
Role administrator users or roles designated to administer a role.
Global role administrator any user granted the MANAGE ROLES system privilege.
When you create a new role, you can appoint one or more role administrators to manage the role (grant and
revoke membership in the role). If no role administrator is specified during the creation process, the MANAGE
ROLES system privilege is automatically granted to the role with the Administrative Only privilege, which
creates the global role administrator for a role. However, if at least one administrator is specified during the
creation process, the MANAGE ROLES system privilege is not granted to the role and global role

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

853

administrators will be unable to manage the role. For this reason, it is recommended that role administrators
not be specified when creating a new role. They should be added after the fact. This ensures that every role
can be successfully managed by both role and global role administrators.
A role administrator can add or remove other role administrators from a role, including global role
administrators. Both role administrators and global role administrators can grant, revoke, and drop roles. A
role administrator does not require the MANAGE ROLES system privilege to administer a role.
By default, at least one role administrator or global role administrator with a login password must exist at all
times for each role. This minimum requirement is validated before you can remove the global role
administrator or role administrator from a role, or remove a role administrator's administrative rights on a
role. The minimum requirement is a configurable database option (MIN_ROLE_ADMINS).

Related Information
Adding a Role Administrator to an Existing User-Extended Role [page 854]
Removing a Role Administrator from a User-Extended Role [page 855]
Modifying a User-Extended Role Administrator's Administrative Rights [page 857]

5.17.2.4.14.1 Adding a Role Administrator to an Existing


User-Extended Role
Add a new role administrator to an existing user-extended role.

Prerequisites
Database Version

Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role being managed

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.

854

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users or roles currently granted to the role appears. Any user or role with Administrative only or
Administrative and role rights in the Grant Option column is a role administrator.
5. Click Grant.
6. Select one or more users or roles. Only roles to which you have administrative rights appear on the list.

Tip
Use Shift-click or Control-click to select multiple items.
7. Click OK to grant membership.
The selected users or roles appear with Role only rights (no administrative rights).
8. For each new administrator added, click in the Grant Options column, click the arrow, and select:
Grant Option

Description

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.14.2 Removing a Role Administrator from a UserExtended Role


Remove a role administrator from an existing user-extended role.

Prerequisites
Database Version

Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

855

Database Version

Role Administrator Privileges Required

SAP IQ 16.0

One of:

Administrative rights over the role being managed

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
By default, at least one role administrator or global role administrator with a login password must exist at all
times for each role. This minimum requirement is validated before you can remove the global role
administrator or role administrator from a role, or remove a role administrator's administrative rights on a
role. The minimum requirement is a configurable database option (MIN_ROLE_ADMINS).
If revoking membership in a role would result in a failure to meet the minimum number of role administrators
for the selected role, an error message appears, and the removal fails.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users or roles currently granted to the role appears. Any user or role with Administrative only or
Administrative and role rights in the Grant Option column is a role administrator.
5. Select an administrator to be removed.
6. Click Revoke.

Note
Revoke is unavailable if you do not have administrative rights to the selected role.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

856

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.4.14.3 Modifying a User-Extended Role


Administrator's Administrative Rights
Modify whether a role administrator can administer a role only or can also use the underlying system privileges
and roles of the role being administered.

Prerequisites
Database Version

Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role being managed

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users or roles currently granted to the role appears. Any user or role with Administrative only or
Administrative and role rights in the Grant Option column is a role administrator.
5. Select an administrator whose administrative rights are to be modified.
6. Click in the Grant Option column, click the arrow, and select the administrative rights to be granted.
Grant Option

Description

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

7. Click OK to update any changes to the database and close the page.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

857

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.15 Manage Global Role Administrators of a UserExtended Role


A global role administrator is any user granted the MANAGE ROLES system privilege. However, not all roles
can be managed by global role administrators.
When creating a new role, if you specify at least one role administrator, global role administrators will be
unable to manage the role. This is because the MANAGE ROLES system privilege is not automatically granted
to the role during creation.
For this reason, it is recommended that role administrators not be specified when creating a new role. They
should be added after the fact. This ensures that every role can be successfully managed by both role and
global role administrators.
By default, at least one role administrator or global role administrator with a login password must exist at all
times for each role. This minimum requirement is validated before you can remove the global role
administrator or role administrator from a role, or remove a role administrator's administrative rights on a
role. The minimum requirement is a configurable database option (MIN_ROLE_ADMINS).

Related Information
DBA User or Global Role Administrator Cannot Manage a User-Extended Role [page 858]
Adding the Global Role Administrator to a User-Extended Role [page 859]
Removing the Global Role Administrator from a User-Extended Role [page 860]

5.17.2.4.15.1 DBA User or Global Role Administrator Cannot


Manage a User-Extended Role
The Delete or Manage Grantee menu options are unavailable for a user-extended role.
These menu options are unavailable if the MANAGE ROLES system privilege has not been granted to the role
as a grantee, and the user has not been designated as a role administrator of the role.
To allow these users to manage the role, either:
Grant the MANAGE ROLES system privilege to the role as a grantee with Administrative only rights, or
Make the user a role administrator of the role.
The first option is the recommended solution as it allows any user with the MANAGE ROLES system privilege
to act as a global role administrator of the role, not just the DBA user.

858

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Note
SAP strongly recommends that role administrators not be specified when creating a new role. They should
be added after the fact. This ensures that all roles can be managed by both role and global role
administrators.

5.17.2.4.15.2 Adding the Global Role Administrator to a UserExtended Role


Add the global role administrator to an existing user-extended role.

Prerequisites
Database Version

Global Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

Administrative rights over the role being managed

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantee.

Note
The Manage Grantee option is unavailable if you do not have rights to manage the role.
5. Click Grant.
6. Select MANAGE ROLES and click OK.

Note
The MANAGE ROLES system privilege is not listed if you do not have administrative rights to the
privilege.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

859

7. Highlight MANAGE ROLES, click in the Grant Option column, and click the arrow. Select Administrative
only.

Caution
Selecting any other Grant Option results in an error, and the MANAGE ROLES system privilege is not
granted.
8. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.15.3 Removing the Global Role Administrator from a


User-Extended Role
Remove the global role administrator from an existing user-extended role.

Prerequisites
Database Version

Global Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

One of:

Administrative rights over the role being managed

MANAGE ROLES system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
If revoking membership in a role would result in a failure to meet the minimum number of role administrators
for the selected role, an error message appears, and the removal fails.

860

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantee.

Note
The Manage Grantee option is unavailable if you do not have rights to manage the role.
5. Select MANAGE ROLES and click Revoke.

Note
Revoke is unavailable if you do not have administrative rights to the selected system privilege.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.16 Generating User-Extended Role DDL Commands


Display the SQL data description language for creating a user-extended role. The SQL code can be a useful
reference and training tool.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

861

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view opens, showing the SQL code used to create the selected role-based user-extended roles.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.4.17 Viewing or Modifying User-Extended Role


Properties
View or change user-extended role properties such as password, login policy and database object
permissions.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

862

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 16.0

View any user-extended role property page none


Modify a password CHANGE PASSWORD system privilege
Modify a login policy, or refresh LDAP DN MANAGE ANY USER system privilege
Modify a user-extended role comment one of:

MANAGE ROLES system privilege

Administrative rights over the role begin commented

For privileges relating to user permissions, see Role-Based Database Object Permis
sions Privilege Summary [page 928]

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or edit the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Read-only)

Name of the user.

Enable Password

Allows the user to connect to the da


tabase with password security. Clear
ing this option disables the Password
and Confirm Password options. User
can log in without specifying a pass
word.

Change Password

Click to change the password for the


user.

Password

The new password for the user. Char


acters appear as asterisks.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

863

Page

Property

Description

Confirm password

Confirmation of the new password


entered. The contents of the two
fields must match exactly to proceed.

Password creation time (Read-only)

Date and time when the password


was created.

Change password on next login

Select to force the user to change the


password at the next login.

Login policy

Login policy for the user.

Last login time (Read-only)

Last time the user successfully log


ged in.

Failed login attempts

Number of times the user has tried to


log in with an incorrect password.

Locked (Read-only)

Indicates if the account is locked.


Valid values are:
false the account is unlocked
true account is locked because
the user has exceeded the al
lowed number of failed login at
tempts.

Permission

Unlock now

Select to unlock the account when


Locked is true.

Comment

Text field for adding optional com


ments.

See Role-Based Object Permissions on Users and Roles [page 904].

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

864

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.4.18 Changing a User-Extended Role Password


Change the password for another role-base user-extended role.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

CHANGE PASSWORD system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. On the General Properties page, type the new password in the Password and Confirm password fields.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

865

5.17.2.4.19 Forcing a User-Extended Role to Change their


Password
Force a role-based user-extended role to change their password the next time he or she logs in.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. On the General Properties page, select Require password change on next login.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

866

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.4.20 Unlocking a User-Extended Role Account


Unlock a locked role-based user-extended role account.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. On the General Properties page, click Unlock Now.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

867

5.17.2.4.21 Changing a User-Extended Role Login Policy


Assign a role-based user-extended role a different login policy.

Prerequisites
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click User-Extended Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. On the General Properties page, select a new login policy.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

868

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.4.22 Role-Based User-Extended Role Privilege


Summary
A list of the system privileges and object permissions required to complete the various role-based userextended role tasks.

Creating a User-Extended Role


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Create a role both the MANAGE ANY USER and MANAGE ROLES system privileges.
Grant a role during user-extended role creation one of:

Administrative rights over the role being granted (role administrator)

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

Grant a system privilege during user-extended role creation administrative rights


over the system privilege being granted

Deleting a User-Extended Role


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

Converting a User-Extended Role to a Role-Based User


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the role being converted

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

869

Adding and Removing Grantees to and from a User-Extended Role


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Changing Administrative Rights of a Grantee of a User-Extended Role


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Adding and Removing Underlying Roles to and from a User-Extended Role


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Enable the Manage Roles option one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Add an underlying system role MANAGE ROLES system privilege


Add an underlying user-defined or compatibility role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

Changing Administrative Rights on an Underlying Role of a User-Extended


Role
Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

870

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 16.0

Enable the Manage Roles option one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Add an underlying system role MANAGE ROLES system privilege


Add an underlying user-defined or compatibility role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

Adding and Removing System Privileges to and from a User-Extended Role


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the system privilege. Administrative rights on the role is not
required.

Changing Administrative Rights on a System Privileges Granted to a UserExtended Role


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the system privilege. Administrative rights on the role is not
required.

Viewing or Modifying User-Extended Role Options


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

View user-extended role options only none


Modify user-extended role options depending on the option being modified, one of:

SAP IQ Cockpit
Administer SAP IQ

SET ANY PUBLIC OPTION system privilege

SET ANY SECURITY OPTION system privilege

SET ANY SYSTEM OPTION system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

871

Managing Role Administrators of a User-Extended Role


Database Version

Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role being managed

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

Adding the Global Role Administrator to a User-Extended Role


Database Version

Global Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

Administrative rights over the role being managed

Removing the Global Role Administrator from a User-Extended Role


Database Version

Global Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

One of:

Administrative rights over the role being managed

MANAGE ROLES system privilege

Generating User-Extended Role DDL Commands


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

Viewing or Modifying User-Extended Role Properties


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

872

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 16.0

View any user-extended role property page none


Modify a password CHANGE PASSWORD system privilege
Modify a login policy, or refresh LDAP DN MANAGE ANY USER system privilege
Modify a user-extended role comment one of:

MANAGE ROLES system privilege

Administrative rights over the role begin commented

For privileges relating to user permissions, see Role-Based Database Object Permis
sions Privilege Summary [page 928]

Changing a User-Extended Role Password


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

CHANGE PASSWORD system privilege

Forcing a User-Extended Role Password Change


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

Unlocking a User-Extended Role Account


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

873

Changing a User-Extended Role Login Policy


Database Version

Role-Based User-Extended Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY USER system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

5.17.2.5 Standalone Roles


Add, change, and delete standalone roles.

Related Information
Creating a Standalone Role [page 875]
Deleting a Standalone Role [page 877]
Adding a Grantee to a Standalone Role [page 878]
Changing a Grantee's Administrative Rights on a Standalone Role [page 880]
Removing a Grantee from a Standalone Role [page 881]
Adding a Role to a Standalone Role [page 882]
Changing Administrative Rights on an Underlying Role of a Standalone Role [page 884]
Removing a Role from a Standalone Role [page 885]
Adding a System Privilege to a Standalone Role [page 886]
Changing Administrative Rights on a Privilege Granted to a Standalone Role [page 888]
Removing a System Privilege from a Standalone Role [page 889]
Manage Standalone Role Administrators [page 890]
Manage Global Role Administrators of a Standalone Role [page 894]
Generating Standalone Role DDL Commands [page 898]

874

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Viewing or Modifying Standalone Role Properties [page 899]


Role-Based Standalone Role Privilege Summary [page 900]

5.17.2.5.1 Creating a Standalone Role


Add a new standalone role to the database.

Prerequisites
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Create a role MANAGE ROLES system privilege


Grant a role during standalone role creation one of:

Administrative rights over the role being granted (role administrator)

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

Grant a system privilege during standalone creation administrative rights over the
system privilege being granted

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

875

Property

Description

Select a resource on which the user will be created

Select a system.

Note
If the selected system does not support the selected
security mode (role-based or authority-based), an er
ror message appears.
What do you want to name the new user?

Enter a unique user ID..

6. (Optional) On the Administrators page, select one or more administrators.

Note
SAP recommends that you do not select any role administrators when creating a new role; add them
once the creation process is complete. If at least one role administrator is specified during creation,
global role administrators will be unable to manage the role because the MANAGE ROLES system
privilege is not automatically granted to the role.
a. (Optional) If an administrator is selected, indicate whether the administrator is to be granted
membership in the role along with administrative rights (Administrative and role) or administrative
rights only (default).

Note
Only one privilege level can be defined for all selected administrators when specified during the
create process. However, the privilege level can be later modified.
7. (Optional) On the Roles page, highlight a role to be granted.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

When you grant a role to a user, user-extended role, or standalone role, unless otherwise noted, any
underlying system privileges of the role being granted are automatically inherited by the user, userextended role, or standalone role.
8. Repeat step 7 [page 876] to grant additional roles.
9. (Optional) On the System Privileges page, highlight a system privilege to be granted. Click in the Grant
Option column, click the arrow, and select the administrative rights to be granted.

876

Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Grant Option

Description

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

10. Repeat step 9 [page 876] to grant additional privileges.


11. (Optional) On the Comment page, enter a comment for this user.
12. Click Finish.

Related Information
Manage Standalone Role Administrators [page 890]
Manage Global Role Administrators of a Standalone Role [page 894]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.2 Deleting a Standalone Role


Delete a standalone role from the database.

Prerequisites
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role being deleted

MANAGE ROLES system privilege if the role being deleted has a global role admin
istrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.
The standalone role being deleted does not own any database objects and is not currently connected to
the database.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

877

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. In the Confirm Delete dialog box, click Revoke role permissions.
6. Click Yes to complete the deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.3 Adding a Grantee to a Standalone Role


Add a user or role as a member (grantee) of a standalone role. Grantee inherits all underlying system
privileges and roles of the standalone role.

Prerequisites
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

878

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users and roles currently granted to the role appears.
5. Click Grant.
6. Select one or more users or roles to become members.

Tip
Use Shift-click or Control-click to select multiple items.
7. Click OK.
The new grantees appear with Role only rights (no administrative rights)..
8. (Optional) To modify the administrative rights of a role, highlight a role. Click in the Grant Options column,
click the arrow, and select the administrative rights to be granted.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

9. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

879

5.17.2.5.4 Changing a Grantee's Administrative Rights on a


Standalone Role
Changes a member's (grantee's) ability to manage a standalone role.

Prerequisites
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users and roles currently granted to the role appears.
5. Highlight a user or role to be modified. Click in the Grant Option column, click the arrow, and select the
administrative rights to be granted.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

6. Click OK to update any changes to the database and close the page.

880

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.5 Removing a Grantee from a Standalone Role


Remove a user or role as a member (grantee) of a standalone role. Grantees lose the ability to use any
underlying system privileges or roles of the standalone role.

Prerequisites
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
By default, a minimum of one role administrator (or global role administrator with a login password) for each
role must exist at all times. This minimum requirement is validated before you can remove a member who is a
role administrator from a role.
If revoking membership in a role would result in a failure to meet the minimum number of role administrators
for the selected role, an error message appears, and the removal fails.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

881

4. Select Manage Grantees.


A list of users and roles currently granted to the role appears.
5. Highlight a user or role to be removed from the standalone role and click Revoke.
6. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.6 Adding a Role to a Standalone Role


Add a role as an underlying role of a standalone role. Members of the standalone role inherit all system
privileges and roles of the underlying role, but do not become members of the underlying role. Members of the
underlying role do not become members of the standalone role.

Prerequisites
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Enable the Manage Roles option one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Add an underlying system role MANAGE ROLES system privilege


Add an underlying user-defined or compatibility role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

882

IQ Servers

Security

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Role-Based , and then click Standalone Roles.

SAP IQ Cockpit
Administer SAP IQ

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Roles.
A list of underlying roles currently granted to the standalone role appears.
5. Click Grant.
6. Select one or more underlying roles to grant.

Tip
Use Shift-click or Control-click to select multiple items.
7. Click OK.
Newly granted underlying roles appear with Role only rights (no administrative rights).
8. (Optional) (For compatibility and user-defined roles only) To modify the administrative rights of an
underlying role, highlight a role. Click in the Grant Options column, click the arrow, and select the
administrative rights to be granted.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

9. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

883

5.17.2.5.7 Changing Administrative Rights on an Underlying


Role of a Standalone Role
Changes a member's (grantee's) ability to manage an underlying role of a standalone role.

Prerequisites
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Enable the Manage Roles option one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Add an underlying system role MANAGE ROLES system privilege


Add an underlying user-defined or compatibility role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Roles.
A list of underlying roles currently granted to the standalone role appears.
5. Highlight a role to be modified. Click in the Grant Option column, click the arrow, and select the
administrative rights to be granted.

Note
Administrative rights cannot be modified on underlying roles which are system roles.

884

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

6. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.8 Removing a Role from a Standalone Role


Remove an underlying role from a standalone role. Grantees of the standalone role lose the ability to use any
system privileges of the underlying role or administer the underlying role.

Prerequisites
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Enable the Manage Roles option one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Add an underlying system role MANAGE ROLES system privilege


Add an underlying user-defined or compatibility role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

885

Context
By default, a minimum of one role administrator (or global role administrator with a login password) for each
role must exist at all times. This minimum requirement is validated before you can remove a member who is a
role administrator from a role.
If removing membership in a role would result in a failure to meet the minimum number of role administrators
for the selected role, an error message appears, and the task fails.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Roles.
A list of underlying roles currently granted to the standalone role appears.
5. Highlight a role to be removed and click Revoke.
6. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.9 Adding a System Privilege to a Standalone Role


Add a system privilege to a standalone role.

Prerequisites
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the system privilege. Administrative rights on the role is not
required.

886

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage System Privileges.
A list of system privileges currently granted to the standalone role appears.
5. Click Grant.
6. Select one or more system privileges to grant.

Tip
Use Shift-click or Control-click to select multiple items.
7. Click OK to grant the system privilege.
The selected system privileges appear granted with Privilege only rights (no administrative rights).
8. (Optional) To modify the administrative rights of a system privilege, highlight a system privilege. Click in
the Grant Options column, click the arrow, and select the administrative rights to be granted.
Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

887

5.17.2.5.10 Changing Administrative Rights on a Privilege


Granted to a Standalone Role
Change the administrative rights on a system privilege granted to a standalone role.

Prerequisites
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the system privilege. Administrative rights on the role is not
required.

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage System Privileges.
A list of system privileges currently granted to the standalone role appears.
5. Highlight a system privilege to be modified. Click in the Grant Option column, click the arrow, and select
the administrative rights to be granted.
Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

6. Click OK to update any changes to the database and close the page.

888

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.11 Removing a System Privilege from a Standalone


Role
Remove a system privilege from a standalone role.

Prerequisites
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the system privilege. Administrative rights on the role is not
required.

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage System Privileges.
A list of system privileges currently granted to the standalone role appears.
5. Highlight a system privilege and click Revoke.

Note
Revoke is unavailable if you do not have administrative rights to the selected system privilege.
6. Click OK to update any changes to the database and close the page.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

889

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.12 Manage Standalone Role Administrators


Role administrators are responsible for granting and revoking standalone roles to users and other roles. You
can add and remove role administrators as needed.
There are two types of role administrators:
Role administrator users or roles designated to administer a role.
Global role administrator any user granted the MANAGE ROLES system privilege.
When you create a new role, you can appoint one or more role administrators to manage the role (grant and
revoke membership in the role). If no role administrator is specified during the creation process, the MANAGE
ROLES system privilege is automatically granted to the role with the Administrative Only privilege, which
creates the global role administrator for a role. However, if at least one administrator is specified during the
creation process, the MANAGE ROLES system privilege is not granted to the role and global role
administrators will be unable to manage the role. For this reason, it is recommended that role administrators
not be specified when creating a new role. They should be added after the fact. This ensures that every role
can be successfully managed by both role and global role administrators.
A role administrator can add or remove other role administrators from a role, including global role
administrators. Both role administrators and global role administrators can grant, revoke, and drop roles. A
role administrator does not require the MANAGE ROLES system privilege to administer a role.
By default, at least one role administrator or global role administrator with a login password must exist at all
times for each role. This minimum requirement is validated before you can remove the global role
administrator or role administrator from a role, or remove a role administrator's administrative rights on a
role. The minimum requirement is a configurable database option (MIN_ROLE_ADMINS).

Related Information
Adding a Role Administrator to an Existing Standalone Role [page 891]
Removing a Role Administrator from a Standalone Role [page 892]
Modifying a Standalone Role Administrator's Administrative Rights [page 893]

890

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.5.12.1 Adding a Role Administrator to an Existing


Standalone Role
Add a new role administrator to an existing user-extended role.

Prerequisites
Database Version

Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role being managed

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users or roles currently granted to the role appears. Any user or role with Administrative only or
Administrative and role rights in the Grant Option column is a role administrator.
5. Click Grant.
6. Select one or more users or roles. Only roles to which you have administrative rights appear on the list.

Tip
Use Shift-click or Control-click to select multiple users or roles.
7. Click OK to grant membership.
The selected users or roles appear with Role only rights (no administrative rights).
8. For each new administrator added, click in the Grant Options column, click the arrow, and select:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

891

Grant Option

Description

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.12.2 Removing a Role Administrator from a


Standalone Role
Remove a role administrator from an existing user-extended role.

Prerequisites
Database Version

Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role being managed

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
By default, at least one role administrator or global role administrator with a login password must exist at all
times for each role. This minimum requirement is validated before you can remove the global role
administrator or role administrator from a role, or remove a role administrator's administrative rights on a
role. The minimum requirement is a configurable database option (MIN_ROLE_ADMINS).
If revoking membership in a role would result in a failure to meet the minimum number of role administrators
for the selected role, an error message appears, and the removal fails.

892

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users or roles currently granted to the role appears. Any user or role with Administrative only or
Administrative and role rights in the Grant Option column is a role administrator.
5. Select an administrator to be removed.
6. Click Revoke.

Note
Revoke is unavailable if you do not have administrative rights to the selected role.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.12.3 Modifying a Standalone Role Administrator's


Administrative Rights
Modify whether a role administrator can administer a role only or is also granted the underlying system
privileges of the role being administered

Prerequisites
Database Version

Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role being managed

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

The SAP IQ system is running, registered, and authenticated.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

893

The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users or roles currently granted to the role appears. Any user or role with Administrative only or
Administrative and role rights in the Grant Option column is a role administrator.
5. Select an administrator whose administrative rights are to be modified.
6. Click in the Grant Option column, click the arrow, and select the administrative rights to be granted.
Grant Option

Description

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.13 Manage Global Role Administrators of a


Standalone Role
A global role administrator is any user granted the MANAGE ROLES system privilege. However, not all roles
can be managed by global role administrators.
When creating a new role, if you specify at least one role administrator, global role administrators will be
unable to manage the role. This is because the MANAGE ROLES system privilege is not automatically granted
to the role during creation.
For this reason, it is recommended that role administrators not be specified when creating a new role. They
should be added after the fact. This ensures that every role can be successfully managed by both role and
global role administrators.
By default, at least one role administrator or global role administrator with a login password must exist at all
times for each role. This minimum requirement is validated before you can remove the global role

894

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

administrator or role administrator from a role, or remove a role administrator's administrative rights on a
role. The minimum requirement is a configurable database option (MIN_ROLE_ADMINS).

Related Information
DBA User or Global Role Administrator Cannot Manage a Standalone Role [page 895]
Adding the Global Role Administrator to a Standalone Role [page 896]
Removing the Global Role Administrator from a Standalone Role [page 897]

5.17.2.5.13.1 DBA User or Global Role Administrator Cannot


Manage a Standalone Role
The Delete or Manage Grantee menu options are unavailable for a standalone role.
These menu options are unavailable if the MANAGE ROLES system privilege has not been granted to the role
as a grantee, and the user has not been designated as a role administrator of the role.
To allow these users to manage the role, either:
Grant the MANAGE ROLES system privilege to the role as a grantee with Administrative only rights, or
Make the user a role administrator of the role.
The first option is the recommended solution as it allows any user with the MANAGE ROLES system privilege
to act as a global role administrator of the role, not just the DBA user.

Note
SAP strongly recommends that role administrators not be specified when creating a new role. They should
be added after the fact. This ensures that all roles can be managed by both role and global role
administrators.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

895

5.17.2.5.13.2 Adding the Global Role Administrator to a


Standalone Role
Add the global role administrator to an existing standalone role.

Prerequisites
Database Version

Global Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

Administrative rights over the role being managed

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantee.

Note
The Manage Grantee option is unavailable if you do not have rights to manage the role.
5. Click Grant.
6. Select MANAGE ROLES and click OK.

Note
The MANAGE ROLES system privilege is not listed if you do not have administrative rights to the
privilege.
7. Highlight MANAGE ROLES, click in the Privileges column, and click the arrow. Select Administrative only.

Caution
Selecting any other privilege combination results in an error, and the privilege is not granted.
8. Click OK to update any changes to the database and close the page.

896

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.13.3 Removing the Global Role Administrator from a


Standalone Role
Remove the global role administrator from an existing standalone role.

Prerequisites
Database Version

Global Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

One of:

Administrative rights over the role being managed

MANAGE ROLES system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
If revoking membership in a role would result in a failure to meet the minimum number of role administrators
for the selected role, an error message appears, and the removal fails.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantee.

Note
The Manage Grantee option is unavailable if you do not have rights to manage the role.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

897

5. Select MANAGE ROLES and click Revoke.

Note
Revoke is unavailable if you do not have administrative rights to the selected system privilege.
The MANAGE ROLES system privilege can also be revoked using the Manage System Privileges
menu option. However, this revoke does not remove the global role administrator from the role.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.14 Generating Standalone Role DDL Commands


Display the SQL data description language for creating a standalone role. The SQL code can be a useful
reference and training tool.

Prerequisites
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.

898

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

4. Select Generate DDL.


The DDL view opens, showing the SQL code used to create the selected role-based standalone roles.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.15 Viewing or Modifying Standalone Role Properties


View or change standalone role comments and database object permissions.

Prerequisites
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not Supported

SAP IQ 16.0

View any standalone role property page none


Modify a standalone role comment one of:

Administrative rights over the role being commented

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

For privileges relating to user permissions, see Role-Based Database Object Permis
sions Privilege Summary [page 928]

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Standalone Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or edit the properties.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

899

When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Read-only)

Name of the user.

Comment

Text field for adding optional com


ments.
See Role-Based Object Permissions

Permission

on Users and Roles [page 904].

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.5.16 Role-Based Standalone Role Privilege Summary


A list of the system privileges and object permissions required to complete the various role-based standalone
role tasks.

Creating a Standalone Role


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Create a role MANAGE ROLES system privilege


Grant a role during standalone role creation one of:

Administrative rights over the role being granted (role administrator)

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

Grant a system privilege during standalone creation administrative rights over the
system privilege being granted

900

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Deleting a Standalone Role


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role being deleted

MANAGE ROLES system privilege if the role being deleted has a global role admin
istrator

Adding and Removing Grantees to and from a Standalone Role


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Changing a Grantee's Administrative Rights on a User-Extended Role


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Adding and Removing Underlying Roles to and from a Standalone Role


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

901

Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 16.0

Enable the Manage Roles option one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Add an underlying system role MANAGE ROLES system privilege


Add an underlying user-defined or compatibility role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

Changing Administrative Rights on an Underlying Role of a Standalone Role


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Enable the Manage Roles option one of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

Add an underlying system role MANAGE ROLES system privilege


Add an underlying user-defined or compatibility role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

Adding and Removing System Privileges to and from a Standalone Role


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the system privilege. Administrative rights on the role is not
required.

902

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Changing Administrative Rights on a System Privileges Granted to a


Standalone Role
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the system privilege. Administrative rights on the role is not
required.

Managing Role Administrators of a Standalone Role


Database Version

Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role being managed

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

Adding the Global Role Administrator to a Standalone Role


Database Version

Global Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

Administrative rights over the role being managed

Removing the Global Role Administrator from a Standalone Role


Database Version

Global Role Administrator Privileges Required

SAP IQ 15.3 and 15.4

Not supported.

SAP IQ 16.0

One of:

SAP IQ Cockpit
Administer SAP IQ

Administrative rights over the role being managed

MANAGE ROLES system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

903

Generating Standalone Role DDL Commands


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

Viewing or Modifying User-Extended Role Properties


Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not Supported

SAP IQ 16.0

View any standalone role property page none


Modify a standalone role comment one of:

Administrative rights over the role being commented

MANAGE ROLES system privilege if the role being granted has a global role admin
istrator

For privileges relating to user permissions, see Role-Based Database Object Permis
sions Privilege Summary [page 928]

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

5.17.2.6 Role-Based Object Permissions on Users and Roles


Permissions on database objects can be granted and revoked to role-based users, user-extended roles, and
standalone roles, with or without administrative rights

904

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Role-Based Table or Column Permissions [page 905]
Role-Based View or Materialized View Permissions [page 913]
Role-Based Procedure or Function Permission [page 921]
Role-Based Dbspace Permission [page 924]
Role-Based Sequence Generator Permission [page 926]
Role-Based Database Object Permissions Privilege Summary [page 928]

5.17.2.6.1 Role-Based Table or Column Permissions


Permissions on tables and columns can be granted and revoked to role-based users and roles, with or without
administrative rights.

Related Information
About the User or Role Table Permissions List [page 905]
Following the User or Role Table Permissions Grant Trail [page 907]
Adding Permissions on a Table or Column to a User or Role [page 907]
Removing Permissions on a Table or Column from a User or Role [page 909]
Adding Administrative Rights on a Granted Table or Column Permission to a User or Role [page 911]
Removing Administrative Rights Only on a Table or Column Permission from a User or Role [page 912]

5.17.2.6.1.1 About the User or Role Table Permissions List


The Tables permissions list displays permission details the tables and column directly granted to a user, userextended role, or standalone role.
There are several table object permissions, which can be granted with or with out administrative rights. Some
permissions can be granted at the table level only, while others can be granted at either the table or column
level.
SELECT table or column level
INSERT table level only
DELETE table level only
UPDATE table or column level
ALTER table level only
REFERENCE table or column level
LOAD table level only
TRUNCATE table level only

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

905

You can grant object permissions in several ways:


You own the object.
You are granted the MANAGE ANY OBJECT PRIVILEGE system privilege.
You are indirectly granted specific permissions through membership in a role to which permissions are
directly or indirectly granted.
You are directly granted specific permissions.
Users or roles with object ownership or the MANAGE ANY OBJECT PRIVILEGE system privilege are
automatically granted all possible object permissions with administrative rights.
You can grant object permissions with or without administrative rights. The grantee can perform authorized
tasks requiring the permission, but cannot in turn grant the permission to another user or role when granted
without administrative rights. The grantee can do both when granted with administrative rights (With grant
option).
The permissions list only lists those tables or columns object permissions granted directly to the selected user
or role. The list indicates the table and column the permission is granted on, by who (grantor), and the
permissions and their corresponding administrative rights. The permissions list does not list object
permissions obtained through ownership, the MANAGE ANY OBJECT PRIVILEGE system privilege, or role
membership.
For each table, permissions granted to all columns on the table are listed first (all), followed by each column,
sorted alphabetically by column name.
All members of the role inherit permissions granted to a role, including administrative rights. The role, not the
users indirectly granted the permissions through inheritance, appears on the permissions list.
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.
If multiple permissions are granted, you can revoke some or all of the permissions. However, if you revoke a
permission granted administrative rights, and the grantee has granted the permission to other users, who in
turn have granted it to other users, and so on, every grantee in the chain who has received the permission
indirectly, with or without administrative rights, also has their permission revoked. For example, UserA is
granted the SELECT permission with the With grant option. UserA grants SELECT to UserB with the
With grant option. UserB grants SELECT to UserC and UserD without administrative rights and to UserE
with administrative rights. When you revoke the SELECT permission from UserA, it is also revoked for UserB,
UserC, UserD and UserE.
Permissions can be granted on the same table or column, by multiple grantors, resulting in the same table or
column appearing multiple times on the list. If the same permission is granted to the same table or column,
with and without administrative rights, the grant with the administrative right takes precedence.
For example, the user is granted the SELECT permission by both DBA and Alex, with different administrative
rights. When the same permission is granted with different administrative rights, the higher administrative
right takes precedence.
When you revoke a permission granted multiple times, the permission is revoked from all instances, regardless
of administrative rights. For example, Manager1 grants User2 INSERT with administrative rights. User1 also

906

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

grants INSERT to User2, without administrative rights. Both instances of INSERT are revoked for User2,
regardless of which instance of INSERT is revoked.

5.17.2.6.1.2 Following the User or Role Table Permissions


Grant Trail
Before revoking a grantee's permission, you must identify grantees directly or indirectly granted the
permission from the original grantee.
The grant chain traces how a grantee has in turn granted a permission to other grantees.
When you view the object permissions granted to a specific user, user-extended role, or standalone role, you
see only the permissions granted. You do not see who the user or role has in turn granted the permissions to.
To determine who the selected user or role has in turn granted an object permission to, note the table, column
name (if applicable), and the permission to be traced, then display the permissions list for the table object
being traced. See Following the Table Permissions Grant Trail.

Related Information
Following the Table Permissions Grant Trail [page 506]

5.17.2.6.1.3 Adding Permissions on a Table or Column to a


User or Role
Add permissions on a table or column to a user, user-extended role, or standalone role.

Prerequisites
Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

907

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Roles, or Standalone Roles.

Security

Role-Based , and then click Users, User-Extended

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions, then click Grant in the right pane.
6. On the Welcome page, based on the table level to which permission is being granted, select Tables or
Table columns.
7. Do one of:
Choice

Action

If Tables was se
lected

Select the table to apply permissions to. Click the box in the header row to select all available
tables.

If Table Column
was selected

Click the Table dropdown arrow and select the table containing the column to which per
missions are to be applied.
Select one or more columns to apply permissions to. Click the box in the header row to se
lect all available columns on the table.

8. On the Permissions page, select one or more permissions. Click the box in the header row to select all
available permissions.
9. (Optional) Click With grant option to grant the selected permissions administrative rights.

Note
The With grant option option applies to all selected permissions. You cannot apply the With
grant option option to individual permissions.
10. Click Finish.
11. (Optional) To view details on the permissions currently granted on a table or column, expand the table
name in the Name column.
12. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

908

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.6.1.4 Removing Permissions on a Table or Column


from a User or Role
Remove permissions on a table or column from a user, user-extended role, or standalone role.

Prerequisites
Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.
If multiple permissions are granted, you can revoke some or all of the permissions. However, if you revoke a
permission granted administrative rights, and the grantee has granted the permission to other users, who in
turn have granted it to other users, and so on, every grantee in the chain who has received the permission
indirectly, with or without administrative rights, also has their permission revoked. For example, UserA is
granted the SELECT permission with the With grant option. UserA grants SELECT to UserB with the
With grant option. UserB grants SELECT to UserC and UserD without administrative rights and to UserE
with administrative rights. When you revoke the SELECT permission from UserA, it is also revoked for UserB,
UserC, UserD and UserE.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Roles, or Standalone Roles.

SAP IQ Cockpit
Administer SAP IQ

Security

Role-Based , and then click Users, User-Extended

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

909

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions.
6. In the right pane, expand the table containing the permission to be removed and then highlight the row
containing the specific permission to be removed.

Note
If the permission appears on the list multiple times with different grantors, with or without
administrative rights, it does not matter which instance is selected.
7. Click Revoke.
A list of permissions currently granted (regardless of administrative rights) appears.
8. Select one or more permissions to revoke, or click the box in the header row to select all available
permissions.

Caution
Revoking permissions may result in unexpected revocation from other users, roles, or groups. See
Following the User or Role Table Permission Grant Trail.
9. Click Finish.
10. (Optional) To view details on the permissions currently granted on a table or column, expand the table
name in the Name column.
11. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

910

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.6.1.5 Adding Administrative Rights on a Granted Table


or Column Permission to a User or Role
Add user or role administrative rights only to a granted table or column permission.

Prerequisites
Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Roles, or Standalone Roles.

Security

Role-Based , and then click Users, User-Extended

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions, then click Grant in the right pane.
6. On the Welcome page, based on the table level of the existing permission to be granted administrative
rights, select Tables or Table columns.
7. Do one of:
Choice

Action

If Tables was se
lected

Select the table containing the existing permission to which apply administrative rights are to
be applied.

If Table Column
was selected

Click the Table dropdown arrow and select the table containing the column to which ad
ministrative rights are to be applied.
Select the columns containing the existing permission to which apply administrative rights
are to be applied.

8. On the Permissions page, select the granted permissions to which administrative rights are to be granted.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

911

9. Click With grant option to grant the selected permissions administrative rights.

Note
The With grant option option applies to all selected permissions. You cannot apply the With
grant option option to individual permissions.
10. Click Finish.
11. (Optional) To view details on the permissions currently granted on a table or column, expand the table
name in the Name column.
12. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.6.1.6 Removing Administrative Rights Only on a Table


or Column Permission from a User or Role
Remove administrative rights only from a permission granted to a user, user-extended role, or standalone role,
on a table or column.

Prerequisites
Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports role-based security.
You are logged in as the original grantor of the permission with administrative rights to be removed.

Context
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object

912

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Roles, or Standalone Roles.

Security

Role-Based , and then click Users, User-Extended

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions, then click Grant in the right pane.
6. On the Welcome page, based on the table level of the permission to be regranted, select Tables or Table
columns.
7. On the Permissions page, select the permissions from which administrative rights are being revoked.
8. Click Finish.
9. (Optional) To view details on the permissions currently granted on a table or column, expand the table
name in the Name column.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.6.2 Role-Based View or Materialized View Permissions


Grant permissions on a view or materialized view to a user, user-extended role, or standalone role.

Related Information
About the User or Role View Permissions List [page 914]
Following the User or Role View Permission List [page 915]
Adding Permissions on a View or Materialized View to a User or Role [page 916]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

913

Removing Permissions on a View or Materialized View from a User or Role [page 917]
Adding Administrative Rights to a Granted View Permission to a User or Role [page 919]
Removing Administrative Rights Only on a View or Materialized Permission from a User or Role [page 920]

5.17.2.6.2.1 About the User or Role View Permissions List


The Views permissions list displays permission details the tables and column directly granted to a user, userextended role, or standalone role.
There are four object permissions for views or materialized views, which you can grant with or with out
administrative rights:
SELECT
INSERT
DELETE
UPDATE
You can grant object permissions in several ways:
You own the object.
You are granted the MANAGE ANY OBJECT PRIVILEGE system privilege.
You are indirectly granted specific permissions through membership in a role to which permissions are
directly or indirectly granted.
You are directly granted specific permissions.
Users or roles with object ownership or the MANAGE ANY OBJECT PRIVILEGE system privilege are
automatically granted all possible object permissions with administrative rights.
You can grant object permissions with or without administrative rights. The grantee can perform authorized
tasks requiring the permission, but cannot in turn grant the permission to another user or role when granted
without administrative rights. The grantee can do both when granted with administrative rights (With grant
option).
The permissions list only lists those view and materialized view object permissions granted directly to the
selected user or role. The list indicates the view or materialized view the permission is granted on, by who
(grantor), and the permissions and their corresponding administrative rights. The permissions list does not list
object permissions obtained through ownership, the MANAGE ANY SYSTEM OBJECT system privilege, or role
membership.
The permissions list is sorted alphabetically by Grantor.
All members of the role inherit permissions granted to a role, including administrative rights. The role, not the
users indirectly granted the permissions through inheritance, appears on the permissions list.
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.

914

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

If multiple permissions are granted, you can revoke some or all of the permissions. However, if you revoke a
permission granted administrative rights, and the grantee has granted the permission to other users, who in
turn have granted it to other users, and so on, every grantee in the chain who has received the permission
indirectly, with or without administrative rights, also has their permission revoked. For example, UserA is
granted the SELECT permission with the With grant option. UserA grants SELECT to UserB with the
With grant option. UserB grants SELECT to UserC and UserD without administrative rights and to UserE
with administrative rights. When you revoke the SELECT permission from UserA, it is also revoked for UserB,
UserC, UserD and UserE.
Permissions can be granted on the same view or materialized view, by multiple grantors, resulting in the same
view or materialized view appearing multiple times on the list. If the same permission is granted to the same
view or materialized view, with and without administrative rights, the grant with the administrative right takes
precedence.
When you revoke a permission granted multiple times, the permission is revoked from all instances, regardless
of administrative rights. For example, Manager1 grants User2 INSERT with administrative rights. User1 also
grants INSERT to User2, without administrative rights. Both instances of INSERT are revoked for User2,
regardless of which instance of INSERT is revoked.

5.17.2.6.2.2 Following the User or Role View Permission List


Before revoking a grantee's permission, you need to identify grantees directly or indirectly granted the
permission from the original grantee.
The grant chain traces how a grantee has in turn granted a permission to other grantees.
When you view the object permissions granted to a specific user, user-extended role, or standalone role, you
see only the permissions granted. You do not see who the user or role has in turn granted the permissions to.
To determine who the selected user or role has in turn granted an object permission to, note the table, column
name (if applicable), and the permission to be traced, then display the permissions list for the table object
being traced. See Following the View Permissions Grant Trail or Following the Materialized View Permissions
Grant Trail.

Related Information
Following the View Permission Grant Trail [page 609]
Following the Materialized View Permission Trail [page 653]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

915

5.17.2.6.2.3 Adding Permissions on a View or Materialized


View to a User or Role
Add permissions on a view or materialized view to a user, user-extended role, or standalone role.

Prerequisites
Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Roles, or Standalone Roles.

Security

Role-Based , and then click Users, User-Extended

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions, then click Grant in the right pane.
6. On the Welcome page, select Views.
7. On the Objects page, select the view or materialized view on which the permission is being granted.
8. On the Permissions page, select one or more permissions. Click the box in the header row to select all
available permissions.
9. (Optional) Click With grant option to grant the selected permissions administrative rights.

Note
The With grant option option applies to all selected permissions. You cannot apply the With
grant option option to individual permissions.
10. Click Finish.

916

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

11. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.6.2.4 Removing Permissions on a View or Materialized


View from a User or Role
Remove permissions from a view or materialized view to a user, user-extended role, or standalone role.

Prerequisites
Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports role-based security.

Context
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.
If multiple permissions are granted, you can revoke some or all of the permissions. However, if you revoke a
permission granted administrative rights, and the grantee has granted the permission to other users, who in
turn have granted it to other users, and so on, every grantee in the chain who has received the permission
indirectly, with or without administrative rights, also has their permission revoked. For example, UserA is
granted the SELECT permission with the With grant option. UserA grants SELECT to UserB with the

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

917

With grant option. UserB grants SELECT to UserC and UserD without administrative rights and to UserE
with administrative rights. When you revoke the SELECT permission from UserA, it is also revoked for UserB,
UserC, UserD and UserE.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Roles, or Standalone Roles.

Security

Role-Based , and then click Users, User-Extended

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions.
6. In the right pane, select Views.
A list of permissions currently granted appears.
7. In the right pane, select the view or materialized view containing the permission to be revoked and click
Revoke.
A list of permissions currently granted (regardless of administrative rights) appears.
8. In the right pane, select the view or materialized view containing the permission to be revoked and click
Revoke.
A list of permissions currently granted (regardless of administrative rights) appears.
9. Select one or more permissions to revoke, or click the box in the header row to select all available
permissions.

Caution
Revoking permissions may result in unexpected revocation from other users, roles, or groups. See
Following the User or Role View Permission Grant Trail.
10. Click Finish.
11. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

918

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.6.2.5 Adding Administrative Rights to a Granted View


Permission to a User or Role
Add administrative rights only to a granted view or materialized view permission.

Prerequisites
Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Roles, or Standalone Roles.

Security

Role-Based , and then click Users, User-Extended

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions, then click Grant in the right pane.
6. On the Welcome page, select Views.
7. On the Objects page, select the view or materialized view on which the existing permission to be granted
administrative rights resides.
8. On the Permissions page, select the permissions to which administrative rights are to be granted.
9. Click With grant option to grant the selected permissions administrative rights.

Note
The With grant option option applies to all selected permissions. You cannot apply the With
grant option option to individual permissions.
10. Click Finish.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

919

11. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.6.2.6 Removing Administrative Rights Only on a View


or Materialized Permission from a User or Role
Remove administrative rights only from a permission granted to a user, user-extended role, or standalone role
on a view or materialized view.

Prerequisites
Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected SAP IQ system supports role-based security.
You are logged in as the original grantor of the permission with administrative rights to be removed.

Context
The REVOKE command applies to the database object permission itself, not to any administrative right
granted on the permission. Therefore, to remove the administrative right only and leave the database object
permission intact, do not click Revoke. Rather, regrant the specific permission without administrative rights.
Only the original grantor can remove the administrative rights only from a granted permission. If another
grantor regrants the same permission without administrative rights, a new permission without administrative
rights is granted, but the original permission with administrative rights remains and takes precedence over any
other non-administrative grants of the same permission to the same user or role.

920

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Roles, or Standalone Roles.

Security

Role-Based , and then click Users, User-Extended

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions, then click Grant in the right pane.
6. On the Welcome page, select Views.
7. On the Objects page, select the view or materialized view on which the administrative rights on a
permissible are being removed.
8. On the Permissions page, select the permissions from which administrative rights are being revoked.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.6.3 Role-Based Procedure or Function Permission


Grant and revoke execute permission on a function, procedure, dbspace, or sequence generator for a user,
user-extended role, or standalone role.

Related Information
Adding EXECUTE Permission to a User or Role [page 922]
Removing EXECUTE Permission from a User or Role [page 923]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

921

5.17.2.6.3.1 Adding EXECUTE Permission to a User or Role


Add execute permission on a function or procedure to a user, user-extended role, or standalone role.

Prerequisites
Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Roles, or Standalone Roles.

Security

Role-Based , and then click Users, User-Extended

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions, then click Grant in the right pane.
6. On the Welcome page, select Procedures or Functions.
7. On the Objects page, select one or more objects to grant execute permission to.

Tip
Use Shift-click or Control-click to select multiple items.
8. On the Permissions page, select Execute.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

922

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.6.3.2 Removing EXECUTE Permission from a User or


Role
Remove execute permission on a function or procedure to a user, user-extended role, or standalone role.

Prerequisites
Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Roles, or Standalone Roles.

Security

Role-Based , and then click Users, User-Extended

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions.
6. In the right pane, select Procedures or Functions from the list.
A list of permissions currently granted appears.
7. In the right pane, highlight the permission to be revoked and click Revoke.
8. At the confirmation prompt, click Yes.
9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

923

5.17.2.6.4 Role-Based Dbspace Permission


Grant and revoke create permission on a dbspace for a user, user-extended role, or standalone role.

Related Information
Adding CREATE Permission to a User or Role [page 924]
Removing CREATE Permission to User or Role [page 925]

5.17.2.6.4.1 Adding CREATE Permission to a User or Role


Add create permission on a dbspace to a user, user-extended role, or standalone role.

Prerequisites
Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Roles, or Standalone Roles.

Security

Role-Based , and then click Users, User-Extended

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions, then click Grant in the right pane.
6. On the Welcome page, select Dbspaces.
7. On the Objects page, select one or more objects to grant create permission to.

924

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Tip
Use Shift-click or Control-click to select multiple items.
8. On the Permissions page, select Create.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.6.4.2 Removing CREATE Permission to User or Role


Remove create permission on a dbspace to a user, user-extended role, or standalone role.

Prerequisites
Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Roles, or Standalone Roles.

Security

Role-Based , and then click Users, User-Extended

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions.
6. In the right pane, select Dbspaces from the list.
A list of permissions currently granted appears.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

925

7. In the right pane, highlight the permission to be revoked and click Revoke.
8. At the confirmation prompt, click Yes.
9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.6.5 Role-Based Sequence Generator Permission


Grant and revoke usage permission on a sequence generator for a user, user-extended role, or standalone
role.

Related Information
Adding USAGE Permission to a User or Role [page 926]
Removing USAGE Permission from a User or Role [page 927]

5.17.2.6.5.1 Adding USAGE Permission to a User or Role


Add usage permission on a sequence generator to a user, user-extended role, or standalone role.

Prerequisites
Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the sequence generator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

926

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Roles, or Standalone Roles.

Security

Role-Based , and then click Users, User-Extended

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions, then click Grant in the right pane.
6. On the Welcome page, select Sequence Generators.
7. On the Objects page, select one or more objects to grant usage permission to.

Tip
Use Shift-click or Control-click to select multiple items.
8. On the Permissions page, select Usage.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.6.5.2 Removing USAGE Permission from a User or


Role
Remove usage permission on a sequence generator from a user, user-extended role, or standalone role.

Prerequisites
Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

SAP IQ Cockpit
Administer SAP IQ

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the sequence generator

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

927

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand IQ Servers
Roles, or Standalone Roles.

Security

Role-Based , and then click Users, User-Extended

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Permissions.
6. In the right pane, select Sequence Generators from the list.
A list of permissions currently granted appears.
7. In the right pane, highlight the permission to be revoked and click Revoke.
8. At the confirmation prompt, click Yes.
9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.6.6 Role-Based Database Object Permissions Privilege


Summary
A list of the system privileges and object permissions required to complete the various role-based user, userextended role, or standalone role tasks relating to database objects.

Grant or Revoke Permissions on a Table or Column


Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

928

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Role-Based Database Object Privileges Required

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

Modify Administrative Permissions on a Table or Column


Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

Grant or Revoke Permissions on a View or Materialized View


Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights (with grant option) to the permission

You own the database object

Modify Administrative Permissions on a View or Materialized View


Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

SAP IQ Cockpit
Administer SAP IQ

MANAGE ANY OBJECT PRIVILEGE system privilege

You have administrative rights to the permission being modified

You own the database object

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

929

Grant or Revoke Permissions on a Function or Procedure


Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

Grant or Revoke Permissions on a Sequence Generator


Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the sequence generator

Grant or Revoke Permissions on a Dbspace


Database Version

Role-Based Database Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

930

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.7 System Roles


System roles are automatically created in each newly created or database and has been granted specific
system privileges.
You can grant and revoke system roles to users and roles, but you cannot delete them. System roles cannot
own objects.
System Role Name

Authorized Tasks Supported

diagnostics

Allows users to run diagnostic operations. The diagnostics


system role owns the diagnostic tables and views.

rs_systabgroup

Allows users to perform replication server functionality.

SA_DEBUG

Allows users to use the SQL Anywhere Debugger.

SYS_REPLICATION_ADMIN_ROLE

Allows users to perform replication related administration


tasks.

SYS_RUN_REPLICATION_ROLE

Allows users to perform replication tasks using the


dbremote utility and synchronization tasks using the

dbmlsync utility.
SYS_SPATIAL_ADMIN_ROLE

Allows users to create, alter, drop, or comment on spatial


reference systems and spatial units of measure. The
SYS_SPATIAL_ADMIN_ROLE is the owner of all spatial ob
jects.

SYS

The SYS role owns the system tables and views for the data
base, which contain the full description of database schema,
including all database objects and all user IDs. The SYS sys
tem role can be granted to other roles with no administra
tive rights only.

dbo

The dbo system role owns many system stored procedures


and views.

PUBLIC

The PUBLIC system role has SELECT permission on the sys


tem tables.

Related Information
View Grantees of a System Role [page 932]
View Underlying Roles of a System Role [page 933]
View System Privileges Granted to a System Role [page 934]
Adding a Grantee to a System Role [page 935]
Removing a Grantee from a System Role [page 936]
Adding a Role to a System Role [page 937]
Changing Administrative Rights on an Underlying Role of a System Role [page 939]
Removing a Role from a System Role [page 941]
Adding a System Privilege to a System Role [page 942]
Changing Administrative Rights on a System Role Granted Privilege [page 943]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

931

Removing a System Privilege from a System Role [page 945]


Role-Based System Role Privilege Summary [page 946]

5.17.2.7.1 View Grantees of a System Role


Display a list of the users and roles granted membership to a system role.

Prerequisites
Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click System Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of grantees granted to the system role along with their corresponding grant option appears.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

932

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.7.2 View Underlying Roles of a System Role


Display a list of the underlying roles granted to a system role.

Prerequisites
Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
You cannot modify or remove the default underlying roles granted to a system role, but you can add and
remove additional underlying roles.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click System Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Roles.
A list of underlying roles granted to the system role along with their corresponding grant option appears.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

933

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.7.3 View System Privileges Granted to a System Role


Display a list of the system privileges granted to a system role.

Prerequisites
Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click System Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage System Privileges.
A list of system privileges granted to the system role along with their corresponding grant option appears.

934

Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.7.4 Adding a Grantee to a System Role


Add a user or role as a member (grantee) of a system role. Grantee inherits all underlying system privileges
and roles of the system role.

Prerequisites
Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ROLES system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
Grantees cannot be granted administrative rights on a system role.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click System Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users and roles currently granted to the system role appears.
5. Click Grant.
6. Select one or more user or roles to grant.

Tip
Use Shift-click or Control-click to select multiple items.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

935

7. Click OK.
The selected grantees appear with Role only rights (no administrative rights).
8. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.7.5 Removing a Grantee from a System Role


Remove a user or role as a member of a system role.

Prerequisites
Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ROLES system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click System Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users and roles currently granted to the system role appears.
5. Highlight a user or role to be removed and click Revoke.
6. Click OK to update any changes to the database and close the page.

936

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.7.6 Adding a Role to a System Role


Add a role as an underlying role of a standalone role. Members of the system role inherit the system privileges
of the underlying role, but do not become members of the underlying role. Members of the underlying role do
not become members of the standalone role.

Prerequisites
Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

To enable the Manage Roles option MANAGE ROLES system privilege


To then add an underlying role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click System Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Roles.
A list of underlying roles currently granted to the system role appears.
5. Click Grant.
6. Select one or more underlying roles to grant.

Tip
Use Shift-click or Control-click to select multiple items.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

937

7. Click OK to grant the role.


Newly granted underlying roles appear with Role only rights (no administrative rights).
8. (Optional) (For compatibility and user-defined roles only) To modify the administrative rights of an
underlying role, highlight a role. Click in the Grant Options column, click the arrow, and select the
administrative rights to be granted.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

Note
The following steps represent a behavior change with SAP IQ 16.0, for the following roles only.
SYS_AUTH_DBA_ROLE
SYS_AUTH_BACKUP_ROLE
SYS_RUN_REPLICATION_ROLE
SYS_AUTH_RESOURCE_ROLE
SYS_AUTH_VALIDATE_ROLE
Prior to 16.0, when granting membership to one of these roles, the default inheritance behavior was to
not allow members of the role to automatically inherit the underlying system privileges and roles of the
compatibility role. Only the log in user (of the role) would inherit. As of 16.0, the default behavior is to
allow automatic inheritance by all members of the role.
9. (Optional for SYS_AUTH_DBA_ROLE only) To prevent automatic inheritance of the
SYS_AUTH_DBA_ROLE when granted with the Administrative and Role option, click in the
Inheritance column, and select No Inheritance.
10. (Optional for SYS_AUTH_DBA_ROLE, SYS_AUTH_BACKUP_ROLE, SYS_RUN_REPLICATION_ROLE,
SYS_AUTH_RESOURCE_ROLE, or SYS_AUTH_VALIDATE_ROLE only) To prevent automatic inheritance
when granted with Role only option, click in the Inheritance column, and select No Inheritance.
11. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

938

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.7.7 Changing Administrative Rights on an Underlying


Role of a System Role
Changes a member's (grantee's) ability to manage an underlying role of a system role.

Prerequisites
Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

To enable the Manage Roles option MANAGE ROLES system privilege


To then add an underlying role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click System Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Roles.
A list of underlying roles currently granted to the system role appears.
5. Highlight a role to be modified. Click in the Grant Option column, click the arrow, and select the
administrative rights to be granted.

Note
Administrative rights cannot be modified on underlying roles which are system roles.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

939

Grant Option

Description

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

Note
The following steps represent a behavior change with SAP IQ 16.0, for the following roles only.
SYS_AUTH_DBA_ROLE
SYS_AUTH_BACKUP_ROLE
SYS_RUN_REPLICATION_ROLE
SYS_AUTH_RESOURCE_ROLE
SYS_AUTH_VALIDATE_ROLE
Prior to 16.0, when granting membership to one of these roles, the default inheritance behavior was to
not allow members of the role to automatically inherit the underlying system privileges and roles of the
compatibility role. Only the log in user (of the role) would inherit. As of 16.0, the default behavior is to
allow automatic inheritance by all members of the role.
6. (Optional for SYS_AUTH_DBA_ROLE only) To prevent automatic inheritance of the
SYS_AUTH_DBA_ROLE when granted with the Administrative and Role option, click in the
Inheritance column, and select No Inheritance.
7. (Optional for SYS_AUTH_DBA_ROLE, SYS_AUTH_BACKUP_ROLE, SYS_RUN_REPLICATION_ROLE,
SYS_AUTH_RESOURCE_ROLE, or SYS_AUTH_VALIDATE_ROLE only) To prevent automatic inheritance
when granted with Role only option, click in the Inheritance column, and select No Inheritance.
8. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

940

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.7.8 Removing a Role from a System Role


Remove a role as an underlying role of a system role. Members of the system role lose the ability to use any
system privileges of the underlying role.

Prerequisites
Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

To enable the Manage Roles option MANAGE ROLES system privilege


To then add an underlying role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
Default underlying roles of a system role cannot be revoked.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click System Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Roles.
A list of underlying roles currently granted to the system role appears.
5. Highlight a role to be removed and click Revoke.

Note
Revoke is unavailable if the selected role is a default underlying role of the system role, or you do not
have administrative rights to the role.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

941

6. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.7.9 Adding a System Privilege to a System Role


Add a system privilege to a system role.

Prerequisites
Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ROLES system privilege along with administrative rights over the system
privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
You can add system privileges to any system role except SYS.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click System Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage System Privileges.
A list of system privileges currently granted to the system role appears.

942

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5. Click Grant.
6. Select one or more system privileges to grant.

Tip
Use Shift-click or Control-click to select multiple items.
7. Click OK to grant the system privilege.
The selected system privileges appear granted with Privilege only rights (no administrative rights).
8. (Optional) To modify the administrative rights of a system privilege, highlight a system privilege. Click in
the Grant Options column, click the arrow, and select the administrative rights to be granted.
Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.7.10 Changing Administrative Rights on a System Role


Granted Privilege
Change the administrative rights on a system privilege granted to a system role.

Prerequisites
Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ROLES system privilege along with administrative rights over the system
privilege

The SAP IQ system is running, registered, and authenticated.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

943

The selected SAP IQ system supports role-based security.

Context
You cannot change the administrative rights on the default underlying system privileges of a system role.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click System Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage System Privileges.
A list of system privileges currently granted to the system role appears.
5. Highlight a system privilege to be modified. Click in the Grant Option column, click the arrow, and select
the administrative rights to be granted.
Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

944

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.7.11 Removing a System Privilege from a System Role


Remove a system privilege from a system role.

Prerequisites
Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ROLES system privilege along with administrative rights over the system
privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
You can remove system privileges from any system role except SYS, including those granted by default.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click System Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage System Privileges.
A list of system privileges currently granted to the system role appears.
5. Highlight a system privilege and click Revoke.

Note
Revoke is unavailable if the selected system privilege is a default underlying system privilege of the
system role, or you do not have administrative rights to the system privilege.
6. Click OK to update any changes to the database and close the page.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

945

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.7.12 Role-Based System Role Privilege Summary


A list of the system privileges and object permissions required to complete the various role-based system role
tasks.

View Grantees, Underlying Roles, and System Privileges Granted to a


System Role
Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

Adding and Removing Grantees to and from a System Role


Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ROLES system privilege

Adding and Removing Underlying Roles to and from a System Role


Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

To enable the Manage Roles option MANAGE ROLES system privilege


To then add an underlying role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

946

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Changing Administrative Rights of an Underlying Role on a System Role


Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

To enable the Manage Roles option MANAGE ROLES system privilege


To then add an underlying role one of:

Administrative rights over the underlying role (role administrator)

MANAGE ROLES system privilege if the underlying role has a global role adminis
trator

Adding and Removing System Privileges from a System Role


Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ROLES system privilege along with administrative rights over the system
privilege

Changing Administrative Rights of an Underlying Role on a System Role


Database Version

Role-Based System Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ROLES system privilege along with administrative rights over the system
privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

947

5.17.2.8 Compatibility Roles


Compatibility roles are automatically created in each newly created or database and has been granted specific
system privileges.
You can grant and revoke compatibility roles to users and roles. They can be migrated to standalone roles and
dropped under specific conditions. Compatibility role names begin with SYS_AUTH_ and end with _ROLE. Also
called predefined roles, they are created for backward compatibility with earlier versions of SAP IQ.
Compatibility Role Name

Authorized Tasks Supported

SYS_AUTH_SA_ROLE

Allow users to perform authorized tasks pertaining to data


and system administration responsibilities.

SYS_AUTH_SSO_ROLE

Allow users to perform authorized tasks pertaining to secur


ity and access control responsibilities.

SYS_AUTH_DBA_ROLE

Allow users to perform all authorized tasks.

SYS_AUTH_BACKUP_ROLE

Allow users to perform all backups.

SYS_AUTH_MULTIPLEX_ADMIN_ROLE

Allow users to perform authorized tasks to manage Multi


plex.

SYS_AUTH_OPERATOR_ROLE

Allow users to checkpoint databases, drop connections (in


cluding those for users with SYS_AUTH_DBA_ROLE), back
up databases, and monitor the system.

SYS_AUTH_PERMS_ADMIN_ROLE

Allow users to manage data privileges, groups, authorities,


and passwords.

SYS_AUTH_PROFILE_ROLE

Allow users to enable/disable server tracing for application


profiling.

SYS_AUTH_READFILE_ROLE

Allow users to read to a file resident on the server machine.

SYS_AUTH_READCLIENTFILE_ROLE

Allow users to read to a file resident on the client machine.

SYS_AUTH_RESOURCE_ROLE

Allow users to create new database objects, such as tables,


views, indexes, or procedures.

SYS_AUTH_SPACE_ADMIN_ROLE

Allow users to manage dbspaces.

SYS_AUTH_USER_ADMIN_ROLE

Allow users to manage external logins, login policies, and


other users.

SYS_AUTH_VALIDATE_ROLE

Allow users to validate or check tables, materialized views,


indexes or databases in the system store that are owned by
any user.

SYS_AUTH_WRITEFILE_ROLE

Allow users to write to a file resident on the server machine.

SYS_AUTH_WRITECLIENTFILE_ROLE

Allow users to write to a file resident on the client machine.

There is a behavior change in SAP IQ 16.0 with respect to inheritance, for these compatibility roles only:
SYS_AUTH_DBA_ROLE
SYS_AUTH_BACKUP_ROLE
SYS_AUTH_RESOURCE_ROLE
SYS_AUTH_VALIDATE_ROLE only
Prior to 16.0, the default inheritance behavior for these roles was to not allow grantees to automatically inherit
the underlying system privileges. As of 16.0, the default behavior is to allow automatic inheritance.

948

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
View Grantees of a Compatibility Role [page 949]
View Underlying Roles Granted to a Compatibility Role [page 950]
View System Privileges Granted to a Compatibility Role [page 951]
Adding a Grantee to a Compatibility Role [page 952]
Changing a Grantee's Administrative Rights on a Compatibility Role [page 954]
Removing a Grantee from a Compatibility Role [page 955]
Deleting a Compatibility Role [page 956]
Role-Based Compatibility Role Privilege Summary [page 957]

5.17.2.8.1 View Grantees of a Compatibility Role


Display a list of the users and roles granted membership to a compatibility role.

Prerequisites
Database Version

Role-Based Compatibility Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Compatibility Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of grantees granted to the compatibility role along with their corresponding grant option appears.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

949

Grant Option

Description

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

5.17.2.8.2 View Underlying Roles Granted to a Compatibility


Role
Display a list of the underlying roles granted to a compatibility role.

Prerequisites
Database Version

Role-Based Compatibility Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
You cannot modify or remove the default underlying roles granted to a compatibility role, but you can add and
remove additional underlying roles.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Compatibility Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Roles.
A list of underlying roles granted to the compatibility role along with their corresponding grant option
appears.

950

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

5.17.2.8.3 View System Privileges Granted to a Compatibility


Role
Display a list of the system privileges granted to a compatibility role.

Prerequisites
Database Version

Role-Based Compatibility Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Context
You cannot modify or remove the default underlying system privilege granted to a compatibility role, but you
can add and remove additional system privileges.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Compatibility Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage System Privileges.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

951

A list of system privileges granted to the compatibility role along with their corresponding grant option
appears.
Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

5.17.2.8.4 Adding a Grantee to a Compatibility Role


Add a user or role as a member (grantee) of a compatibility role. Grantee inherits all underlying system
privileges and roles of the compatibility role.

Prerequisites
Database Version

Role-Based Compatibility Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the compatibility role

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Compatibility Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users and roles currently granted to the compatibility role appears.
5. Click Grant.
6. Select one or more user or roles to grant.

952

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Tip
Use Shift-click or Control-click to select multiple items.
7. Click OK.
The new grantees appear with Role only rights (no administrative rights).
8. (Optional) To modify the administrative rights, highlight a grantee. Click in the Grant Options column, click
the arrow, and select the administrative rights to be granted.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

Note
The following steps represent a behavior change with SAP IQ 16.0, for the following roles only.
SYS_AUTH_DBA_ROLE
SYS_AUTH_BACKUP_ROLE
SYS_RUN_REPLICATION_ROLE
SYS_AUTH_RESOURCE_ROLE
SYS_AUTH_VALIDATE_ROLE
Prior to 16.0, when granting membership to one of these roles, the default inheritance behavior was to
not allow members of the role to automatically inherit the underlying system privileges and roles of the
compatibility role. Only the log in user (of the role) would inherit. As of 16.0, the default behavior is to
allow automatic inheritance by all members of the role.
9. (Optional for SYS_AUTH_DBA_ROLE only) To prevent automatic inheritance of the
SYS_AUTH_DBA_ROLE when granted with the Administrative and Role option, click in the
Inheritance column, and select No Inheritance.
10. (Optional for SYS_AUTH_DBA_ROLE, SYS_AUTH_BACKUP_ROLE, SYS_RUN_REPLICATION_ROLE,
SYS_AUTH_RESOURCE_ROLE, or SYS_AUTH_VALIDATE_ROLE only) To prevent automatic inheritance
when granted with Role only option, click in the Inheritance column, and select No Inheritance.
11. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

953

5.17.2.8.5 Changing a Grantee's Administrative Rights on a


Compatibility Role
Changes a member's (grantee's) ability to manage a compatibility role.

Prerequisites
Database Version

Role-Based Standalone Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

One of:

Administrative rights over the role (role administrator)

MANAGE ROLES system privilege if the role has a global role administrator

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Compatibility Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users and roles currently granted to the role appears.
5. Highlight a grantee to be modified. Click in the Grant Option column, click the arrow, and select the
administrative rights to be granted.
Grant Option

Description

Role only

(Default) Grantee can use the underlying system privileges of the role
only.

Administrative only

Grantee can grant and revoke the selected role to other users and roles,
but cannot use its underlying system privileges.

Administrative and role

Grantee can grant and revoke the selected role to other users and roles
and use its underlying system privileges.

Note
The following steps represent a behavior change with SAP IQ 16.0, for the following roles only.

954

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

SYS_AUTH_DBA_ROLE
SYS_AUTH_BACKUP_ROLE
SYS_RUN_REPLICATION_ROLE
SYS_AUTH_RESOURCE_ROLE
SYS_AUTH_VALIDATE_ROLE
Prior to 16.0, when granting membership to one of these roles, the default inheritance behavior was to
not allow members of the role to automatically inherit the underlying system privileges and roles of the
compatibility role. Only the log in user (of the role) would inherit. As of 16.0, the default behavior is to
allow automatic inheritance by all members of the role.
6. (Optional for SYS_AUTH_DBA_ROLE only) To prevent automatic inheritance of the
SYS_AUTH_DBA_ROLE when granted with the Administrative and Role option, click in the
Inheritance column, and select No Inheritance.
7. (Optional for SYS_AUTH_DBA_ROLE, SYS_AUTH_BACKUP_ROLE, SYS_RUN_REPLICATION_ROLE,
SYS_AUTH_RESOURCE_ROLE, or SYS_AUTH_VALIDATE_ROLE only) To prevent automatic inheritance
when granted with Role only option, click in the Inheritance column, and select No Inheritance.
8. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]

5.17.2.8.6 Removing a Grantee from a Compatibility Role


Remove a user or role as a member (grantee) of a compatibility role. Grantees lose the ability to use any
underlying system privileges or roles of the compatibility role.

Prerequisites
Database Version

Role-Based Compatibility Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the compatibility role

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

955

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Compatibility Roles.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users and roles currently granted to the role appears.
5. Highlight a user or role to be removed form the compatibility role and click Revoke.

Note
Revoke is unavailable if you do not have administrative rights to the selected role.
6. Click OK to update any changes to the database and close the page.

Related Information
Security Implications of the Managing Grantees and Managing Roles Options [page 833]

5.17.2.8.7 Deleting a Compatibility Role


Delete a compatibility role from the database.

Prerequisites
Database Version

Role-Based Compatibility Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the compatibility role being deleted

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.
All of a compatibility role's underlying system privileges must have been granted to at least one userdefined role.
No users or roles are currently granted to the compatibility role.

956

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click Compatibility Roles.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. (Optional) Select Revoke role permissions to remove any users and roles currently granted to the
compatibility role.

Note
A compatibility role cannot be deleted if any members are currently granted.
6. Click Yes.

5.17.2.8.8 Role-Based Compatibility Role Privilege Summary


A list of the system privileges and object permissions required to complete the various role-based
compatibility role tasks.

View Grantees, Underlying Roles, and System Privileges Granted to a


Compatibility Role
Database Version

Role-Based Compatibility Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

Granting and Revoking a Grantee to and from a Compatibility Roles


Database Version

Role-Based Compatibility Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

957

Database Version

Role-Based Compatibility Role Privileges Required

SAP IQ 16.0

Administrative rights over the compatibility role

Deleting Compatibility Roles


Database Version

Role-Based Compatibility Role Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over the compatibility role being deleted

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

5.17.2.9 System Privileges


System privileges control the rights of users to perform authorized database tasks.
You can grant and revoke system privileges to users and roles, with or without administrative rights, but you
cannot delete them.

Related Information
View Grantees of a System Privilege [page 959]
Adding a Grantee to a System Privilege [page 960]
Changing a Grantee's Administrative Rights on a System Privilege [page 961]
Removing a Grantee from a System Privilege [page 962]
Role-Based System Privilege Privilege Summary [page 963]
System Privileges Listed by Functional Area [page 964]

958

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

List All System Privileges [page 1008]

5.17.2.9.1 View Grantees of a System Privilege


Display a list of the users and roles granted to a system privilege.

Prerequisites
Database Version

Role-Based System Privilege Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click System Privileges.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of grantees granted to the system privilege along with their corresponding grant option appears.
Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

959

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.9.2 Adding a Grantee to a System Privilege


Add users or roles to a system privilege grant list.

Prerequisites
Database Version

Role-Based System Privilege Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over any system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click System Privileges.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users and roles currently granted the system privilege appears.
5. Click Grant.
6. Select one or more users or roles.

Tip
Use Shift-click or Control-click to select multiple items.
7. Click OK.
The new grantees appear granted with Privilege only rights (no administrative rights).
8. Optional) To modify the administrative rights, highlight a grantee. Click in the Grant Options column, click
the arrow, and select the administrative rights to be granted.

960

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.9.3 Changing a Grantee's Administrative Rights on a


System Privilege
Change a user or role's ability to manage a system privilege.

Prerequisites
Database Version

Role-Based System Privilege Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over any system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security

Role-Based , and then click System Privileges.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

961

4. Select Manage Grantees.


A list of users and roles currently granted to the system privilege appears.
5. Highlight a grantee to be modified. Click in the Grant Options column, click the arrow, and select the
administrative rights to be granted.
Grant Option

Description

Privilege only

(Default) Grantees can perform authorized tasks requiring the selected


privilege, but cannot grant the system privilege to other users and roles.

Administrative only

Grantees can grant and revoke the selected system privilege to other
users and roles, but cannot perform authorized tasks requiring the se
lected system privilege.

Administrative and privilege

Grantees can grant and revoke the selected system privilege to other
users and roles and can perform authorized tasks requiring the selected
system privilege.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.9.4 Removing a Grantee from a System Privilege


Remove a user or role as a member (grantee) of a system privilege grant list.

Prerequisites
Database Version

Role-Based System Privilege Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over any system privilege

The SAP IQ system is running, registered, and authenticated.


The selected SAP IQ system supports role-based security.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

962

IQ Servers

Security

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Role-Based , and then click System Privileges.

SAP IQ Cockpit
Administer SAP IQ

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Manage Grantees.
A list of users and roles currently granted to the system privilege appears.
5. Highlight a user or role to be removed and click Revoke.

Note
Revoke is unavailable if you do not have administrative rights to the selected system privilege.
6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.2.9.5 Role-Based System Privilege Privilege Summary


A list of the system privileges and object permissions required to complete the various role-based system
privilege tasks.

View Users and Roles Granted to a Sytstem Privilege


Database Version

Role-Based System Privilege Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

Adding and Removing Grantees to and From a System Privilege


Database Version

Role-Based System Privilege Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over any system privilege

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

963

Changing Administrative Rights of a Grantee of a System Privilege


Database Version

Role-Based System Privilege Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

Administrative rights over any system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

5.17.2.9.6 System Privileges Listed by Functional Area


A list of system privileges organized by functional area.

Related Information
Database System Privileges [page 965]
Database Options System Privileges [page 967]
Data Type System Privileges [page 969]
Dbspaces System Privileges [page 970]
Debugging System Privileges [page 971]
Events System Privileges [page 972]
External Environment System Privileges [page 972]
Files System Privileges [page 974]
Indexes System Privileges [page 976]
LDAP System Privileges [page 977]
Materialized Views System Privileges [page 978]
Messages System Privileges [page 979]
Miscellaneous System Privileges [page 980]
Mirror Server System Privileges [page 985]

964

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Multiplex System Privileges [page 986]


Procedures System Privileges [page 987]
Replication System Privileges [page 989]
Roles System Privileges [page 990]
Sequences System Privileges [page 992]
Server Operator System Privileges [page 993]
Spatial Objects System Privileges [page 994]
Statistics System Privileges [page 995]
Tables System Privileges [page 996]
Text Configurations System Privileges [page 1000]
Triggers System Privileges [page 1002]
Users and Login Management System Privileges [page 1003]
Views System Privileges [page 1005]
Web Services System Privileges [page 1007]

5.17.2.9.6.1 Database System Privileges


System privileges pertaining to performing authorized tasks on databases.

Related Information
ALTER DATABASE System Privilege [page 965]
BACKUP DATABASE System Privilege [page 966]
CHECKPOINT System Privilege [page 966]
DROP CONNECTION System Privilege [page 966]
MANAGE PROFILING System Privilege [page 967]
MONITOR System Privilege [page 967]
List All System Privileges [page 1008]

5.17.2.9.6.1.1 ALTER DATABASE System Privilege


Required to alter a database.
The ALTER DATABASE system privilege allows a user to:
Perform a database upgrade
Perform cost model calibration
Load statistics
Change transaction logs (also requires the SERVER OPERATOR system privilege)
Change ownership of the database (also requires the MANAGE ANY MIRROR SERVER system privilege)

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

965

Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.1.2 BACKUP DATABASE System Privilege


Allows a user to back up a database on one or more archive devices.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.1.3 CHECKPOINT System Privilege


Required to force the database server to execute a checkpoint.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.1.4 DROP CONNECTION System Privilege


Required to drop any user connections to the database.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

966

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.1.5 MANAGE PROFILING System Privilege


Required to enable or disable server tracing for application profiling. The DIAGNOSTICS system role is also
required to fully utilize diagnostics functionality for user information.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.1.6 MONITOR System Privilege


Required to allow a user to perform monitoring related tasks such as access privileged statistics, run server
monitor related procedures, and so on.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.2 Database Options System Privileges


System privileges pertaining to performing authorized tasks to set database options.

Related Information
SET ANY PUBLIC OPTION System Privilege [page 968]
SET ANY SECURITY OPTION System Privilege [page 968]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

967

SET ANY SYSTEM OPTION System Privilege [page 968]


SET ANY USER DEFINED OPTION System Privilege [page 969]
List All System Privileges [page 1008]

5.17.2.9.6.2.1 SET ANY PUBLIC OPTION System Privilege


Required to set any PUBLIC system database option that does not require the SET ANY SECURITY OPTION or
SET ANY SYSTEM OPTION system privileges.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.2.2 SET ANY SECURITY OPTION System Privilege


Required to set any PUBLIC security database options.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.2.3 SET ANY SYSTEM OPTION System Privilege


Required to set any PUBLIC system database options.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

968

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.9.6.2.4 SET ANY USER DEFINED OPTION System


Privilege
Required to set any user-defined options.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.3 Data Type System Privileges


System privileges pertaining to performing authorized tasks on data types.

Related Information
ALTER DATATYPE System Privilege [page 969]
CREATE DATATYPE System Privilege [page 970]
DROP DATATYPE System Privilege [page 970]
List All System Privileges [page 1008]

5.17.2.9.6.3.1 ALTER DATATYPE System Privilege


Required to alter data types.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

969

5.17.2.9.6.3.2 CREATE DATATYPE System Privilege


Required to create data types.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.3.3 DROP DATATYPE System Privilege


Required to drop data types.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.4 Dbspaces System Privileges


System privileges pertaining to performing authorized tasks on dbspaces.

Related Information
MANAGE ANY DBSPACE System Privilege [page 971]
List All System Privileges [page 1008]

970

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.9.6.4.1 MANAGE ANY DBSPACE System Privilege


Required to perform management-related tasks on dbspaces.
The MANAGE ANY DBSPACE system privilege allows a user to:
Issue CREATE, ALTER, DROP, or COMMENT statements on any dbspace
GRANT or REVOKE the CREATE object-level privilege on any dbspace
Move data to any dbspace
Issue a read-only selective restore statement on any dbspace
Run the database delete file function
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.5 Debugging System Privileges


System privileges pertaining to performing authorized tasks related to debugging.

Related Information
DEBUG ANY PROCEDURE System Privilege [page 971]
List All System Privileges [page 1008]

5.17.2.9.6.5.1 DEBUG ANY PROCEDURE System Privilege


Required to debug all code in any database object.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

971

5.17.2.9.6.6 Events System Privileges


System privileges pertaining to authorized tasks on events.

Related Information
MANAGE ANY EVENT System Privilege [page 972]
List All System Privileges [page 1008]

5.17.2.9.6.6.1 MANAGE ANY EVENT System Privilege


Required to create, alter, drop, or trigger events.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.7 External Environment System Privileges


System privileges pertaining to performing authorized tasks on external environments.

Related Information
CREATE EXTERNAL REFERENCE System Privilege [page 973]
MANAGE ANY EXTERNAL ENVIRONMENT System Privilege [page 973]
MANAGE ANY EXTERNAL OBJECT System Privilege [page 974]
List All System Privileges [page 1008]

972

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.9.6.7.1 CREATE EXTERNAL REFERENCE System


Privilege
Required to create external references in the database.
This system privilege is required in addition to any other system privileges required for creating a database
object that references an external object.
For example, to create an external:
Term breaker or a self-owned text configuration that uses an external term breaker requires the system
privilege CREATE TEXT CONFIGURATION in addition to the CREATE EXTERNAL REFERENCE system
privilege.
Procedure or function requires the CREATE PROCEDURE system privilege in addition to the CREATE
EXTERNAL REFERENCE system privilege.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.7.2 MANAGE ANY EXTERNAL ENVIRONMENT


System Privilege
Required to manage external environments.
The MANAGE ANY EXTERNAL ENVIRONMENT system privilege allows a user to issue ALTER, COMMENT,
START or STOP statements on an external environment.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

973

5.17.2.9.6.7.3 MANAGE ANY EXTERNAL OBJECT System


Privilege
Required to issue INSTALL, COMMENT ON, or REMOVE EXTERNAL OBJECT statements.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.8 Files System Privileges


System privileges pertaining to authorized tasks for files.

Related Information
READ CLIENT FILE System Privilege [page 974]
READ FILE System Privilege [page 975]
WRITE CLIENT FILE System Privilege [page 975]
WRITE FILE System Privilege [page 975]
List All System Privileges [page 1008]

5.17.2.9.6.8.1 READ CLIENT FILE System Privilege


Required to read a file resident on the client machine.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

974

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.9.6.8.2 READ FILE System Privilege


Required to read a file resident on the server machine.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.8.3 WRITE CLIENT FILE System Privilege


Required to write a file resident on the client machine.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.8.4 WRITE FILE System Privilege


Required to write a file resident on the server machine.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

975

5.17.2.9.6.9 Indexes System Privileges


System privileges pertaining to authorized tasks for indexes.

Related Information
ALTER ANY INDEX System Privilege [page 976]
CREATE ANY INDEX System Privilege [page 976]
DROP ANY INDEX System Privilege [page 977]
List All System Privileges [page 1008]

5.17.2.9.6.9.1 ALTER ANY INDEX System Privilege


Required to alter an existing index.
The ALTER ANY INDEX system privilege allows a user to:
Alter indexes on any table owned by any user
Issue the COMMENT statement on any index owned by any user
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.9.2 CREATE ANY INDEX System Privilege


Required to create a new index.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.
The CREATE ANY INDEX system privilege allows a user to:
Create indexes on any table owned by any user
Issue COMMENT statement on any index owned by any user

976

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.9.3 DROP ANY INDEX System Privilege


Required to drop indexes on any table owned by any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.10 LDAP System Privileges


System privileges pertaining to performing authorized tasks on an LDAP server configuration object.

Related Information
MANAGE ANY LDAP SERVER System Privilege [page 977]
List All System Privileges [page 1008]

5.17.2.9.6.10.1 MANAGE ANY LDAP SERVER System Privilege


Required to issue CREATE, ALTER, or DROP statements on an LDAP server configuration object.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

977

5.17.2.9.6.11 Materialized Views System Privileges


System privileges pertaining to performing authorized tasks on materialized views.

Related Information
CREATE ANY MATERIALIZED VIEW System Privilege [page 978]
CREATE MATERIALIZED VIEW System Privilege [page 978]
ALTER ANY MATERIALIZED VIEW System Privilege [page 979]
DROP ANY MATERIALIZED VIEW System Privilege [page 979]
List All System Privileges [page 1008]

5.17.2.9.6.11.1 CREATE ANY MATERIALIZED VIEW System


Privilege
Required to create materialized views that are owned by any user. It also allows users to issue the COMMENT
statement on materialized views owned by any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.11.2 CREATE MATERIALIZED VIEW System


Privilege
Required to create self-owned materialized views. It also allows users to issue the COMMENT statement on
self-owned materialized views.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

978

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.9.6.11.3 ALTER ANY MATERIALIZED VIEW System


Privilege
Required to alter materialized views owned by any user. It also allows users to issue the COMMENT statement
on materialized views owned by any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.11.4 DROP ANY MATERIALIZED VIEW System


Privilege
Required to drop materialized views owned by any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.12 Messages System Privileges


System privileges pertaining to performing authorized tasks for messages.

Related Information
CREATE MESSAGE System Privilege [page 980]
DROP MESSAGE System Privilege [page 980]
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

979

5.17.2.9.6.12.1 CREATE MESSAGE System Privilege


Required to create messages.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.12.2 DROP MESSAGE System Privilege


Required to drop messages.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.13 Miscellaneous System Privileges


System privileges pertaining to performing miscellaneous authorized tasks.

Related Information
ALTER ANY OBJECT System Privilege [page 981]
ALTER ANY OBJECT OWNER System Privilege [page 981]
COMMENT ANY OBJECT System Privilege [page 982]
CREATE ANY OBJECT System Privilege [page 982]
DROP ANY OBJECT System Privilege [page 983]
MANAGE ANY OBJECT PRIVILEGES System Privilege [page 984]
REORGANIZE ANY OBJECT System Privilege [page 984]
VALIDATE ANY OBJECT System Privilege [page 984]
List All System Privileges [page 1008]

980

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.9.6.13.1 ALTER ANY OBJECT System Privilege


Required to alter an object owned by anyone.
The ALTER ANY OBJECT system privilege allows a user to issue these statements:
ALTER TABLE
ALTER INDEX
ALTER JOIN INDEX
ALTER VIEW
ALTER MATERIALIZED VIEW
ALTER PROCEDURE
ALTER EVENT
ALTER SEQUENCE
ALTER FUNCTION
ALTER DATATYPE
ALTER MESSAGE
ALTER TEXT CONFIGURATION
ALTER TRIGGER
ALTER STATISTICS
COMMENT on different objects
ALTER SPATIAL REFERENCE SYSTEM
ALTER SPATIAL UNIT OF MEASURE
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.13.2 ALTER ANY OBJECT OWNER System Privilege


Required to change the owner of a user table owned by anyone.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Note
This system privilege applies to table objects only. Owners of other objects, such as procedures,
materialized views, and so on, cannot be changed.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

981

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.13.3 COMMENT ANY OBJECT System Privilege


Required to comment on any object owned by any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.13.4 CREATE ANY OBJECT System Privilege


Required to create an object owned by anyone.
The CREATE ANY OBJECT system privilege allows a user to issue these statements:
COMMENT on different objects
CREATE DATATYPE
CREATE EVENT
CREATE FUNCTION
CREATE INDEX
CREATE JOIN INDEX
CREATE MATERIALIZED VIEW
CREATE MESSAGE
CREATE PROCEDURE
CREATE SCHEMA
CREATE SEQUENCE
CREATE SPATIAL REFERENCE SYSTEM
CREATE SPATIAL UNIT OF MEASURE
CREATE STATISTICS
CREATE TABLE
CREATE TEXT CONFIGURATION
CREATE VIEW
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

982

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.13.5 DROP ANY OBJECT System Privilege


Required to drop an object owned by anyone.
The DROP ANY OBJECT system privilege allows a user to issue these statements:
DROP DATATYPE
DROP EVENT
DROP FUNCTION
DROP INDEX
DROP JOIN INDEX
DROP MATERIALIZED VIEW
DROP MESSAGE
DROP PROCEDURE
DROP SEQUENCE
DROP SPATIAL REFERENCE SYSTEM
DROP SPATIAL UNIT OF MEASURE
DROP STATISTICS
DROP TABLE
DROP TEXT CONFIGURATION
DROP TRIGGER
DROP VIEW
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

983

5.17.2.9.6.13.6 MANAGE ANY OBJECT PRIVILEGES System


Privilege
Required to manage objects.
The MANAGE ANY OBJECT PRIVILEGES system privilege allows a user to perform management-related tasks,
such as:
Grant any object-level privilege (INSERT, UPDATE, DELETE, SELECT, ALTER, REFERENCES or EXECUTE)
on objects owned by any user
Revoke any object-level privilege granted by the object owner or another user with MANAGE ANY OBJECT
PRIVILEGES system privilege
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.13.7 REORGANIZE ANY OBJECT System Privilege


Required to issue the REORGANIZE statement on applicable objects owned by any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.13.8 VALIDATE ANY OBJECT System Privilege


Required to validate or check tables, materialized views, indexes, or databases in the system store owned by
any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

984

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.14 Mirror Server System Privileges


System privileges pertaining to authorized tasks for mirrored servers.

Related Information
MANAGE ANY MIRROR SERVER System Privilege [page 985]
List All System Privileges [page 1008]

5.17.2.9.6.14.1 MANAGE ANY MIRROR SERVER System


Privilege
Required to perform high availability server administrative tasks.
The MANAGE ANY MIRROR SERVER system privilege allows a user to:
Issue the CREATE, ALTER or DROP statement on mirrored servers
Change mirror server parameters
Set options on mirror servers
Execute the ALTER statement to change ownership of a database
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

985

5.17.2.9.6.15 Multiplex System Privileges


System privileges required to perform authorized tasks in a multiplex environment.

Related Information
ACCESS SERVER LS System Privilege [page 986]
MANAGE MULTIPLEX System Privilege [page 986]
List All System Privileges [page 1008]

5.17.2.9.6.15.1 ACCESS SERVER LS System Privilege


Allows logical server connection using the SERVER logical server context.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.15.2 MANAGE MULTIPLEX System Privilege


Allows administrative tasks related to multiplex server management.
The MANAGE MULTIPLEX system privilege allows a user to:
Issue multiplex-related CREATE, ALTER, DROP, or COMMENT statements on logical server policies
Issue multiplex-related CREATE, ALTER, DROP, or COMMENT statements on logical servers
Perform exclusive assignment of a dbspace to logical servers
Release a populated dbspace from the exclusive use of a logical server

Note
The MANAGE MULTIPLEX system privilege also manages failover configurations, and is required for a
manual failover.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

986

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.16 Procedures System Privileges


System privileges pertaining to performing authorized tasks for procedures.

Related Information
ALTER ANY PROCEDURE System Privilege [page 987]
CREATE ANY PROCEDURE System Privilege [page 988]
CREATE PROCEDURE System Privilege [page 988]
DROP ANY PROCEDURE System Privilege [page 988]
EXECUTE ANY PROCEDURE System Privilege [page 989]
MANAGE AUDITING System Privilege [page 989]
List All System Privileges [page 1008]

5.17.2.9.6.16.1 ALTER ANY PROCEDURE System Privilege


Required to alter any stored procedure or function owned by any user.
The ALTER ANY PROCEDURE system privilege allows a user to:
Alter stored procedures and functions owned by any user
Issue the COMMENT statement on procedures owned by any user
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

987

5.17.2.9.6.16.2 CREATE ANY PROCEDURE System Privilege


Required to create any stored procedure or function owned by any user.
The CREATE ANY PROCEDURE system privilege allows a user to:
Create stored procedures and functions owned by any user
Issue the COMMENT statement on procedures owned by any user
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.16.3 CREATE PROCEDURE System Privilege


Required to create a self-owned stored procedure or function.
The CREATE PROCEDURE system privilege allows a user to:
Create self-owned stored procedures and functions
Issue the COMMENT statement on self-owned procedures
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.16.4 DROP ANY PROCEDURE System Privilege


Required to drop any stored procedure or function owned by any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

988

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.16.5 EXECUTE ANY PROCEDURE System Privilege


Required to execute any stored procedure or function owned by any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.16.6 MANAGE AUDITING System Privilege


Required to run the sa_audit_string stored procedure.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.17 Replication System Privileges


System privileges pertaining to performing authorized replication tasks.

Related Information
MANAGE REPLICATION System Privilege [page 990]
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

989

5.17.2.9.6.17.1 MANAGE REPLICATION System Privilege


Required to perform replication-related tasks.
The MANAGE REPLICATION system privilege allows a user to:
Issue the CREATE, ALTER, DROP, or COMMENT PUBLICATION statement
Issue the CREATE, ALTER, DROP, or SYNCHRONIZATION SUBSCRIPTION statement
Issue the CREATE, ALTER, DROP, or SYNCHRONIZATION USER statement
Issue the CREATE, ALTER, DROP, or COMMENT SYNCHRONIZATION PROFILE statement
Issue the CREATE or DROP SUBSCRIPTION statement
Issue the CREATE REMOTE MESSAGE TYPE statement
Issue the DROP REMOTE MESSAGE TYPE statement
Issue the GRANT or REVOKE CONSOLIDATE statement
Issue the GRANT or REVOKE REMOTE statement
Issue the GRANT or REVOKE PUBLISH statement
Issue the LOCK FEATURE statement
Issue the START, STOP, or SYNCHRONIZE SUBSCRIPTION statement
Issue the PASSSTHROUGH statement
Issue the REMOTE RESET statement
Issue the SET REMOTE OPTION statement
Issue the START or STOP SYNCHRONIZATION SCHEMA CHANGE statement
Issue the SYNCHRONIZE PROFILE statement
Execute the SA_SETREMOTEUSER procedure
Execute the SA_SETSUBSCRIPTION procedure
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.18 Roles System Privileges


System privileges pertaining to performing authorized tasks for roles.

Related Information
MANAGE ROLES System Privilege [page 991]
UPGRADE ROLE System Privilege [page 991]

990

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

List All System Privileges [page 1008]

5.17.2.9.6.18.1 MANAGE ROLES System Privilege


Required to create new roles and act as the default administrator of roles.
While the MANAGE ROLES system privilege allows a user to create a new user-defined role, it does not allow
him or her to delete the role. For this, a user requires administrative rights on the role.
Users who are granted the MANAGE ROLES system privilege serve as default global role administrators on a
user-defined role.
If no role administrator is specified during the role creation process, the MANAGE ROLES system privilege
(SYS_MANAGE_ROLES_ROLE) is automatically granted to the role with the ADMIN ONLY OPTION clause,
which allows the global role administrator to administer the role. If at least one role administrator is specified
during the creation process, the MANAGE ROLES system privilege is not granted to the role, and global role
administrators cannot manage the role.
MANAGE ROLES is the only system privilege that can be granted the ability to administer user-defined roles.

Note
You can also grant role administration directly to users either while creating a role or, or after. When role
administration is granted directly to a user, the user does not require the MANAGE ROLES system privilege
to administer the role.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.18.2 UPGRADE ROLE System Privilege


Required to administrate new system privileges introduced when upgrading an IQ database earlier than 16.0.
By default, the UPGRADE ROLE system privilege is granted to the SYS_AUTH_SA_ROLE role, if it exists.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

991

5.17.2.9.6.19 Sequences System Privileges


System privileges pertaining to performing authorized tasks for sequencing.

Related Information
ALTER ANY SEQUENCE System Privilege [page 992]
CREATE ANY SEQUENCE System Privilege [page 992]
DROP ANY SEQUENCE System Privilege [page 993]
USE ANY SEQUENCE System Privilege [page 993]
List All System Privileges [page 1008]

5.17.2.9.6.19.1 ALTER ANY SEQUENCE System Privilege


Required to alter any sequence.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.19.2 CREATE ANY SEQUENCE System Privilege


Required to create any sequence.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

992

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.9.6.19.3 DROP ANY SEQUENCE System Privilege


Required to drop any sequence.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.19.4 USE ANY SEQUENCE System Privilege


Required to use any sequence.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.20 Server Operator System Privileges


System privileges pertaining to performing authorized server operator tasks.

Related Information
SERVER OPERATOR System Privilege [page 994]
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

993

5.17.2.9.6.20.1 SERVER OPERATOR System Privilege


Required to perform server-operator tasks.
The SERVER OPERATOR system privilege allows a user to:
Create databases
Cache management
Drop databases
Start or stop a database
Start or stop a database engine
Create, alter, or drop a server
Create encrypted or decrypted databases
Create encrypted or decrypted files
Issue ALTER statement to change transaction logs on a database
Issue RESTORE DATABASE statement for a full database restore or to restore the catalog only
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.21 Spatial Objects System Privileges


System privileges pertaining to performing authorized tasks on spatial objects.

Related Information
MANAGE ANY SPATIAL OBJECT System Privilege [page 995]
List All System Privileges [page 1008]

994

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.9.6.21.1 MANAGE ANY SPATIAL OBJECT System


Privilege
Required to manage any spatial objects.
The MANAGE ANY SPATIAL OBJECT system privilege allows a user to issue:
CREATE, ALTER, or DROP statements on spatial objects
CREATE, ALTER, or DROP statements on spatial units of measure
COMMENT statements on spatial units of measure.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.22 Statistics System Privileges


System privileges pertaining to performing authorized tasks on statistics.

Related Information
MANAGE ANY STATISTICS System Privilege [page 995]
List All System Privileges [page 1008]

5.17.2.9.6.22.1 MANAGE ANY STATISTICS System Privilege


Required to issue CREATE, ALTER, DROP, or UPDATE statements on statistics for any table.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

995

5.17.2.9.6.23 Tables System Privileges


System privileges pertaining to performing authorized tasks on tables.

Related Information
ALTER ANY TABLE System Privilege [page 996]
CREATE ANY TABLE System Privilege [page 997]
CREATE PROXY TABLE System Privilege [page 997]
CREATE TABLE System Privilege [page 997]
DELETE ANY TABLE System Privilege [page 998]
DROP ANY TABLE System Privilege [page 998]
INSERT ANY TABLE System Privilege [page 998]
LOAD ANY TABLE System Privilege [page 999]
SELECT ANY TABLE System Privilege [page 999]
TRUNCATE ANY TABLE System Privilege [page 999]
UPDATE ANY TABLE System Privilege [page 1000]
List All System Privileges [page 1008]

5.17.2.9.6.23.1 ALTER ANY TABLE System Privilege


Required to alter any table owned by anyone.
The ALTER DATABASE system privilege allows a user to:
Issue ALTER or TRUNCATE statements on tables, table partitions, or views owned by any user
Issue the COMMENT statement on tables owned by any user
Issue the COMMENT statement on columns on tables owned by any user
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

996

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.9.6.23.2 CREATE ANY TABLE System Privilege


Required to create tables owned by any user.
The CREATE ANY TABLE system privilege allows a user to:
Create tables, including proxy tables, owned by any user
Issue the COMMENT statement on tables owned by any user
Issue the COMMENT statement on columns on tables owned by any user
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.23.3 CREATE PROXY TABLE System Privilege


Required to create self-owned proxy tables.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.23.4 CREATE TABLE System Privilege


Required to create self-owned tables.
The CREATE TABLE system privilege allows a user to:
Create self-owned tables except proxy tables
Issue the COMMENT statement on self-owned tables
Issue the COMMENT statement on columns on self-owned tables
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

997

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.23.5 DELETE ANY TABLE System Privilege


Required to delete rows from tables, table partitions, or views owned by any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.23.6 DROP ANY TABLE System Privilege


Required to drop tables owned by any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.23.7 INSERT ANY TABLE System Privilege


Required to insert rows into tables and views owned by anyone.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

998

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.9.6.23.8 LOAD ANY TABLE System Privilege


Required to execute LOAD command for any table where the -gl server switch is set to DBA.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.23.9 SELECT ANY TABLE System Privilege


Required to query tables, views, or materialized views owned by any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.23.10 TRUNCATE ANY TABLE System Privilege


Required to execute TRUNCATE command for any table.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

999

5.17.2.9.6.23.11 UPDATE ANY TABLE System Privilege


Required to update rows in tables and views owned by any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.24 Text Configurations System Privileges


System privileges pertaining to performing authorized tasks on text configurations.

Related Information
ALTER ANY TEXT CONFIGURATION System Privilege [page 1000]
CREATE ANY TEXT CONFIGURATION System Privilege [page 1001]
CREATE TEXT CONFIGURATION System Privilege [page 1001]
DROP ANY TEXT CONFIGURATION System Privilege [page 1002]
List All System Privileges [page 1008]

5.17.2.9.6.24.1 ALTER ANY TEXT CONFIGURATION System


Privilege
Required to alter text configurations owned by any user.
The ALTER ANY TEXT CONFIGURATION system privilege allows a user to issue:
ALTER statements on text configurations owned by any user
COMMENT statements on text configurations owned by any user
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

1000

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.24.2 CREATE ANY TEXT CONFIGURATION System


Privilege
Required to create text configurations owned by other users.
The CREATE ANY TEXT CONFIGURATION system privilege allows a user to:
Create configurations owned by any user
Issue COMMENT statement on text configuration owned by any user
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.24.3 CREATE TEXT CONFIGURATION System


Privilege
Required to create self owned text configurations.
The CREATE TEXT CONFIGURATION system privilege allows a user to:
Create self owned text configurations
Issue the COMMENT statement on self owned text configurations
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1001

5.17.2.9.6.24.4 DROP ANY TEXT CONFIGURATION System


Privilege
Required to drop text configurations owned by any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.25 Triggers System Privileges


System privileges pertaining to performing authorized task on triggers.

Related Information
ALTER ANY TRIGGER System Privilege [page 1002]
CREATE ANY TRIGGER System Privilege [page 1003]
List All System Privileges [page 1008]

5.17.2.9.6.25.1 ALTER ANY TRIGGER System Privilege


Required to alter triggers. Users can also issue a COMMENT statement on tables if he or she has the ALTER
privilege on the table.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

1002

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.9.6.25.2 CREATE ANY TRIGGER System Privilege


Required to create triggers. Users can also issue a COMMENT statement on tables if they have the ALTER
privilege on the table.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.26 Users and Login Management System


Privileges
System privileges pertaining to performing authorized task on users and login policies.

Related Information
CHANGE PASSWORD System Privilege [page 1003]
MANAGE ANY LOGIN POLICY System Privilege [page 1004]
MANAGE ANY USER System Privilege [page 1004]
SET USER System Privilege [page 1005]
List All System Privileges [page 1008]

5.17.2.9.6.26.1 CHANGE PASSWORD System Privilege


Allows users to manage passwords other than their own.
You can limit this system privilege to allow a user to manage passwords for a specific list of users, to manage
passwords for any user granted a specific list of roles, or to manage passwords for any existing database user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1003

5.17.2.9.6.26.2 MANAGE ANY LOGIN POLICY System


Privilege
Required to manage login policies.
The MANAGE ANY LOGIN POLICY system privilege allows a user to issue:
CREATE, ALTER, or DROP statements on login policies
COMMENT statements on login policies
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.26.3 MANAGE ANY USER System Privilege


Required to manage users.
The MANAGE ANY USER system privilege allows a user to:
Issue CREATE, ALTER, or DROP statements on database users (including assigning initial password)
Define authentication mechanisms for users (Kerberos, Integrated login)
Issue CREATE or DROP statements on external logins
Force password change on next login for any user
Assign a login policy to any user
Reset the login policy of any user
Issue the COMMENT statement on users, integrated logins, or Kerberos logins
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

1004

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.9.6.26.4 SET USER System Privilege


Allows a user to temporarily assume (impersonate) the specific roles and system privileges of another user.

Note
The SET USER system privilege is two words; the SETUSER statement is one word.
When you grant the SET USER system privilege, you can define the scope of impersonation as:
Any user in the database.
Any user within a specified list of users (<target_users_list>).
Any user who is a member of one or more of the specified roles (<target_roles_list>).
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.27 Views System Privileges


System privileges pertaining to performing authorized tasks on views.

Related Information
ALTER ANY VIEW System Privilege [page 1005]
CREATE ANY VIEW System Privilege [page 1006]
CREATE VIEW System Privilege [page 1006]
DROP ANY VIEW System Privilege [page 1007]
List All System Privileges [page 1008]

5.17.2.9.6.27.1 ALTER ANY VIEW System Privilege


Required to alter views owned by any user.
The ALTER ANY VIEW system privilege allows a user to:
Alter views owned by any user

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1005

Issue the COMMENT statement on views owned by any user


Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.27.2 CREATE ANY VIEW System Privilege


Required to create views owned by any user.
The CREATE ANY VIEW system privilege allows a user to:
Create views owned by any user
Issue the COMMENT statement on views owned by any user
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.27.3 CREATE VIEW System Privilege


Required to create self-owned views.
The CREATE VIEW system privilege allows a user to:
Create self-owned views
Issue the COMMENT statement on self-owned views
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

1006

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.2.9.6.27.4 DROP ANY VIEW System Privilege


Required to drop a view owned by any user.
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

5.17.2.9.6.28 Web Services System Privileges


System privileges pertaining to performing authorized task on Web services.

Related Information
MANAGE ANY WEB SERVICE System Privilege [page 1007]
List All System Privileges [page 1008]

5.17.2.9.6.28.1 MANAGE ANY WEB SERVICE System Privilege


Required to manage tasks related to Web services.
The MANAGE ANY WEB SERVICE system privilege allows a user to issue:
CREATE, ALTER, or DROP statements on Web services
COMMENT statements on Web services
Grant this system privilege using the WITH ADMIN OPTION, WITH NO ADMIN OPTION, or WITH ADMIN ONLY
OPTION clause. If you do not specify a clause, the default is WITH NO ADMIN OPTION.

Related Information
List All System Privileges [page 1008]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1007

5.17.2.9.7 List All System Privileges


List of all system privileges.
System privileges control the rights of users to perform authorized database tasks.

Related Information
ACCESS SERVER LS System Privilege [page 986]
ALTER ANY INDEX System Privilege [page 976]
ALTER ANY MATERIALIZED VIEW System Privilege [page 979]
ALTER ANY OBJECT System Privilege [page 981]
ALTER ANY OBJECT OWNER System Privilege [page 981]
ALTER ANY PROCEDURE System Privilege [page 987]
ALTER ANY SEQUENCE System Privilege [page 992]
ALTER ANY TABLE System Privilege [page 996]
ALTER ANY TEXT CONFIGURATION System Privilege [page 1000]
ALTER ANY TRIGGER System Privilege [page 1002]
ALTER ANY VIEW System Privilege [page 1005]
ALTER DATABASE System Privilege [page 965]
ALTER DATATYPE System Privilege [page 969]
BACKUP DATABASE System Privilege [page 966]
CHANGE PASSWORD System Privilege [page 1003]
CHECKPOINT System Privilege [page 966]
COMMENT ANY OBJECT System Privilege [page 982]
CREATE ANY INDEX System Privilege [page 976]
CREATE ANY MATERIALIZED VIEW System Privilege [page 978]
CREATE ANY OBJECT System Privilege [page 982]
CREATE ANY PROCEDURE System Privilege [page 988]
CREATE ANY SEQUENCE System Privilege [page 992]
CREATE ANY TABLE System Privilege [page 997]
CREATE ANY TEXT CONFIGURATION System Privilege [page 1001]
CREATE ANY TRIGGER System Privilege [page 1003]
CREATE ANY VIEW System Privilege [page 1006]
CREATE DATATYPE System Privilege [page 970]
CREATE EXTERNAL REFERENCE System Privilege [page 973]
CREATE MATERIALIZED VIEW System Privilege [page 978]
CREATE MESSAGE System Privilege [page 980]
CREATE PROCEDURE System Privilege [page 988]
CREATE PROXY TABLE System Privilege [page 997]
CREATE TABLE System Privilege [page 997]
CREATE TEXT CONFIGURATION System Privilege [page 1001]

1008

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

CREATE VIEW System Privilege [page 1006]


DEBUG ANY PROCEDURE System Privilege [page 971]
DELETE ANY TABLE System Privilege [page 998]
DROP ANY INDEX System Privilege [page 977]
DROP ANY MATERIALIZED VIEW System Privilege [page 979]
DROP ANY OBJECT System Privilege [page 983]
DROP ANY PROCEDURE System Privilege [page 988]
DROP ANY SEQUENCE System Privilege [page 993]
DROP ANY TABLE System Privilege [page 998]
DROP ANY TEXT CONFIGURATION System Privilege [page 1002]
DROP ANY VIEW System Privilege [page 1007]
DROP CONNECTION System Privilege [page 966]
DROP DATATYPE System Privilege [page 970]
DROP MESSAGE System Privilege [page 980]
EXECUTE ANY PROCEDURE System Privilege [page 989]
LOAD ANY TABLE System Privilege [page 999]
INSERT ANY TABLE System Privilege [page 998]
MANAGE ANY DBSPACE System Privilege [page 971]
MANAGE ANY EVENT System Privilege [page 972]
MANAGE ANY EXTERNAL ENVIRONMENT System Privilege [page 973]
MANAGE ANY EXTERNAL OBJECT System Privilege [page 974]
MANAGE ANY LDAP SERVER System Privilege [page 977]
MANAGE ANY LOGIN POLICY System Privilege [page 1004]
MANAGE ANY MIRROR SERVER System Privilege [page 985]
MANAGE ANY OBJECT PRIVILEGES System Privilege [page 984]
MANAGE ANY SPATIAL OBJECT System Privilege [page 995]
MANAGE ANY STATISTICS System Privilege [page 995]
MANAGE ANY USER System Privilege [page 1004]
MANAGE ANY WEB SERVICE System Privilege [page 1007]
MANAGE AUDITING System Privilege [page 989]
MANAGE MULTIPLEX System Privilege [page 986]
MANAGE PROFILING System Privilege [page 967]
MANAGE REPLICATION System Privilege [page 990]
MANAGE ROLES System Privilege [page 991]
MONITOR System Privilege [page 967]
READ CLIENT FILE System Privilege [page 974]
READ FILE System Privilege [page 975]
REORGANIZE ANY OBJECT System Privilege [page 984]
SELECT ANY TABLE System Privilege [page 999]
SERVER OPERATOR System Privilege [page 994]
SET ANY PUBLIC OPTION System Privilege [page 968]
SET ANY SECURITY OPTION System Privilege [page 968]
SET ANY SYSTEM OPTION System Privilege [page 968]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1009

SET ANY USER DEFINED OPTION System Privilege [page 969]


SET USER System Privilege [page 1005]
TRUNCATE ANY TABLE System Privilege [page 999]
UPDATE ANY TABLE System Privilege [page 1000]
UPGRADE ROLE System Privilege [page 991]
USE ANY SEQUENCE System Privilege [page 993]
VALIDATE ANY OBJECT System Privilege [page 984]
WRITE CLIENT FILE System Privilege [page 975]
WRITE FILE System Privilege [page 975]

5.17.3 Login Mappings


Map a Windows user profile or a Kerberos principal to an existing user in the database to maintain a single user
ID for database connections, operating system logins, and network logins.

Related Information
Creating a Login Mapping [page 1010]
Deleting a Login Mapping [page 1012]
Generating Login Mapping DDL Commands [page 1013]
Viewing Login Mapping Properties [page 1014]
Login Mapping Privilege Summary [page 1016]

5.17.3.1 Creating a Login Mapping


Create a login mapping to allow easier connection to a network server on Windows or a database that uses the
Kerberos network authentication protocol.

Prerequisites
Database Version

Login Mapping Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

USER ADMIN authority along with SELECT permission on the SYSLOGINMAP


view

1010

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Login Mapping Privileges Required

SAP IQ 16.0

MANAGE ANY USER system privilege along with one of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

The SAP IQ system is running, registered, and authenticated.


You are licensed for the Advanced Security option (IQ_SECURITY).

Context

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click Login Mappings.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Which type of login mapping do you want to create?

Select Kerberos to map a Kerberos principal or


Integrated to map a Windows user profile.

Select a resource on which the login mapping will be cre


ated.

Select the name of the server.

What do you want to name the login mapping?

Enter a unique name for the new login map; maximum 128
characters.

Which database user do you want to associate with the


login mapping?

Select the name of the user.

6. (Optional) On the Comment page, enter a comment for the login mapping.
7. Click Finish.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1011

Results

Note
If you do not have the SELECT ANY TABLE system privilege or SELECT permission on the SYSLOGINMAP
view, the login mapping is successfully created, but does not appear on the list.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.3.2 Deleting a Login Mapping


Delete a login mapping for a Windows user profile or a Kerberos principal.

Prerequisites
Database Version

Login Mapping Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

USER ADMIN authority along with SELECT permission on the SYSLOGINMAP


view

SAP IQ 16.0

MANAGE ANY USER system privilege along with one of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

The SAP IQ system is running, registered, and authenticated.


You are licensed for the Advanced Security option (IQ_SECURITY), if deleting a login mapping for a
Kerberos principal.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

1012

IQ Servers

Security , and then click Login Mappings.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Note
If you do not have the SELECT ANY TABLE system privilege or SELECT permission on the
SYSLOGINMAP view, the list of login mappings is empty.
3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Click Yes to confirm deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.3.3 Generating Login Mapping DDL Commands


Display the data description language SQL code for adding a login mapping to the database. The SQL code can
be a useful reference and training tool.

Prerequisites
Database Version

Login Mapping Privileges Required

SAP IQ 15.3 and 15.4

SELECT permission on the SYSLOGINMAP view

SAP IQ 16.0

One of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

The SAP IQ system is running, registered, and authenticated.


You are licensed for the Advanced Security option (IQ_SECURITY).

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1013

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click Login Mappings.

Note
If you do not have the SELECT ANY TABLE system privilege or SELECT permission on the
SYSLOGINMAP view, the list of login mappings is empty.
3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view shows the SQL code used to create the selected login mappings.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.3.4 Viewing Login Mapping Properties


Display the properties for the selected login mapping.

Prerequisites
Database Version

Login Mapping Privileges Required

SAP IQ 15.3 and 15.4

View Login Mapping properties SELECT permission on the SYSLOGINMAP view


Modify Login Mapping comment one of:

DBA authority
USER ADMIN authority along with SELECT permission on the SYSLOGINMAP
view

1014

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Login Mapping Privileges Required

SAP IQ 16.0

View any login mapping property page one of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

Modify a login mapping comment MANAGE ANY USER system privilege along with
one of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click Login Mappings.

Note
If you do not have the SELECT ANY TABLE system privilege or SELECT permission on the
SYSLOGINMAP view, the list of login mappings is empty.
3. In the right pane, select an item, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
You can only edit the Comment section; the rest of the property page is read-only.
5. View or modify the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Login name (Read-only)

Name of the login mapping.

Type (Read-only)

Type of login mapping. Valid values


are:

Database user (Read-only)

SAP IQ Cockpit
Administer SAP IQ

Kerberos

Integrated

Name of the user associated with the


login mapping.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1015

Page

Property

Description

Database (Read-only)

Name of the database the login map


ping is created on.

Comment

Text field for adding optional com


ments.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.3.5 Login Mapping Privilege Summary


A list of the system privileges and object permissions required to complete the various login mapping tasks.

Creating a Login Mapping


Database Version

Login Mapping Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

USER ADMIN authority along with SELECT permission on the SYSLOGINMAP


view

SAP IQ 16.0

MANAGE ANY USER system privilege along with one of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

Deleting a Login Mapping


Database Version

Login Mapping Privileges Required

SAP IQ 15.3 and 15.4

One of:

DBA authority

USER ADMIN authority along with SELECT permission on the SYSLOGINMAP


view

1016

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Login Mapping Privileges Required

SAP IQ 16.0

MANAGE ANY USER system privilege along with one of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

Generating Login Mapping DDL Commands


Database Version

Login Mapping Privileges Required

SAP IQ 15.3 and 15.4

SELECT permission on the SYSLOGINMAP view

SAP IQ 16.0

One of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

Viewing Login Mapping Properties


Database Version

Login Mapping Privileges Required

SAP IQ 15.3 and 15.4

View Login Mapping properties SELECT permission on the SYSLOGINMAP view


Modify Login Mapping comment one of:

DBA authority
USER ADMIN authority along with SELECT permission on the SYSLOGINMAP
view

SAP IQ 16.0

View any login mapping property page one of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

Modify a login mapping comment MANAGE ANY USER system privilege along with
one of:

SELECT ANY TABLE system privilege

SELECT permission on the SYSLOGINMAP view

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1017

Adding Permissions on a View or Materialized View to a User or Role [page 916]


Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.17.4 Login Policies


Login policies govern only the rules for user login and are separate from authorities and permissions.
A login policy is a named object in a database that consists of a set of rules that are applied when you create a
database connection for a user. All new databases include a root login policy. You can modify the root login
policy values, but you cannot delete the policy. Login policies are not inherited through group memberships.

Related Information
Creating a Login Policy for a Simplex [page 1019]
Creating a Login Policy for a Multiplex [page 1022]
Deleting a Login Policy [page 1026]
Generating Login Policy DLL Command [page 1027]
Viewing or Modifying Login Policy Properties [page 1028]
Login Policy Privilege Summary [page 1032]
Add Logical Servers to the Login Policy [page 349]
Viewing or Modifying Login Policy Properties [page 1028]
Login Policy Privilege Summary [page 1032]

1018

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.4.1 Creating a Login Policy for a Simplex


Create a login policy to define password and login parameters for users connecting to a simplex database.

Prerequisites
Database Version

Login Policy Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

MANAGE ANY LOGIN POLICY system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a simplex.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click Login Policies.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Login Policy Name page, specify:
Property

Description

Select the server for which the login policy will be created

Select the system for which the login policy will be cre
ated.

What do you want to name the new login policy?

Enter a unique name for the new login policy; maximum


128 characters.

What would you like the comment to be for this login pol
icy.

(Optional) Enter a comment for the login policy.

6. On the Login Policy Options page, specify:

Note
For each option, if no value is defined in the Value column, the root policy value is used.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1019

Property

Description

Password life time

Number of days the password is valid. The user must re


set the password when the lifetime expires. Valid range is
0 - unlimited (default).

Password grace time

Number of days before password expiry that users re


ceive warnings that the password is about to expire. Valid
range is 0 (default) - unlimited.

Password expiry on next login

Whether the user must reset the password at the next


login. Valid values are ON and OFF (default).

Locked

Whether the user account is locked when maximum num


ber of failed login attempts is exceeded. Valid values are
ON and OFF (default).

Maximum connections

Number of times the same user can be logged in to the


server. Valid range is 0 - unlimited (default).

Maximum failed login attempts

Number of failed login attempts before the account is


locked. Valid range is 0 - unlimited (default).

Maximum days since login

Number of days allowed between logins before the ac


count is locked. Valid range is 0 - unlimited (default).

Auto unlock time (16.0 only)

Time period after which locked accounts are automati


cally unlocked. This option can be defined in any login pol
icy, including the root login policy. Valid range is 0 - unlim
ited (default).

Change password dual control (16.0 only)

Requires input from two users, each granted the CHANGE


PASSWORD system privilege, to change the password of
another user. Valid values are ON and OFF (default).

Default logical server (16.0 only)

Sets the logical server if the connection string omits a


Logical Server parameter. Valid values are:
Name name of an existing user-defined logical server
AUTO value of the default logical server in the root
login policy.
COORDINATOR the current coordinator node
NONE denies access to any multiplex server.
OPEN use alone or with the name of a user-defined
logical server. Allows access to all multiplex nodes
that are not members of any user-defined logical
servers.
SERVER allows access to all of the multiplex nodes,
subject to the semantics of the SERVER logical
server.

DQP Enabled (15.3, 15.4 only)

Enables or disables DQP at the connection level. Default is


ON.

Clear All Overridden Values

Clears all override values set.

Restore to IQ Default

Changes all option settings back to default values.

7. (Optional) (16.0 only) On the LDAP page, specify:

1020

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Enable LDAP user authentication

Select to enable SAP IQ LDAP


user authentication and config
ure SAP IQ LDAP properties.

Primary LDAP server

Name of the primary SAP IQ


LDAP server.

Secondary LDAP server

Name of the secondary SAP IQ


LDAP server.

Auto failback period

Time period in minutes after


which automatic failback to the
primary server is attempted.
Valid range is 0 2147483647.
Default value is 15 minutes.

Failover to standard authentication

Select to allow authentication


with Standard authentication
when authentication with the
SAP IQ LDAP server fails due to
system resources, network out
age, connection timeouts, or
similar system failures. It does
not allow an actual authentica
tion failure returned from an
SAP IQ LDAP server to failover
to Standard authentication. De
fault value is ON.

Record LDAP DN refresh time

Select to record the refresh SAP


IQ LDAP server DN time. During
user authentication, this value is
compared against the corre
sponding value found for the
user in the ISYSUSER system ta
ble. If the value in the login policy
is newer than the value defined
in ISYSUSER, a search for a new
user DN is triggered and the ISY
SUSER system table is updated.
The value is stored as a string in
the servers default format. Re
gardless of the servers local
timezone, the value is stored in
Coordinated Universal Time
(UTC).

8. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1021

5.17.4.2 Creating a Login Policy for a Multiplex


Create a login policy to define password and login parameters for users connecting to a multiplex database.
Multiplex servers can only be accessed by logical servers, which can be assigned the login policy.

Prerequisites
Database Version

Login Policy Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

MANAGE ANY LOGIN POLICY system privilege

The SAP IQ system is running, registered, and authenticated.


The logged in SAP IQ system is a multiplex.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click Login Policies.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Login Policy Name page, specify:
Property

Description

Select the server for which the login policy will be created

Select the system for which the login policy will be cre
ated.

What do you want to name the new login policy?

Enter a unique name for the new login policy; maximum


128 characters.

What would you like the comment to be for this login pol
icy.

(Optional) Enter a comment for the login policy.

6. On the Login Policy Options page, specify:

Note
For each option, if no value is defined in the Value column, the root policy value is used.

1022

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Password life time

Number of days the password is valid. The user must re


set the password when the lifetime expires. Valid range is
0 - unlimited (default).

Password grace time

Number of days before password expiry that users re


ceive warnings that the password is about to expire. Valid
range is 0 (default) - unlimited.

Password expiry on next login

Whether the user must reset the password at the next


login. Valid values are ON and OFF (default).

Locked

Whether the user account is locked when maximum num


ber of failed login attempts is exceeded. Valid values are
ON and OFF (default).

Maximum connections

Number of times the same user can be logged in to the


server. Valid range is 0 - unlimited (default).

Maximum failed login attempts

Number of failed login attempts before the account is


locked. Valid range is 0 - unlimited (default).

Maximum days since login

Number of days allowed between logins before the ac


count is locked. Valid range is 0 - unlimited (default).

Auto unlock time (16.0 only)

Time period after which locked accounts are automati


cally unlocked. This option can be defined in any login pol
icy, including the root login policy. Valid range is 0 - unlim
ited (default).

Change password dual control (16.0 only)

Requires input from two users, each granted the CHANGE


PASSWORD system privilege, to change the password of
another user. Valid values are ON and OFF (default).

Default logical server (16.0 only)

Sets the logical server if the connection string omits a


Logical Server parameter. Valid values are:
Name name of an existing user-defined logical server
AUTO value of the default logical server in the root
login policy.
COORDINATOR the current coordinator node
NONE denies access to any multiplex server.
OPEN use alone or with the name of a user-defined
logical server. Allows access to all multiplex nodes
that are not members of any user-defined logical
servers.
SERVER allows access to all of the multiplex nodes,
subject to the semantics of the SERVER logical
server.

DQP Enabled (15.3, 15.4 only)

Enables or disables DQP at the connection level. Default is


ON.

Clear All Overridden Values

Clears all override values set.

Restore to IQ Default

Changes all option settings back to default values.

7. On the Logical Server Assignment page, specify:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1023

Property

Description

CUSTOM

Allows access to user defined logical server(s), including


OPEN. Select each logical server assignment to be over
ridden.

DEFAULT

Inherits logical server assignment of ROOT login policy.

NONE

Disallows access to any logical server.

SERVER

Allows access to every multiplex node. Connection re


quires ACCESS SERVER LS system privilege.

8. On the Logical Server Level Option Overrides page, specify:


Property

Description

Max Conn.

Specifies the value of Max Conn (maximum connection)


parameter, which overrides the inherited value.

DQP Enabled (15.3, 15.4 only)

To set the value, click in the Max Conn. column be


side the logical server to be overridden and specify
the override value. The valid range is 0 - unlimited
(default).

To set the value to Unlimited, click in the Max Conn.


column, click the arrow, and select Unlimited.

Enables or disables DQP at the connection level. Valid val


ues are ON (default) and OFF.

9. (Optional) (16.0 only) On the LDAP page, specify:

1024

Property

Description

Enable LDAP user authentication

Select to enable SAP IQ LDAP


user authentication and config
ure SAP IQ LDAP properties.

Primary LDAP server

Name of the primary SAP IQ


LDAP server.

Secondary LDAP server

Name of the secondary SAP IQ


LDAP server.

Auto failback period

Time period in minutes after


which automatic failback to the
primary server is attempted.
Valid range is 0 2147483647.
Default value is 15 minutes.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Failover to standard authentication

Select to allow authentication


with Standard authentication
when authentication with the
SAP IQ LDAP server fails due to
system resources, network out
age, connection timeouts, or
similar system failures. It does
not allow an actual authentica
tion failure returned from an
SAP IQ LDAP server to failover
to Standard authentication. De
fault value is ON.

Record LDAP DN refresh time

Select to record the refresh SAP


IQ LDAP server DN time. During
user authentication, this value is
compared against the corre
sponding value found for the
user in the ISYSUSER system ta
ble. If the value in the login policy
is newer than the value defined
in ISYSUSER, a search for a new
user DN is triggered and the ISY
SUSER system table is updated.
The value is stored as a string in
the servers default format. Re
gardless of the servers local
timezone, the value is stored in
Coordinated Universal Time
(UTC).

10. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1025

5.17.4.3 Deleting a Login Policy


Delete a login policy for a simplex or multiplex that is not currently assigned to a user. The root login policy
cannot never be deleted.

Prerequisites
Database Version

Login Policy Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

MANAGE ANY LOGIN POLICY system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click Login Policies.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Verify that the list of login policies to be deleted is correct and click Yes.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1026

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.4.4 Generating Login Policy DLL Command


Generate data description language for one or more login policies. The DDL code can be a useful resource and
training tool.

Prerequisites
Database Version

Login Policy Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click Login Policies.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view opens, showing the SQL code used to create the selected login policies.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1027

5.17.4.5 Viewing or Modifying Login Policy Properties


View or change properties of a login policy for a simplex or multiplex.

Prerequisites
Database Version

Login Policy Privileges Required

SAP IQ 15.3 and 15.4

View any login policy property page none


Modify any login policy property one of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

View any login policy property page none


Modify any login policy property MANAGE ANY LOGIN POLICY system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click Login Policies.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.

1028

Page

Property

Description

General

Name

Name of the login policy.

Options

Login policy options. Valid values are:

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description
Password life time

Number of days the pass


word is valid. The user must
reset the password when
the lifetime expires. Valid
range is 0 - unlimited (de
fault).

Password grace time

Number of days before


password expiry that users
receive warnings that the
password is about to expire.
Valid range is 0 (default) unlimited.

Password expiry on next


login

Whether the user must re


set the password at the
next login. Valid values are
ON and OFF (default).

Locked

Whether the user account is


locked when maximum
number of failed login at
tempts is exceeded. Valid
values are ON and OFF (de
fault).

Maximum connections

Number of times the same


user can be logged in to the
server. Valid range is 0 - un
limited (default).

Maximum failed login at


tempts

Number of failed login at


tempts before the account
is locked. Valid range is 0 unlimited (default).

Maximum days since login

Number of days allowed be


tween logins before the ac
count is locked. Valid range
is 0 - unlimited (default).

Auto unlock time (16.0


only)

Time period after which


locked accounts are auto
matically unlocked. This op
tion can be defined in any
login policy, including the
root login policy. Valid
range is 0 - unlimited (de
fault).

Change password dual con Requires input from two


trol (16.0 only)
users, each granted the
CHANGE PASSWORD sys
tem privilege, to change the
password of another user.
Valid values are ON and
OFF (default).

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1029

Page

Property

Description
Default logical server (16.0
only)

Sets the logical server if the


connection string omits a
Logical Server parameter.
Valid values are:
Name name of an ex
isting user-defined log
ical server
AUTO value of the de
fault logical server in
the root login policy.
COORDINATOR the
current coordinator
node
NONE denies access
to any multiplex server.
OPEN use alone or
with the name of a
user-defined logical
server. Allows access
to all multiplex nodes
that are not members
of any user-defined
logical servers.
SERVER allows access
to all of the multiplex
nodes, subject to the
semantics of the
SERVER logical server.

LDAP (16.0 only)

1030

DQP Enabled (15.3, 15.4


only)

Enables or disables DQP at the connection level. Default is


ON.

Enable LDAP user authenti


cation

Select to enable SAP IQ LDAP user authentication and


configure SAP IQ LDAP properties.

Primary LDAP server

Name of the primary SAP IQ LDAP server.

Secondary LDAP server

Name of the secondary SAP IQ LDAP server.

Auto failback period

Time period in minutes after which automatic failback to


the primary server is attempted. Valid range is 0
2147483647. Default value is 15 minutes.

Failover to standard au
thentication

Select to allow authentication with Standard authentica


tion when authentication with the SAP IQ LDAP server
fails due to system resources, network outage, connec
tion timeouts, or similar system failures. It does not allow
an actual authentication failure returned from an SAP IQ
LDAP server to failover to Standard authentication. De
fault value is ON.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Logical Server Assignment

Property

Description

Update LDAP DN refresh


time

Select to update the current time value associated with


the login policy. During user authentication, this value is
compared against the corresponding value found for the
user in the ISYSUSER system table. If the value in the
login policy is newer than the value defined in ISYSUSER,
a search for a new user DN is triggered and the ISYSUSER
system table is updated. The value is stored as a string in
the servers default format. Regardless of the servers lo
cal timezone, the value is stored in Coordinated Universal
Time (UTC).

Assignment Type

Logical server assignment type. Valid values are:

(Multiplex only)

Logical Server Option Over

CUSTOM

Allows access to user de


fined logical server(s), in
cluding OPEN. Select each
logical server assignment to
be overridden.

DEFAULT

Inherits logical server as


signment of ROOT login
policy.

NONE

Disallows access to any log


ical server.

SERVER

Allows access to every mul


tiplex node. Connection re
quires ACCESS SERVER LS
system privilege.

(For Custom and Default Assignment Types only on any login policy EXCEPT root)

rides
(Multiplex only)
Max Conn.

DQP Enabled (15.3, 15.4


only)

Specifies the value of Max Conn (maximum connection)


parameter, which overrides the inherited value.

To set the value, click in the Max Conn. column be


side the logical server to be overridden and specify
the override value. The valid range is 0 - unlimited
(default).

To set the value to Unlimited, click in the Max Conn.


column, click the arrow, and select Unlimited.

Enables or disables DQP at the connection level. Valid val


ues are ON (default) and OFF.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1031

Add Logical Servers to the Login Policy [page 349]


Login Policies [page 1018]
Login Policy Privilege Summary [page 1032]

5.17.4.6 Login Policy Privilege Summary


A list of the system privileges and object permissions required to complete the various login policy tasks.

Creating a Login Policy for a Simplex or Multiplex


Database Version

Login Policy Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

MANAGE ANY LOGIN POLICY system privilege

Deleting a Login Policy


Database Version

Login Policy Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

MANAGE ANY LOGIN POLICY system privilege

Generating Login Policy DDL Commands


Database Version

Login Policy Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

1032

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Viewing Login Policy Properties


Database Version

Login Policy Privileges Required

SAP IQ 15.3 and 15.4

View any login policy property page none


Modify any login policy property one of:

SAP IQ 16.0

DBA authority

USER ADMIN authority

View any login policy property page none


Modify any login policy property MANAGE ANY LOGIN POLICY system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]
Add Logical Servers to the Login Policy [page 349]
Login Policies [page 1018]
Viewing or Modifying Login Policy Properties [page 1028]

5.17.5 LDAP Servers


The SAP IQ LDAP server configuration object allows LDAP user authentication with SAP IQ.

Note
SAP IQ LDAP user authentication is only supported with SAP IQ 16.0

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1033

Related Information
LDAP Server Overview [page 1034]
Creating an LDAP Server Configuration Object [page 1034]
Deleting an LDAP Server Configuration Object [page 1037]
Activating an LDAP Server Configuration Object [page 1038]
Suspending an LDAP Server Configuration Object [page 1039]
Refreshing an LDAP Server Configuration Object [page 1040]
Validating a User on an External LDAP Server [page 1041]
Generating LDAP Server Configuration Object DDL Commands [page 1042]
Viewing or Modifying LDAP Server Configuration Object Properties [page 1043]
LDAP Server Configuration Object Privilege Summary [page 1045]

5.17.5.1 LDAP Server Overview


SAP IQ uses a configuration object called LDAP server to provide connections between the SAP IQ server and
external LDAP servers.
Despite its name, the SAP IQ LDAP server is an object that resides on the SAP IQ server and is NOT an actual
server. The LDAP server configuration object's sole function is to provide a connection to a physical LDAP
server to allow LDAP user authentication. Any settings of the LDAP server database configuration object apply
solely to the SAP IQ side of the LDAP user authentication equation. No LDAP server configuration object
settings are written to the physical LDAP server.

Note
Any references to LDAP server in the SAP IQ Cockpit user interface refer to the SAP IQ LDAP server
configuration object, not the external physical LDAP server.

5.17.5.2 Creating an LDAP Server Configuration Object


Create an LDAP server configuration object to enable LDAP user authentication.

Prerequisites
Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY LDAP SERVER system privilege

1034

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
You are licensed for the Advanced Security option (IQ_SECURITY).

Context
Parameters defined during the creation of an LDAP server configuration object are stored in the
ISYSLDAPSERVER (system view SYSLDAPSERVER) system table.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click LDAP Servers.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the LDAP server will be cre


ated

Select the system for which the LDAP server configura


tion object will be created.

What do you want to name the new LDAP server?Validate


LDAP server properties but do not create LDAP server

Enter a unique name for the new LDAP server configura


tion object; maximum of 128 characters.
(Optional) Select to validate the properties defined for the
new LDAP server configuration object without actually
creating it.

Activate LDAP server after creation

(Optional) Select to activate the new LDAP server config


uration object after creation.

Note
The Validate LDAP server properties but do not create LDAP server and Activate LDAP server after
creation options are mutually exclusive. When one is selected, the other becomes unavailable.
6. On the Search DN page, specify:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1035

Property

Description

Search URL

Host (by name or by IP address), port number, and


search to be performed to look up the DN for a given user
ID. For example: ldap://my_LDAPserver:389/
dc=MyCompany,dc=com??sub?cn=*

Access Account

Distinguished name for a user used to connect to the


LDAP server configuration object. For example: cn=iqad
min, cn=Users, dc=mycompany, dc=com

Password

Password for the Access account.

Encrypted

Indicates whether the password is provided in encrypted


format.

7. On the Attributes page, specify:


Property

Description

Authentication URL

Host (by name or by IP address), port number, and


search to be performed to look up the DN for a given user
ID, or enter NULL.

Connection timeout

Length of time after which the system stops trying to con


nect to the LDAP server configuration object. Value can
be entered in milliseconds, seconds, or minutes. Valid
range is between 1-3600000 milliseconds (3600 seconds
or 60 minutes). Default value is 10000 milliseconds.

Connection retries

Maximum number of connection retries. Valid range is


1-60. Default value is 3.

Use TLS protocol on LDAP connections

Enables the TLS protocol on LDAP connections.

Note
This option is unavailable if the SEARCH URL value
specifies ldps://...

8. (Optional) On the Comment page, specify a comment for the LDAP server configuration object.

Note
This option is unavailable when the option Validate LDAP server properties but do not create LDAP
server is selected.
9. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1036

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.5.3 Deleting an LDAP Server Configuration Object


Delete an LDAP server configuration object.

Prerequisites
Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY LDAP SERVER system privilege

The SAP IQ system is running, registered, and authenticated.


The LDAP server configuration object is in a suspended state.
The LDAP server configuration object is not referenced in any login policies.
You are licensed for the Advanced Security option (IQ_SECURITY).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click LDAP Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. (Optional) Select With Suspend to suspend the LDAP server configuration objects before deletion.

Note
An LDAP server configuration object must have a status of SUSPENDED before it can be deleted.
6. (Optional) Select Drop all references to remove all references of the LDAP server configuration objects
being deleted from all login policies.

Note
An LDAP server configuration object cannot be deleted if it is referenced in any login policy.
7. Verify that the list of LDAP server configuration objects to be deleted is correct and click Yes.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1037

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.5.4 Activating an LDAP Server Configuration Object


Set an LDAP server configuration object to a READY state. The state of the LDAP server configuration object
changes to ACTIVE once a user authentication request successfully processes. Multiple LDAP server
configuration objects can be activated at the same time.

Prerequisites
Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY LDAP SERVER system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected LDAP server cannot have a status of READY or ACTIVE.
You are licensed for the Advanced Security option (IQ_SECURITY).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click LDAP Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Activate.
5. Verify that the list of LDAP server configuration objects to be activated is correct and click Yes.
If activation is successful, the value in the State column beside the LDAP server configuration object
changes to READY.

1038

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.5.5 Suspending an LDAP Server Configuration Object


Put an LDAP server configuration object into maintenance mode. While in maintenance mode, all connections
to the LDAP server configuration object are closed and LDAP user authentication is unavailable.

Prerequisites
Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY LDAP SERVER system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
You are licensed for the Advanced Security option (IQ_SECURITY).
The selected LDAP server cannot have a status of SUSPENDED.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click LDAP Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Suspend.
5. Verify that the list of LDAP server configuration objects to be suspended is correct and click Yes.
If suspension is successful, the value in the State column beside the LDAP server configuration object
changes to SUSPENDED.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1039

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.5.6 Refreshing an LDAP Server Configuration Object


Re-initializes LDAP user authentication on the LDAP server configuration object.

Prerequisites
Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY LDAP SERVER system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The selected LDAP server must have a status of READY or ACTIVE.
You are licensed for the Advanced Security option (IQ_SECURITY).

Context
All connections to the LDAP server configuration object are closed and server option values are re-read and
applied to any new connections to the LDAP server configuration object or to incoming authentication
requests to an SAP IQ server. This command does not change the state of the LDAP server configuration
object and does not change any existing connections from a client to an SAP IQ server.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click LDAP Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.

1040

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

4. Select Refresh.
5. Verify that the list of LDAP server configuration objects to be refreshed is correct and click Yes.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.5.7 Validating a User on an External LDAP Server


Validate the existence of a specific user on an external LDAP server.

Prerequisites
Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY LDAP SERVER system privilege

The SAP IQ system is running, registered, and authenticated.


You are licensed for the Advanced Security option (IQ_SECURITY).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click LDAP Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Validate User.
5. Specify the user name and expected user DN to be validated and click Validate.
A message appears indicating whether or not validation of the user was successful.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1041

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.5.8 Generating LDAP Server Configuration Object DDL


Commands
Generate data description language for one or more LDAP server configuration objects. The DDL code can be
a useful resource and training tool.

Prerequisites
Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


You are licensed for the Advanced Security option (IQ_SECURITY).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click LDAP Servers.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. SelectGenerate DDL.
The DDL view opens, showing the SQL code used to create the LDAP Server configuration objects.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1042

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.17.5.9 Viewing or Modifying LDAP Server Configuration


Object Properties
View or change properties to an LDAP server configuration object. Any changes to an LDAP server
configuration object are applied on subsequent connections. Any connection already started when the change
is applied do not reflect the change.

Prerequisites
Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

View any LDAP server property page none


Modify any LDAP server property MANAGE ANY LDAP SERVER system privilege

The SAP IQ system is running, registered, and authenticated.


You are licensed for the Advanced Security option (IQ_SECURITY).

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Security , and then click LDAP Servers.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or edit the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General (Read-only)

Name

Name of the LDAP server configura


tion object.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1043

Page

Property

Description

State

current state of the LDAP server con


figuration object. Valid states include:
RESET one or more attributes on
the LDAP server configuration
object have been entered or
modified since last activation.
READY the LDAP server configu
ration object is ready to accept
connections.
ACTIVE the LDAP server config
uration object has performed at
least one successful LDAP user
authentication.
FAILED there is a problem con
necting to the LDAP server con
figuration object.
SUSPENDED the LDAP server
configuration object is in mainte
nance mode, and is not available
for LDAP user authentication.

Attributes

1044

Last state change

Date and time the LDAP server con


figuration object state last changed.

Search URL

Host (by name or by IP address), port


number, and search to be performed
to look up the DN for a given user ID.
For example: ldap://my_LDAPserver:
389/dc=MyCompany,dc=com??sub?
cn=*

Authentication URL

Host (by name or by IP address), port


number, and search to be performed
to look up the DN for a given user ID,
or enter NULL.

Access account

Distinguished name for a user used to


connect to the LDAP server configu
ration object. For example: cn=iqad
min, cn=Users, dc=mycompany,
dc=com

Password

Password for the Access account.

Encrypted

Indicates whether the password is


provided in encrypted format.

Connection timeout

Length of time after which the system


stops trying to connect to the LDAP
server configuration object. Value can
be entered in milliseconds, seconds,
or minutes. Valid range is between
1-3600000 milliseconds (3600 sec
onds or 60 minutes). Default value is
10000 milliseconds.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Connection retries

Maximum number of connection re


tries. Valid range is 1-60. Default
value is 3.

Use TLS protocol on LDAP connec


tions

Enables the TLS protocol on LDAP


connections.

Note
This option is unavailable if the
SEARCH URL value specifies
ldps://...
Comment

Text field for adding optional comments.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.17.5.10 LDAP Server Configuration Object Privilege


Summary
A list of the system privileges and object permissions required to complete the various LDAP server
configuration object tasks for SAP IQ.

Creating an LDAP Server Configuration Object


Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY LDAP SERVER system privilege

Deleting an LDAP Server Configuration Object


Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1045

Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 16.0

MANAGE ANY LDAP SERVER system privilege

Activating, Suspending, and Refreshing an LDAP Server Configuration


Object
Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY LDAP SERVER system privilege

Validating User
Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY LDAP SERVER system privilege

Generating LDAP Server Configuration Object DDL Commands


Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

None

Viewing or Modifying LDAP Server Configuration Object Properties


Database Version

LDAP Server Configuration Object Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

View any LDAP server property page none


Modify any LDAP server property MANAGE ANY LDAP SERVER system privilege

1046

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]

5.18 Dbspaces
Add, modify, view properties, or delete a dbspace.

Related Information
Creating a Dbspace [page 1048]
Deleting a Dbspace [page 1051]
Preallocating Space for a Dbspace [page 1052]
Generating Dbspace DDL Commands [page 1053]
Changing a Dbspace to Read-Only [page 1054]
Configuring Point-in-Time Recovery Logging Options [page 1055]
Viewing or Modifying Dbspace Properties [page 1057]
Granting Dbspace CREATE Permission [page 1059]
Revoking Dbspace CREATE Permission [page 1060]
Dbspace Privilege Summary [page 1061]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1047

5.18.1 Creating a Dbspace


Add a new dbspace to the database.

Prerequisites
Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
DAS dbspace only:
The multiplex is distributing correctly.
A shared-nothing logical server exists
You enabled distributed query processing (DQP) in the logical server policy.
You added the shared-nothing logical server to the login policy.
All DAS device file paths are valid, and DAS storage is locally mounted to each node.
All DAS devices associated with each node are in read-write mode.
You checked DAS device storage sizes. All mirror devices must be as large as primary storage.

Context
Shared-nothing multiplex requires a DAS dbspace, DAS dbfiles, and a logical server.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click Dbspaces.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the General Details page, specify:

1048

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Resource

Select a system.

Logical Server

(For DAS dbspace only) Select the shared-nothing logical server to associate with the DAS
dbspace. The shared-nothing logical server defines the set of physical servers, their local
DAS dbfiles, and their mirror DAS dbfiles. The DAS dbspace can be associated with only
one shared-nothing logical server. The DAS dbspace must span all nodes of the logical
server.

Name of dbspace to cre


ate

A unique name for the new dbspace.

Store

The store in which to create the new dbspace:


Main IQ main store for SAP IQ user data
Catalog IQ (catalog) system store for IQ metadata
RLV row-level versioning store for in-memory data. Only one dbspace can be created
in the RLV store.
Cache high-speed buffer pool extension dbspace composed of one or more DAS devi
ces attached to a simplex or multiplex node. Not a primary data store. The cache
dbspace caches copies of locally-used IQ main store read-only pages. You can create
a maximum of one cache dbspace for a simplex server. In a multiplex environment,
you can create a maximum of one cache dbspace per node. Not to be confused with
DAS Dbspace.
DAS a dbspace for shared-nothing storage of primary IQ main store data, where the
data is stored on a set of DAS devices. A DAS dbspace is associated with one logical
server, and contains a set of DAS dbfiles, and their mirror files, within the logical
server.

Striping

(For IQ main store only) status of striping for the dbspace. Valid values are:

On

Off

Read-only for IQ_SYSTEM_LOG and IQ_SYSTEM_MAIN dbspaces.


Stripe size (Kb)

(For IQ main store only) The number of kilobytes (KB) to write to each file before the diskstriping algorithm moves to the next stripe for this dbspace. Default value is 1.

Multiplex Node

(Cache only) In a multiplex, select the target multiplex node to which you are attaching the
cache dbspace. The cache dbspace is specific to this selected node.

Note
If you are creating a cache dbspace on a simplex server, you do not specify a node. The
cache dbspace is created on the selected server.

Enforce write safe

(For DAS dbspace only) Provides high availability in a shared-nothing multiplex environ
ment. On indicates that all DAS dbfiles in this DAS dbspace require mirror copies.

6. On the DB Files page, click Add.


7. In the DB File Details view, specify:
Property

Description

Logical name

User-defined name of the dbfile.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1049

Property

Description

Path to physical file on disk

Path to the physical file on disk.


It is usually best to use an absolute path. A relative path
works for simplex servers and for multiplexes that use the
SAP IQ Cockpit shared-disk facility and have the SAP IQ
Cockpit installation directory mounted in the same loca
tion on each multiplex server host. If you specify a relative
path for a simplex that is later converted to a multiplex,
the relative path might cause an error.
For a DAS dbfile, specify a path to a writer node.

Primary server

(For DAS dbfile only) Specify the writer node where the
primary DAS dbfile will be stored.

Raw device

A check mark indicates the file is on a raw device. Cache


dbspaces and DAS dbspaces normally use raw device
files.

File Size

(Not available on raw devices.) Current size of the file par


tition you allocate to the dbfile in kilobytes (KB), mega
bytes (MB), gigabytes (GB), or terabytes (TB). Minimum
file size is 8 MB.

Reserve size

(Optional, but not applicable to cache dbspace or DAS


dbspace mirror dbfiles.)
Default is 0. Extra space you allocate to the dbfile in kilo
bytes (KB), megabytes (MB), gigabytes (GB), or tera
bytes (TB). Default is 0. You can use this space to in
crease the file size if the file grows. Guideline: reserve size
should be about 30% of file size.

Mirror name

(For DAS dbfile only if you selected Enforce write safe on


DAS dbspace.) The name of the mirror DAS dbfile.

Path to mirror file on disk

(For DAS dbfile only if you selected Enforce write safe on


DAS dbspace.) Specify a path to a writer node.

Mirror server

(For DAS dbfile only if you selected Enforce write safe on


DAS dbspace.) Specify a writer node where the mirror
DAS dbfile will be stored. Cannot be the same writer node
where the primary DAS dbfile is stored.

Note
For a cache dbspace on a simplex, you can add multiple dbfiles at once. Repeat steps 6 [page 1049]
and 7 [page 1049] to add additional dbfiles.
For a cache dbspace on a multiplex node, you can add multiple dbfiles, but only one file at a time.
After creating the first dbfile, use
dbspace.

DB Files

New

to add each additional dbfile to the cache

8. Click Finish.

1050

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]
DAS Dbspaces [page 352]
DAS Dbspace Restrictions and Recommendations [page 352]
Shared-Nothing Multiplex [page 342]
Creating a DAS Dbspace and DAS Dbfiles [page 350]

5.18.2 Deleting a Dbspace


Delete (drop) a dbspace from the database.

Prerequisites
Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
For IQ (catalog) system store dbspaces, you are the only user connected to the database.
The dbspace being dropped contains no user data or user-created objects.
For a dbspace in an RLV store, there are no existing RLV-enabled tables, and the RLV dbspace is readonly.

Note
Dropping the dbspace from the RLV store prevents the creation of new RLV-enabled tables.

Context
You may drop dbspaces from the IQ main store or IQ (catalog) system store, as long as at least one dbspace in
read-write mode remains. You cannot drop the six initial dbspaces (SYSTEM, TEMPORARY, IQ_SHARED_TEMP,
IQ_SYSTEM_MAIN, IQ_SYSTEM_TEMP, and IQ_SYSTEM_MSG).

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1051

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click Dbspaces.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete
5. Click Yes to confirm deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.18.3 Preallocating Space for a Dbspace


Preallocate space for a IQ (catalog) system store dbspace.

Prerequisites
Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Context
This operation is valid only for IQ (catalog) system store dbspaces. You cannot preallocate space for a
dbspace in the IQ Main or RLV stores, or in a cache dbspace.

1052

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

SAP IQ automatically increases the size of IQ (catalog) system store DB files as additional space is needed. If
your database has a high rate of change, you can preallocate disk space for dbspaces. Proper preallocation
reduces fragmentation and improves performance.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click Dbspaces.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Pre-allocate Space.
5. Specify space to preallocate and the unit of measure (for example, 2 megabytes).
6. Click OK.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.18.4 Generating Dbspace DDL Commands


Display the data description language SQL code for creating a dbspace. The SQL code can be a useful
reference and training tool.

Prerequisites
Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1053

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click Dbspaces.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view shows the SQL code used to create the selected dbspaces.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.18.5 Changing a Dbspace to Read-Only


Change a dbspace to read-only mode.

Prerequisites
Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Context
You can add a new DB file to a read-only dbspace. Cache dbspaces are an exception; you cannot add a new DB
file to a read-only cache dbspace.

1054

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

You cannot delete a DB file from a read-only dbspace.


IQ_SYSTEM_MAIN and IQ_SHARED_TEMP and IQ (catalog) system store dbspaces cannot be read-only.
You can change paths of DB files in a read-only offline dbspace.

Note
Changing the file path here does not move the file to the new location. If a file is moved, changing the path
here only informs the SAP IQ server of the new file location.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click Dbspaces.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. On the General page, click ReadOnly.
6. Set Status to Online or Offline.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.18.6 Configuring Point-in-Time Recovery Logging Options


Define the directory path and prefix for point-in-time recovery (PITR) log files.

Prerequisites
Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1055

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click Dbspaces.

3. In the right pane, select IQ_SYSTEM_LOG, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. On the General page, configure the PITR logging settings, as needed:
Property

Description

IQ PITR Log Directory

A fully qualified path to the SAP IQ PITR log file directory. Default is
empty which places the PITR log file in the same directory as the da
tabase.

IQ PITR Log Prefix

A log file prefix for the PITR log file. Default prefix is the name of the
database.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1056

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.18.7 Viewing or Modifying Dbspace Properties


View or change the name, mode, status, and striping properties of a dbspace.

Prerequisites
Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

View any dbspace property page none


Modify dbspace permissions one of:

DBA authority

PERMS ADMIN authority

Modify any other dbspace property one of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

View any dbspace property page none


Modify dbspace permissions MANAGE ANY DBSPACE system privilege
Modify any other dbspace property MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Context
You cannot change a dbspace name if it is a system dbspace (with a name beginning with IQ_SYSTEM) or an
IQ (catalog) system store dbspace.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click Dbspaces.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1057

When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Some properties are read-only or hidden, based on the dbspace type.
Page

Property

Description

General

Name

Name of the dbspace. The RLV store dbspace can be renamed if no RLV-ena
bled tables exist. Read-only for IQ (catalog) system store type and
IQ_SHARED_TEMP, IQ_SYSTEM_LOG, IQ_SYSTEM_MAIN, IQ_SYS
TEM_MSG, and IQ_SYSTEM _TEMP dbspaces.

Type (Read-only)

Type of dbspace.

IQ PITR Log Direc


tory

(For IQ_SYSTEM_LOG dbspace only) A fully qualified path to the SAP IQ PITR
log file directory. Default is empty which places the PITR log file in the same
directory as the database.

IQ PITR Log Prefix

(For IQ_SYSTEM_LOG dbspace only) A log file prefix for the PITR log file. De
fault prefix is the name of the database.

Mode

(For IQ main store, IQ Shared Temp, IQ Message, IQ Temp and RLV types
only) Mode of the dbspace. The mode of the RLV store dbspace can be
changed, if the dbspace is online. The RLV store dbspace can only be made
read-only if no RLV-enabled tables exist. Available values are:

ReadWrite

ReadOnly

Read-only for IQ Shared Temp type and IQ_SYSTEM_LOG, IQ_SYS


TEM_MAIN dbspaces.
Status

(For IQ main store, IQ Shared Temp, IQ Message, IQ Temp and RLV types and
IQ_SYSTEM_LOG dbspace only) Status of the dbspace. The status of the RLV
store dbspace can only be changed if the dbspace is in ReadOnly mode.
Available values are:

Online

Offline

Read-only for IQ Shared Temp type and IQ_SYSTEM_LOG, IQ_SYS


TEM_MAIN dbspaces.
Striping

(For IQ main store only) status of striping for the dbspace. Valid values are:

On

Off

Read-only for IQ_SYSTEM_LOG and IQ_SYSTEM_MAIN dbspaces.

1058

Stripe size

(For IQ main store only) The number of kilobytes (KB) to write to each file be
fore the disk-striping algorithm moves to the next stripe for this dbspace. De
fault value is 1.Read-only for IQ_SYSTEM_LOG dbspace.

File

(For IQ (catalog) system store type only) Path to the dbspace.

Preallocate Space

(For IQ (catalog) system store type only) Click to preallocate disk space in
the dbspace.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Logical Server

(For DAS dbspace only) Select the shared-nothing logical server to associate
with the DAS dbspace. The shared-nothing logical server defines the set of
physical servers, their local DAS dbfiles, and their mirror DAS dbfiles. The
DAS dbspace can be associated with only one shared-nothing logical server.
The DAS dbspace must span all nodes of the logical server.

Enforce write safe

(For DAS dbspace only) Provides high availability in a shared-nothing multi


plex environment. On indicates that all DAS dbfiles in this DAS dbspace re
quire mirror copies.

Permissions

See Granting Dbspace CREATE Permission [page 1059] and Revoking Dbspace CREATE Permis
sion [page 1060].

DB Files

(For IQ main store type except IQ_SYSTEM_LOG dbspace, IQ Shared, IQ Message, IQ Temp, and
RLV types only) To manage the db files within the dbspace, click the arrow to the right of a db file
name and select an option.

IQ Log Files

(For IQ_SYSTEM_LOG dbspace only) A list of the point-in-time log files stored in the IQ_SYS
TEM_LOG dbspace.

read-only)

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.18.8 Granting Dbspace CREATE Permission


Grant dbspace create permission to users and roles. Not applicable to cache dbspaces.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1059

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click Dbspaces.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions, then click Grant in the right pane.
6. On the Welcome page, indicate whether the permission is being granted to users or roles/groups.
7. On the Grantees page, select one or more grantees. Click the box in the header row to select all available
grantees.
8. On the Permissions page, ensure Create is selected.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.18.9 Revoking Dbspace CREATE Permission


Remove dbspace create permission from users and roles. Not applicable to cache dbspaces.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

1060

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click Dbspaces.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
A list of grantees currently granted permission on the dbspace appears.
6. In the right pane, select a grantee, and click Revoke.

Caution
There is no confirmation prompt before the permission is revoked.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.18.10 Dbspace Privilege Summary


A list of the system privileges and object permissions required to complete the various dbspace tasks.

Creating a Dbspace
Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

SAP IQ Cockpit
Administer SAP IQ

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1061

Deleting a Dbspace
Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

Preallocating Space for a Dbspace


Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

Generating Dbspace DDL Commands


Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Changing a Dbspace to Read-Only


Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

1062

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Configuring Point-in-Time Recovery Logging Options


Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

Not supported

SAP IQ 16.0

MANAGE ANY DBSPACE system privilege

Viewing or Modifying Dbspace Properties


Database Version

Dbspace Privileges Required

SAP IQ 15.3 and 15.4

View any dbspace property page none


Modify dbspace permissions one of:

DBA authority

PERMS ADMIN authority

Modify any other dbspace property one of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

View any dbspace property page none


Modify dbspace permissions MANAGE ANY DBSPACE system privilege
Modify any other dbspace property MANAGE ANY DBSPACE system privilege

Granting and Revoking Dbspace CREATE Permission


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

MANAGE ANY DBSPACE system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1063

Adding Permissions on a Table or Column to a User or Role [page 907]


Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.19 Dbfiles
Add, modify, view properties, or delete a database file.

Related Information
Creating a Dbfile [page 1065]
Deleting a Dbfile [page 1068]
Emptying a Dbfile [page 1069]
Generating Dbfile DDL Commands [page 1070]
Viewing or Modifying Dbfile Properties [page 1071]
Dbfile Privilege Summary [page 1075]

1064

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.19.1 Creating a Dbfile


Add a dbfile to a dbspace. Follow these steps to add files to shared dbspaces (IQ_SYSTEM_MAIN,
IQ_SHARED_TEMP, Cache, RLV), user-defined dbspaces, and shared-nothing (DAS) dbspaces.

Prerequisites
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The dbspace is online.
If adding a dbfile to a cache dbspace, the dbspace is in read-write mode.
If adding a DAS dbfile, a shared-nothing logical server and DAS dbspace exists.

Context

Note
Additional considerations exist when creating DAS dbfiles. See Creating a DAS Dbspace and DAS
Dbfiles [page 350].
Adding dbfiles to IQ_SYSTEM_MAIN in a multiplex environment synchronizes all running secondary
nodes.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click DB Files.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1065

Tip
You can also create a dbfile from the Dbspaces Properties page by selecting DB Files in the left pane,
and then

Folder

New .

5. On the DB Files page, specify:select the system to which you are adding the dbfile.
Property

Description

Resource

Select a system.

Multiplex node (Mulitplex only)

Select the node containing the dbspace to which you are


adding the dbfile.

Dbspace

Select the dbspace to which you are adding the dbfile.

Note
For cache dbspaces, each node shows only the cache
dbspace that resides on it. For main store dbspaces,
all dbspaces show regardless of which multiplex node
is selected.

6. Click Add.
7. On the Details page, specify:
Property

Description

Logical name

User-defined name of the dbfile.

Path to physical file on disk

Path to the physical file on disk. It is usually best to use an


absolute path. A relative path works for simplex servers
and for multiplexes that use the SAP IQ Cockpit shareddisk facility and have the SAP IQ Cockpit installation di
rectory mounted in the same location on each multiplex
server host. If you specify a relative path for a simplex
that is later converted to a multiplex, the relative path
might cause an error.
For a DAS dbfile, specify a path to a writer node.

Primary server

(For DAS dbfile only) Specify the writer node where the
primary DAS dbfile will be stored.

Shared Path

Indicates that the file is a shared file system (SFS) DAS


dbfile.

Note
In this release, SFS is supported for primary DAS
dbfiles only, not mirror DAS dbfiles.
Raw device

1066

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

A check mark indicates the file is on a raw device. Cache


dbspaces and DAS dbspaces normally use raw device
files.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

File size

(Not available on raw devices.) Current size of the file par


tition you allocate to the dbfile in kilobytes (KB), mega
bytes (MB), gigabytes (GB), or terabytes (TB). Minimum
file size is 8 MB.

Reserve size

(Optional, but not applicable to cache dbspace or DAS


dbspace mirror dbfiles.)
Default is 0. Extra space you allocate to the dbfile in kilo
bytes (KB), megabytes (MB), gigabytes (GB), or tera
bytes (TB). Default is 0. You can use this space to in
crease the file size if the file grows. Guideline: reserve size
should be about 30% of file size.

Mode

(Appears only when adding a dbfile to the

IQ_SHARED_TEMP dbspace in a multiplex.


Mode of the dbspace. Valid modes are:

ReadOnly

ReadWrite

Force ReadWrite

You cannot change the mode for dbfiles in the RLV store
dbspace.
For dbfiles in the Cache dbspace, you can only change the
mode if the dbspace is ONLINE.
Mirror name

(For DAS dbfile only if you selected Enforce write safe on


DAS dbspace.) The name of the mirror DAS dbfile.

Path to mirror file on disk

(For DAS dbfile only if you selected Enforce write safe on


DAS dbspace.) Specify a path to a writer node.

Mirror server

(For DAS dbfile only if you selected Enforce write safe on


DAS dbspace.) Specify a writer node where the mirror
DAS dbfile will be stored. Cannot be the same writer node
where the primary DAS dbfile is stored.

Note
Dbfiles can only be added to the RLV store dbspace when it is online. The RLV dbspace can either
be in read-only or read-write mode, however files can only be added in read-write mode when there
are no RLV-enabled objects.
For a cache dbspace on a simplex, you can add multiple dbfiles at once. Repeat steps 6 [page 1066]
and 7 [page 1066] to add additional dbfiles.
For a cache dbspace, on a multiplex node, you can add multiple dbfiles, but only one file at a time.
8. Click Finish.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1067

Related Information
DAS Dbfile Restrictions and Recommendations [page 354]
Creating a DAS Dbspace and DAS Dbfiles [page 350]
Adding a Shared File System DAS Dbfile [page 358]
DAS Dbfile Backup Considerations [page 355]
Shared File System Files in DAS Dbspaces [page 355]
DAS Dbspace Restrictions and Recommendations [page 352]
DAS Dbfile Restrictions and Recommendations [page 354]

5.19.2 Deleting a Dbfile


Delete a dbfile from a dbspace. With the exception of the IQ_SHARED_TEMP dbspace, you cannot delete the
last dbfile in a dbspace.

Prerequisites
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The dbspace must be in read-write mode, except for the RLV store dbspace, which can be in either mode.
The dbfile must be empty.
The last dbfile in a dbspace cannot be deleted, except for IQ_SHARED_TEMP. The first file that is made
read-write in IQ_SHARED_TEMP must be the last file dropped.
Dropping files in IQ_SHARED_TEMP in a multiplex is supported. In IQ_SHARED_TEMP, the last dbfile
can only be deleted on the coordinator once it is started in a single-node mode.
Dropping files in IQ_SHARED_TEMP in simplex is also supported.

Context
Note
Additional considerations exist when deleting a DAS dbfile. See Deleting a DAS Dbfile [page 360].

1068

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click DB Files.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete
5. Click Yes to confirm deletion.

Related Information
Dropping a DAS Dbfile [page 360]
Offline DAS Dbspace With Unavailable Mirror File [page 369]

5.19.3 Emptying a Dbfile


Empty a dbfile and move the objects in the file to another available read-write dbfile. Not applicable to cache
dbspace dbfiles.

Prerequisites
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The dbspace must be in read-write mode.
The dbfile should be read-only.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1069

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click DB Files.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Empty File.

Note
You cannot empty a dbfile belonging to the RLV store dbspace.
5. Click Yes.
Objects in the dbfile are moved to another read-write dbfile in the same dbspace. If no read-write dbfile
exists in the dbspace, the file is not emptied.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.19.4 Generating Dbfile DDL Commands


Display the data description language SQL code for adding a dbfile to a dbspace. The SQL code can be a useful
reference and training tool.

Prerequisites
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

1070

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click DB Files.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view shows the SQL code used to create the selected dbfiles.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.19.5 Viewing or Modifying Dbfile Properties


Display and change the name, mode, and path properties of a dbfile.

Prerequisites
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

View any dbfile property page none


Modify any dbfile property One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

View any dbfile property page none


Modify any dbfile property MANAGE ANY DBSPACE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1071

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Space Management , and then click DB Files.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
The properties available for modification depend on the mode and status of the dbfile.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name

Logical file name. If the dbspace is in


Read Only mode and OFFLINE status,
you cannot change the name of the
dbfile.

Path (Read-only)

Location of the physical file or raw


partition. You can modify the path
only when the dbspaces status is
OFFLINE.
You cannot change the path for
dbfiles in the RLV store dbspace.
You cannot change the path for
dbfiles in the DAS dbspace.
It is usually best to use an absolute
path. A relative path works for sim
plex servers and for multiplexes that
use the SAP IQ Cockpit shared-disk
facility and have the SAP IQ Cockpit
installation directory mounted in the
same location on each multiplex
server host. If you specify a relative
path for a simplex that is later con
verted to a multiplex, the relative path
might cause an error.

1072

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Mode

(Appears only when adding a dbfile to


the IQ_SHARED_TEMP dbspace in a
multiplex.
Mode of the dbspace. Valid modes
are:

ReadOnly

ReadWrite

Force ReadWrite

You cannot change the mode for


dbfiles in the RLV store dbspace.
For dbfiles in the Cache dbspace, you
can only change the mode if the
dbspace is ONLINE.
File size (Read-only)

(Not available on raw devices.) Cur


rent size of the file partition you allo
cate to the dbfile in kilobytes (KB),
megabytes (MB), gigabytes (GB), or
terabytes (TB). Minimum file size is 8
MB. Use the Modify file size field to
change the file size.

Reserved size (Read-only ) (Optional, but not applicable to cache


dbspace or DAS dbspace mirror
dbfiles.)
Default is 0. Extra space you allocate
to the dbfile in kilobytes (KB), mega
bytes (MB), gigabytes (GB), or tera
bytes (TB). Default is 0. You can use
this space to increase the file size if
the file grows. Guideline: reserve size
should be about 30% of file size.
Total size (Read-only)

SAP IQ Cockpit
Administer SAP IQ

Current size of the file plus the size of


the reserved space.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1073

Page

Property

Description

Modify file size

Enter a new value for file size.


You cannot increase the file size by
more than the reserved size. For ex
ample, if the file size is 100 MB and
the reserve is 30 MB, the maximum
permissible file size is 130 MB.
You can only change the file size for
dbfiles in the RLV store dbspace
when the dbspace is in Read/Write
mode. You can only reduce the file
size if the truncated space is not in
use.

Dbspace (Read-only)

Name of the dbspace.

Status (Read-only)

Current status of the dbspace. Valid


statuses are:

ONLINE

OFFLINE

Server name

(DAS dbfile only.) The logical name of


the server associated with this DAS
dbfile.

Reassign

(Shared File System DAS dbfile only)


Reassigns the Shared File System
(SFS) DAS dbfile to another server.

Add

(Primary DAS dbfile only.) Adds an


additional mirror DAS dbfile.

Mirror Files

(Primary DAS dbfile only.) Table


showing all mirror DAS dbfiles for the
current DAS dbfile.

Mirror of

(Mirror DAS dbfile only.) Name of the


primary DAS dbfile associated with
this mirror DAS dbfile.

6. Click OK to update any changes to the database and close the page.

Related Information
DAS Dbfiles [page 353]
Shared-Nothing Multiplex [page 342]
Adding a Shared File System DAS Dbfile [page 358]
DAS Dbfile Backup Considerations [page 355]
Shared File System Files in DAS Dbspaces [page 355]
DAS Dbspace Restrictions and Recommendations [page 352]
DAS Dbfile Restrictions and Recommendations [page 354]

1074

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.19.6 Dbfile Privilege Summary


A list of the system privileges and object permissions required to complete the various dbfile tasks.

Creating a Dbfile
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

Deleting a Dbfile
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

Emptying a Dbfile
Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

MANAGE ANY DBSPACE system privilege

Generating Dbfile DDL Commands


Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1075

Viewing or Modifying Dbfile Properties


Database Version

Dbfile Privileges Required

SAP IQ 15.3 and 15.4

View any dbfile property page none


Modify any dbfile property One of:

SAP IQ 16.0

DBA authority

SPACE ADMIN authority

View any dbfile property page none


Modify any dbfile property MANAGE ANY DBSPACE system privilege

Granting or Revoking Dbspace CREATE Permission


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

MANAGE ANY DBSPACE system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

1076

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.20 Events
You can automate routine tasks by adding an event to a database, and providing a schedule or conditional
trigger for the event. In a multiplex, an event is a global object that is shared across all nodes participating in
the multiplex.
There are three types of events:
Scheduled events have an associated schedule and execute at specified times.
Conditional events are associated with a system event, and an optional list of conditions that is tracked by
the database server.
Manual events can only be fired explicitly.
After each execution of an event handler, a COMMIT occurs if no errors occurred. A ROLLBACK occurs if there
was an error.

Related Information
Creating an Event [page 1077]
Deleting an Event [page 1080]
Disabling an Event [page 1081]
Enabling an Event [page 1082]
Triggering an Event [page 1083]
Generating Event DDL Commands [page 1084]
Viewing or Modifying Event Properties [page 1085]
Event Schedules [page 1087]
Event Privilege Summary [page 1092]

5.20.1 Creating an Event


Create a new event, set to be triggered manually, by a schedule or by a system event and specific conditions.

Prerequisites
Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

SAP IQ Cockpit
Administer SAP IQ

MANAGE ANY EVENT system privilege

CREATE ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1077

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Events.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

On which resource do you want to create the event?

Select a system.

What do you want to name the new event?

Enter a name for the event, unique for this user.

Who do you want to own the event?

Select the user who will own the event.

6. On the Event Trigger page, specify the circumstance or condition to trigger the event:
Property

Description

Manual Event

The event will be triggered explicitly when you use the


TRIGGER EVENT statement or select the Trigger menu
option.

Scheduled Event

You will be able to create a schedule so that the event will


execute at specified times.

Conditional Event

You will be able to specify a system event and optional


trigger conditions that will trigger the event.

7. (Scheduled Events only) On the Schedule page, specify the details of the initial schedule. (You can create
additional schedules later, through the Schedule Properties wizard).
Property

Description

Schedule Name

A name for the schedule, unique for this user.

Time

The time, or start and end time duration, in 24 h format,


when the event will run (either once or the interval you
specify on the Recurrence Page).

Date

(Optional) The date on which the event will first run.

8. (Scheduled Events only) On the Recurrence page, specify how often to trigger the event and the days to
run the event:

1078

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Trigger Repeatedly

The recurrence interval for the event

Specific Days

The days of the week or month when the event will be trig
gered.

9. (Conditional Events only) On the Conditions page, specify condition details:


Property

Description

System Event

Select the system event which will trigger the event

Trigger Conditions

(Optional) Set one or more trigger conditions that must


be satisfied, in addition to the system event, in order to
trigger the event. Use the New, Edit and Delete buttons
to manage the trigger conditions.

10. On the Options page, complete additional details for the event:
Property

Description

Enable Event

Select the checkbox to execute the event when the sched


uled time, trigger condition or manual command occurs.
If unchecked, the event is created, but will not run until
you later enable it.

Location

Indicates where the event will run. Valid values are:


Execute at all databases executes the event at any
and all remote locations.
Execute at the consolidated databases only for da
tabases involved in SQL Remote replication, this exe
cutes the event at the consolidated database only,
and not at any of the remote locations.
Execute at the remote databases only for data
bases involved in SQL Remote replication, this exe
cutes the event at the remote database(s) only, and
not at the consolidated database.

11. (Optional) On the Comment page, enter a text description for the event.
12. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1079

5.20.2 Deleting an Event


Permanently delete an event and all associated event schedules and triggers.

Prerequisites
Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

DROP ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Events.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete
5. Click Yes to confirm deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1080

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.20.3 Disabling an Event


Disable a currently enabled event.

Prerequisites
Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
An event has been created, and enabled.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Events.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Disable.
5. Click Yes to confirm disable.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1081

5.20.4 Enabling an Event


Enable a currently disabled event.

Prerequisites
Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
An event has been created, and disabled.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Events.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Enable.
5. Click Yes to confirm enable.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1082

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.20.5 Triggering an Event


Execute an event. You can trigger an event manually regardless of its type (manual, scheduled, or conditional).
The TRIGGER EVENT statement can be called at any time for any event.

Prerequisites
Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EVENT system privilege

The SAP IQ system is running, registered, and authenticated.


An event has been created.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Events.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Trigger.
5. (Optional) Enter event parameters.
This dialog allows you to explicitly supply parameters to simulate a context for the event handler. You can
use this dialog to test trigger conditions such as disk space restrictions (when a disk fills beyond a
specified percentage) or other trigger conditions that are required to trigger an event handler. For
example, you can have an event that takes different actions depending which user ID is connected to the
database: calling the event parameter ( 'User' ) in the event handler does this. To simulate triggering this
event for the user P_Chin, type the following in the Parameters text box: "User"='P_Chin' The word User
must be contained in double quotes because it is a reserved word in SQL.
6. Click OK to confirm trigger.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1083

5.20.6 Generating Event DDL Commands


Display the SQL data description language for creating a new event. The SQL code can be a useful reference
and training tool.

Prerequisites
Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Events.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view opens, showing the SQL code used to create the selected event.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1084

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.20.7 Viewing or Modifying Event Properties


Display or change the properties of the selected event.

Prerequisites
Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

View event properties none


Modify event comment or properties DBA authority

SAP IQ 16.0

View event properties only none


Modify event properties one of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

Modify event comment only one of:

MANAGE ANY EVENT system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Events.

3. Select an event from the right pane, click the arrow to the right of one of the selected names, and click
Properties.
4. View or modify the properties.
Page

Property

Description

General

Name (Read-only)

Name of the event.

Owner (Read-only)

Name of the owner of the event.

Runningv

Indicates whether the event is run


ning.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1085

Page

Property

Description

Enabled

Select the check box to execute the


event when the scheduled time, trig
ger condition or manual command
occurs.

Location (Read-only)

Indicates where the event will run.


Valid values are:
Execute at all databases exe
cutes the event at any and all re
mote locations.
Execute at the consolidated da
tabases only for databases in
volved in SQL Remote replica
tion, this executes the event at
the consolidated database only,
and not at any of the remote lo
cations.
Execute at the remote data
bases only for databases in
volved in SQL Remote replica
tion, this executes the event at
the remote database(s) only, and
not at the consolidated database.

Next scheduled time (Read-only)

Time next time the event is scheduled


to run.

Comment

Text field for adding optional com


ments.

SQL

Displays the SQL statements that are executed when the event is triggered. If
you edit the SQL code, click Apply before leaving the page.

Schedules

Use the New, Edit and Delete buttons to manage the event's schedules.

Conditions

This event is triggered when the fol


lowing system event occurs

Select to specify the system event.

And the following trigger conditions


are true

(Optional) Select to specify a trigger


condition. Click the New, Edit and
Delete buttons to manage the trigger
conditions.

5. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1086

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.20.8 Event Schedules


You can schedule an event to run at a specific date, time or duration, once or at a recurring interval. An event
can have more than one schedule.

Related Information
Creating an Event Schedule [page 1087]
Deleting an Event Schedule [page 1088]
Generating Event Schedule DDL Commands [page 1089]
Viewing or Modifying Event Schedule Properties [page 1090]

5.20.8.1 Creating an Event Schedule


Make a new schedule for an existing event.

Prerequisites
Database Version

Event Schedule Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Events.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1087

5. In the left pane, select Schedules, then click New in the right pane.
6. On the Schedule page, specify the details of the schedule.
Property

Description

Schedule Name

A unique name for the schedule

Time

The time or start and end times, in 24 h format, when the


event will run.

Date

(Optional) The date on which the event will run.

7. On the Recurrence page, specify how often to trigger the event and the days to run the event:
Property

Description

Trigger Repeatedly

The recurrence interval for the event

Specific Days

The days of the week or month when the event will run.

8. Click Finish.
9. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.20.8.2 Deleting an Event Schedule


Delete one or more schedule(s) for a selected event.

Prerequisites
Database Version

Event Schedule Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

1088

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Events.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Schedules, then select one or more schedules in the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Delete.

Caution
No confirmation prompt appears before the schedule is deleted.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.20.8.3 Generating Event Schedule DDL Commands


Display the SQL data description language for creating a new schedule for a selected event. The SQL code can
be a useful reference and training tool.

Prerequisites
Database Version

Event Schedule Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1089

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Events.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, select Schedules, then select one or more schedules in the right pane.

Tip
Use Shift-click or Control-click to select multiple items.
6. Click Generate DDL.
The DDL view opens, showing the SQL code used to create the selected event schedule.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.20.8.4 Viewing or Modifying Event Schedule Properties


Display or change the properties of a schedule event.

Prerequisites
Database Version

Event Schedule Privileges Required

SAP IQ 15.3 and 15.4

View any event schedule property page none


Modify any event schedule property DBA authority

SAP IQ 16.0

View any event schedule property page none


Modify any event schedule property one of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

1090

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Events.

3. Select an event from the right pane containing a schedule to view or modify, click the arrow to the right of
the selected name, and click Properties.
4. In the left pane, select Schedules, then select a schedule in the right pane and click Edit.
5. View or modify the properties.
Page

Property

Description

General

Name (Read-only)

Name of the schedule.

Event (Read-only)

Name of the event the schedule is


created for.

Start Time

Fixed time, or start and end times, in


24 h format, when the event runs.

Start Date

(Optional) Date on which the event


first runs.

Trigger the event

Select to specify the recurrence inter


val for the event in time. Specify the
value in hours, minutes or seconds.

Trigger the event on the following

Select to specify the recurrence inter


val for the event in:

Days of the weekDays of the month

Specify the days of the week the


scheduled event runs.

Recurrence

Specify the days of the month the


scheduled event runs.

6. Click OK.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1091

5.20.9 Event Privilege Summary


A list of the system privileges and object permissions required to complete the various event tasks.

Creating an Event
Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

CREATE ANY OBJECT system privilege

Deleting an Event
Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

DROP ANY OBJECT system privilege

Disabling or Enabling an Event


Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

Triggering an Event
Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EVENT system privilege

1092

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Generating Event DDL Commands


Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Event Properties


Database Version

Event Privileges Required

SAP IQ 15.3 and 15.4

View event properties none


Modify event comment or properties DBA authority

SAP IQ 16.0

View event properties only none


Modify event properties one of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

Modify event comment only one of:

MANAGE ANY EVENT system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

Creating an Event Schedule


Database Version

Event Schedule Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

Deleting an Event Schedule


Database Version

Event Schedule Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1093

Database Version

Event Schedule Privileges Required

SAP IQ 16.0

One of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

Generating Event Schedule DDL Commands


Database Version

Event Schedule Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Event Schedule


Properties
Database Version

Event Schedule Privileges Required

SAP IQ 15.3 and 15.4

View any event schedule property page none


Modify any event schedule property DBA authority

SAP IQ 16.0

View any event schedule property page none


Modify any event schedule property one of:

MANAGE ANY EVENT system privilege

ALTER ANY OBJECT system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]

1094

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Adding Permissions on a Table or Column to a User or Group [page 784]


Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.21 External Environments


Install, delete, update, and modify the components of external development environments.

Related Information
Working in a Java External Environment [page 1095]
Working in a Perl External Environment [page 1110]
Working in a PHP External Environment [page 1120]
Working in a C ESQL External Environment [page 1130]
Working in a C ODBC External Environment [page 1133]
Working in a CLR (.NET) External Environment [page 1136]

5.21.1 Working in a Java External Environment


Install and manage Java classes and JAR files. Test a Java external environment and modify its properties.

Related Information
Installing a Java Classes File into an SAP IQ Database [page 1096]
Updating a Java Classes File [page 1097]
Deleting a Classes File [page 1098]
Viewing or Modifying Java Classes File Properties [page 1099]
Installing a Java JAR File into an SAP IQ Database [page 1100]
Updating a Java JAR File [page 1102]
Deleting a JAR File [page 1103]
Viewing or Modifying the Java JAR File Properties [page 1104]
Testing the Configuration of a Java External Environment [page 1105]
Viewing or Modifying Java External Environment Properties [page 1106]
Java External Environment Privilege Summary [page 1108]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1095

5.21.1.1 Installing a Java Classes File into an SAP IQ


Database
Install a Java classes file to an SAP IQ database using SAP IQ Cockpit. This enables the database to execute
functions and procedures written in Java.

Prerequisites
Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


Copy the Java classes file to a location accessible to the SAP IQ server.

Context
A Java external environment appears in the list of external environments in the SAP IQ Cockpit EXPLORE
workset even when none of its classes files have been installed.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
click Classes.

IQ Servers

Compiled Objects

External Environments

Java , and then

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:

1096

Property

Description

Select an SAP IQ resource on which the Java class will be


installed:

Select a system.

(Multiplex only) Select a multiplex server on which the


Java class will be installed

Select a multiplex server.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

SAP IQ Cockpit agent status

Indicates the current status of the SAP IQ Cockpit agent.


If the SAP IQ Cockpit agent is not registered, click
Register Agent and enter the required registration infor
mation. If the SAP IQ Cockpit agent is not authenticated,
click Authenticate Agent. Enter a user ID, password, and
port for SAP IQ Cockpit to use when it logs in to the SAP
IQ Cockpit agent.

Java class file path

Enter the path to the Java file. It must be on a file system


accessible to the SAP IQ system.

Comment

Text field for adding optional comments.

6. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.21.1.2 Updating a Java Classes File


Update a Java classes file in an SAP IQ database.

Prerequisites
Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


The Java classes file to be updated is in a location accessible to the SAP IQ server.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
click Classes.

IQ Servers

Compiled Objects

External Environments

Java , and then

3. In the right pane, select an item, and do one of:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1097

Click the arrow to the right of the name.


Click the Actions button.
4. Select Update.
5. On the Update Java Class page, if the Register Agent button is active, click it to register the SAP IQ
Cockpit agent on the classes SAP IQ server. Enter the required registration information.
6. If the Authenticate Agent button is active, click it to authenticate the SAP IQ Cockpit agent. Enter a user
ID and password for SAP IQ Cockpit to use when it logs in to the SAP IQ Cockpit agent.
7. Enter the path to the updated classes file. It must be on a file system accessible to the SAP IQ system.
8. Click Finish to update the classes or JAR.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.21.1.3 Deleting a Classes File


Remove a standalone classes file from an SAP IQ database.

Prerequisites
Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

Context
You cannot remove classes that are part of a JAR. Use the Update feature to remove the classes from the JAR,
then delete them.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
click Classes.

1098

IQ Servers

Compiled Objects

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

External Environments

Java , and then

SAP IQ Cockpit
Administer SAP IQ

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Review the confirmation dialog and click Yes.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.21.1.4 Viewing or Modifying Java Classes File Properties


Display the properties of a Java classes file associated with an SAP IQ database. Only the comment can
modified.

Prerequisites
Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

View external environment properties none


Modify external environment properties DBA authority

SAP IQ 16.0

View external environment properties none


Modify external environment properties MANAGE ANY EXTERNAL OBJECT system
privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
click Classes.

SAP IQ Cockpit
Administer SAP IQ

IQ Servers

Compiled Objects

External Environments

Java , and then

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1099

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Read-only)

Name of the class.

Type (Read-only)

Type of class.

Creator (Read-only)

User who created the class.

JAR (Read-only)

Name of the JAR containing the class


file.

Time created (Read-only)

Date and time the class file was cre


ated.

Time modified (Read-only)

Date and time the class file was last


modified.

Comment

Text field for adding optional com


ments.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.21.1.5 Installing a Java JAR File into an SAP IQ Database


Install a Java JAR file to an SAP IQ database. This enables the database to execute functions and procedures
written in Java.

Prerequisites
Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

1100

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

The SAP IQ system is running, registered, and authenticated.


Copy the Java JAR file to a location accessible to the SAP IQ server.

Context
A Java external environment appears in the list of external environments in the SAP IQ Cockpit EXPLORE
workset even when none of its JAR files have been installed.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
click JAR.

IQ Servers

Compiled Objects

External Environments

Java , and then

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select an SAP IQ resource on which the JAR file will be in


stalled:

Select a system.

(Multiplex only) Select a multiplex server on which the


JAR will be installed

Select a multiplex server.

SAP IQ Cockpit agent status

Indicates the current status of the SAP IQ Cockpit agent.


If the SAP IQ Cockpit agent is not registered, click
Register Agent and enter the required registration infor
mation. If the SAP IQ Cockpit agent is not authenticated,
click Authenticate Agent. Enter a user ID, password, and
port for SAP IQ Cockpit to use when it logs in to the SAP
IQ Cockpit agent.

JAR file path

Enter the path to the Java file. It must be on a file system


accessible to the SAP IQ system.

JAR name

Enter a unique name for the JAR file.

Comment

Text field for adding optional comments.

6. On the Select Classes page, select all classes or a subset of the classes to install from the JAR.
7. Click Finish.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1101

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.21.1.6 Updating a Java JAR File


Update a Java JAR file in an SAP IQ database.

Prerequisites
Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


Put an updated version of the Java JAR file in a location accessible to the SAP IQ server.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
click JAR.

IQ Servers

Compiled Objects

External Environments

Java , and then

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Update.
5. On the Update Class page, if the Register Agent button is active, click it to register the SAP IQ Cockpit
agent on the JARs SAP IQ server. Enter the required registration information.
6. If the Authenticate Agent button is active, click it to authenticate the SAP IQ Cockpit agent. Enter a user
ID and password for SAP IQ Cockpit to use when it logs in to the SAP IQ Cockpit agent.
7. Enter the path to the updated JAR file. It must be on a file system accessible to the SAP IQ system.
8. Specify the JAR name.
9. Select the classes to update in the JAR.
10. Click Finish.

1102

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.21.1.7 Deleting a JAR File


Remove a JAR file from an SAP IQ database.

Prerequisites
Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

Context
You cannot use this procedure to remove a class from a JAR. Instead, update the JAR.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
click JAR.

IQ Servers

Compiled Objects

External Environments

Java , and then

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Review the confirmation dialog and click Yes.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1103

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.21.1.8 Viewing or Modifying the Java JAR File Properties


Display the properties of a Java JAR file associated with an SAP IQ database. Only the comment can be
modified.

Prerequisites
Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

View external environment properties none


Modify external environment properties DBA authority

SAP IQ 16.0

View external environment properties none


Modify external environment properties MANAGE ANY EXTERNAL OBJECT system
privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
click JAR.

IQ Servers

Compiled Objects

External Environments

Java , and then

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.

1104

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

General

Name

Name of the class.

Type (Read-only)

Type of class.

Creator (Read-only)

User who created the class.

Time created (Read-only)

Date and time the class file was cre


ated.

Time modified (Read-only)

Date and time the class file was last


modified.

Comment

Text field for adding optional com


ments.

Classes (Read-only)

The list of classes contained within the JAR file.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.21.1.9 Testing the Configuration of a Java External


Environment
Test the configuration of a Java external environment to make sure the JRE is accessible and responding.

Prerequisites
Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL ENVIRONMENT system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

SAP IQ Cockpit
Administer SAP IQ

IQ Servers

Compiled Objects , and then click External Environments.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1105

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Test Configuration.
5. Click Finish to close the view.

Results
If the test fails because the iq_java.sh script in the SAP IQ servers bin directory failed to execute, run
the script manually to check for errors.
If the text fails because the JRE has been deleted or moved to a new location, see Updating Java a Classes
File or Updating a Java Jar File to specify a new location for the file.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.21.1.10 Viewing or Modifying Java External Environment


Properties
Display and change the properties of a Java external environment, including the location of the executable and
the associated user.

Prerequisites
Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL ENVIRONMENT
system privilege

The SAP IQ system is running, registered, and authenticated.

1106

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click External Environments.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Read-only)

Name of the external environment.

Type (Read-only)

Type of environment.

Scope (Read-only)

Scope of the environment. Valid val


ues are:

Supports results set (Read-only)

DATABASE

CONNECTION

Indicates whether the environment


supports a results set. Valid values
are:

Yes

No

Location

Enter the path to the Java file. It must


be on a file system accessible to the
SAP IQ system.

User

SAP IQ user or role/group that the ex


ternal environment uses to log in to
the database. The user or role/group
must have been granted DBA author
ity (15.x) or the MANAGE ANY EXTER
NAL ENVIRONMENT system privilege
(16.x).

Comment

Text field for adding optional com


ments.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1107

5.21.1.11 Java External Environment Privilege Summary


A list of the system privileges and object permissions required to complete the various external environment
Java tasks.

Installing a Java Classes or JAR File


Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Updating a Java Classes or JAR File


Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Deleting a Java Classes or JAR File


Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Viewing or Modifying a Java Classes or JAR File


Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

View external environment properties none


Modify external environment properties DBA authority

SAP IQ 16.0

View external environment properties none


Modify external environment properties MANAGE ANY EXTERNAL OBJECT system
privilege

1108

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Testing the Configuration of a Java External Environment


Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL ENVIRONMENT system privilege

Viewing or Modifying Java External Environment Properties


Database Version

External Environment Java Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL ENVIRONMENT
system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1109

5.21.2 Working in a Perl External Environment


Install Perl objects, test a Perl external environment, and change its properties.
A Perl stored procedure or function behaves like a SQL stored procedure or function except that the code for
the procedure or function is written in Perl and the execution of the procedure or function takes place outside
the database server (that is, within a Perl executable instance).
You must create a separate instance of the Perl executable for each connection that uses Perl stored
procedures and functions. This behavior is different from Java stored procedures and functions. For Java,
there is one instance of the Java VM for each database rather than one instance per connection. The other
major difference between Perl and Java is that Perl stored procedures do not return result sets, whereas Java
stored procedures can return result sets.

Related Information
Creating a Perl Object [page 1110]
Perl Objects in SQL Procedures and Functions [page 1111]
Installing a Perl Object into an SAP IQ Database [page 1112]
Updating a Perl Object [page 1113]
Deleting a Perl Object [page 1114]
Viewing or Modifying Perl Object Properties. [page 1115]
Testing the Configuration of a Perl External Environment [page 1116]
Viewing or Modifying Perl External Environment Properties [page 1117]
Perl External Environment Privilege Summary [page 1118]

5.21.2.1 Creating a Perl Object


Install Perl and create a Perl object before installing the new Perl object into the SAP IQ database.

Prerequisites
Install ActivePerl 5.6.0 on the database server computer. The database server computer must be able to
locate the Perl executable.
Install the DBI Perl module on the database server computer.
Install the DBD::SQLAnywhere driver on the database server computer.
On Windows, install Microsoft Visual Studio and configure your environment.

1110

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. Run Makefile.PL:
From the SDK\PerlEnv subdirectory (Windows):
perl Makefile.PL
nmake
nmake install
From the sdk/perlenv subdirectory (UNIX):
perl Makefile.PL
make
make install
2. Verify that the database server is able to locate and start the Perl executable:
START EXTERNAL ENVIRONMENT PERL;
3. Write Perl scripts that use the DBD::SQLAnywhere interface. SAP recommends running Perl in strict
mode:
#!/usr/local/bin/perl -w
#
use DBI;
use strict;
my $database = "demo";
my $data_src = "DBI:SQLAnywhere:SERVER=$database;DBN=$database";
my $uid
= "DBA";
my $pwd
= "sql";
my %defaults = (
AutoCommit => 1, # Autocommit enabled.
PrintError => 0 # Errors not automatically printed.
);
my $dbh = DBI->connect($data_src, $uid, $pwd, \%defaults)
or die "Cannot connect to $data_src: $DBI::errstr\n";
$dbh->disconnect;
exit(0);
__END__

5.21.2.2 Perl Objects in SQL Procedures and Functions


When defining SQL procedures and functions referencing Perl objects, the LANGUAGE is always <PERL> and
the EXTERNAL NAME string contains the information needed to call the Perl subroutines and to return OUT
parameters and return values.
In this example, the Perl object PerlConsoleExample creates the string 'Hello world'. This SQL
procedure writes the output of PerlConsoleExample to the database server messages window:
CREATE PROCEDURE PerlWriteToConsole( IN str LONG VARCHAR)
EXTERNAL NAME '<file=PerlConsoleExample>
WriteToServerConsole( $sa_perl_arg0 )'
LANGUAGE PERL;
// 'Hello world' should appear in the database server messages window
CALL PerlWriteToConsole( 'Hello world' );

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1111

5.21.2.3 Installing a Perl Object into an SAP IQ Database


Install a Perl object into an SAP IQ database. After installing it, you can reference the object in SQL procedures
and functions.

Prerequisites
Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


A Perl external environment appears in the list of external environments in the SAP IQ Cockpit EXPLORE
workset even when no Perl objects have been installed.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Perl.

IQ Servers

Compiled Objects

External Environments , and then click

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:

1112

Property

Description

Select an SAP IQ resource on which the Perl object will be


installed:

Select a system.

(Multiplex only) Select a multiplex server on which the


Perl object will be installed

Select a multiplex server.

SAP IQ Cockpit agent status

Indicates the current status of the SAP IQ Cockpit agent.


If the SAP IQ Cockpit agent is not registered, click
Register Agent and enter the required registration infor
mation. If the SAP IQ Cockpit agent is not authenticated,
click Authenticate Agent. Enter a user ID, password, and
port for SAP IQ Cockpit to use when it logs in to the SAP
IQ Cockpit agent.

Perl script path

Path to the Perl object It must be on a file system accessi


ble to the SAP IQ system.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Perl object name in the database

Enter the Perl object name.

Comment

Text field for adding optional comments.

6. Click Finish to install the Perl object.

5.21.2.4 Updating a Perl Object


Update a Perl object in an SAP IQ database.

Prerequisites
Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


Put an updated version of the Perl object in a location accessible to the SAP IQ server.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Perl.

IQ Servers

Compiled Objects

External Environments , and then click

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Update.
5. On the Update Class page, if the Register Agent button is active, click it to register the SAP IQ Cockpit
agent on the Perl object's SAP IQ server. Enter the required registration information.
6. If the Authenticate Agent button is active, click it to authenticate the SAP IQ Cockpit agent. Enter a user
ID and password for SAP IQ Cockpit to use when it logs in to the SAP IQ Cockpit agent.
7. Enter the path to the updated Perl object. It must be on a file system accessible to the SAP IQ system.
8. Click Finish.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1113

5.21.2.5 Deleting a Perl Object


Remove a JAR file from an SAP IQ database.

Prerequisites
Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Perl.

IQ Servers

Compiled Objects

External Environments , and then click

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Review the confirmation dialog and click Yes.

1114

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.21.2.6 Viewing or Modifying Perl Object Properties.


Display the properties of a Perl object associated with an SAP SAP IQ database. Only the comment can be
modified.

Prerequisites
Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

View external environment properties none


Modify View external environment properties DBA authority

SAP IQ 16.0

View external environment properties none


Modify external environment properties MANAGE ANY EXTERNAL OBJECT system
privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
Perl.

IQ Servers

Compiled Objects

External Environments , and then click

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in read-only
mode.
Area
General

Description
Name (read-only) name of the Perl object.
Type (read-only) type of Perl object.
Creator (read-only) user who created the Perl object.
External environment (read-only) name of the exter
nal environment of the Perl object
Time modified (read-only) date and time the Perl ob
ject was last modified.
Comment text description for the Perl object.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1115

Area

Description

Content

The content of the Perl script.

(Read-only)

6. Click OK to update any changes to the database and close the page.

5.21.2.7 Testing the Configuration of a Perl External


Environment
Test the configuration of a Perl external environment to make sure the Perl object is accessible and
responding.

Prerequisites
Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click External Environments.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Test Configuration.
5. Click Finish to close the view.

Results
If the text fails because the Perl object has been deleted or moved to a new location, see Updating a Perl Object
to specify a new location.

1116

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.21.2.8 Viewing or Modifying Perl External Environment


Properties
Display and change the properties of a Perl external environment, including the location of the Perl object and
the associated user.

Prerequisites
Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL OBJECT sys
tem privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click External Environments.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in read-only
mode.
Page

Property

Description

General

Name

Name of the external environment.

Type (Read-only)

Type of environment.

Scope (Read-only)

Scope of the environment. Valid val


ues are:

SAP IQ Cockpit
Administer SAP IQ

DATABASE

CONNECTION

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1117

Page

Property

Description

Supports results set (Read-only)

Indicates whether the environment


supports a results set. Valid values
are:

Yes

No

Location

Path to the Perl object It must be on a


file system accessible to the SAP IQ
system.

User

SAP IQ user or role/group that the ex


ternal environment uses to log in to
the database. The user or role/group
must have been granted DBA author
ity (15.x) or the MANAGE ANY EXTER
NAL ENVIRONMENT system privilege
(16.x).

Comment

Text field for adding optional com


ments.

6. Click OK to update any changes to the database and close the page.

5.21.2.9 Perl External Environment Privilege Summary


A list of the system privileges and object permissions required to complete the various Perl external
environment tasks.

Installing a Perl Object


Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Updating a Perl Object


Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

1118

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Deleting a Perl Object


Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Viewing or Modifying a Perl Object Properties


Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

View external environment properties none


Modify View external environment properties DBA authority

SAP IQ 16.0

View external environment properties none


Modify external environment properties MANAGE ANY EXTERNAL OBJECT system
privilege

Testing the Configuration of a Perl External Environment


Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Viewing or Modifying Perl External Environment Properties


Database Version

External Environment Perl Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL OBJECT sys
tem privilege

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1119

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.21.3 Working in a PHP External Environment


Install PHP objects, test a PHP external environment, and change its properties.
A PHP stored procedure or function behaves the same as a SQL stored procedure or function except that the
code for the procedure or function is written in PHP and the execution of the procedure or function takes place
outside the database server (that is, within a PHP executable instance).
You must create a separate instance of the PHP executable for each connection that uses PHP stored
procedures and functions. This behavior is quite different from Java stored procedures and functions. For
Java, there is one instance of the Java VM for each database rather than one instance per connection. The
other major difference between PHP and Java is that PHP stored procedures do not return result sets,
whereas Java stored procedures can return result sets. PHP only returns an object of type LONG VARCHAR,
which is the output of the PHP script.

Related Information
Creating a PHP Object [page 1121]
Installing a PHP Object [page 1122]
Updating a PHP Object [page 1123]
Deleting a PHP Object [page 1124]
Viewing or Modifying PHP Object Properties [page 1125]
Testing the Configuration of a PHP External Environment [page 1126]
Viewing or Modifying PHP External Environment Properties [page 1127]

1120

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

PHP External Environment Privilege Summary [page 1128]

5.21.3.1 Creating a PHP Object


Install PHP and create a PHP script before installing the new PHP object into the SAP IQ database.

Prerequisites
Install PHP on the database server computer. The database server computer must be able to locate the
PHP executable.
Install the SQL Anywhere PHP extension on the database server computer.

Procedure
1. Locate the php.ini file for your PHP installation, and open it in a text editor. Locate the line that specifies
the location of the extension_dir directory. If extension_dir is not set to any specific directory, it is a
good idea to set it to point to an isolated directory for better system security.
2. Copy the desired external environment PHP module from the SAP IQ installation directory to your PHP
installation directory. Change the x.y to reflect the version you have selected.
cp $SQLANY12/bin32/php-5.x.y_sqlanywhere_extenv12.so
php-dir/ext
3. Add the following line to the Dynamic Extensions section of the php.ini file to load the external
environment PHP module automatically. Change the x.y to reflect the version you have selected.
extension=php-5.x.y_sqlanywhere_extenv12.so
Save and close php.ini.
4. Make sure that you have also installed the SQL Anywhere PHP driver from the SAP IQ installation directory
into your PHP extensions directory. This file name follows the pattern php-5.x.y_sqlanywhere.so
where <x> and <y> are the version numbers.
5. Verify the database server can locate and start the PHP executable:
ALTER EXTERNAL ENVIRONMENT PHP
LOCATION 'php-path';
6. Write your PHP script. The <?php and ?> tags tell the web server that it should let PHP execute the code
that lies between them and replace it with the PHP output. This connect.php example attempts to make
a connection to a database on a local server:
<?php
# Connect using the default user ID and password
$conn = sasql_connect( "UID=DBA;PWD=sql" );
if( ! $conn ) {

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1121

echo "Connection failed\n";


} else {
echo "Connected successfully\n";
sasql_close( $conn );
}?>

5.21.3.2 Installing a PHP Object


Install a PHP object into an SAP IQ database. After installing it, you can reference the object in SQL procedures
and functions.

Prerequisites
Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

View external environment properties none


Modify external environment properties DBA authority

SAP IQ 16.0

View external environment properties none


Modify external environment properties MANAGE ANY EXTERNAL OBJECT system
privilege

The SAP IQ system is running, registered, and authenticated.

Context
A PHP external environment appears in the list of external environments in the SAP IQ Cockpit EXPLORE
workset even when no PHP objects have been installed.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
PHP.

IQ Servers

Compiled Objects

External Environments , and then click

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.

1122

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5. On the Welcome page, specify:


Property

Description

Select an SAP IQ resource on which the PHP object will be Select a system.
installed:
(Multiplex only) Select a multiplex server on which the
PHP object will be installed

Select a multiplex server.

SAP IQ Cockpit agent status

Indicates the current status of the SAP IQ Cockpit agent.


If the SAP IQ Cockpit agent is not registered, click
Register Agent and enter the required registration infor
mation. If the SAP IQ Cockpit agent is not authenticated,
click Authenticate Agent. Enter a user ID, password, and
port for SAP IQ Cockpit to use when it logs in to the SAP
IQ Cockpit agent.

PHP script path

Path to the PHP object It must be on a file system acces


sible to the SAP IQ system.

PHP object name in the database

Enter the PHP object name.

Comment

Text field for adding optional comments.

6. Click Finish.

5.21.3.3 Updating a PHP Object


Update a PHP object in an SAP IQ database.

Prerequisites
Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


Put an updated version of the PHP object in a location accessible to the SAP IQ server.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
PHP.

IQ Servers

Compiled Objects

External Environments , and then click

3. In the right pane, select an item, and do one of:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1123

Click the arrow to the right of the name.


Click the Actions button.
4. Select Update.
5. On the Update PHP Object page, if the Register Agent button is active, click it to register the SAP IQ
Cockpit agent on the SAP IQ server. Enter the required registration information.
6. If the Authenticate Agent button is active, click it to authenticate the SAP IQ Cockpit agent. Enter a user
ID and password for SAP IQ Cockpit to use when it logs in to the SAP IQ Cockpit agent.
7. Enter the path to the updated PHP object. It must be on a file system accessible to the SAP IQ system.
8. Click Finish.

5.21.3.4 Deleting a PHP Object


Remove a PHP object from an SAP IQ database.

Prerequisites
Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
PHP.

IQ Servers

Compiled Objects

External Environments , and then click

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Review the confirmation dialog and click Yes.

1124

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.21.3.5 Viewing or Modifying PHP Object Properties


Display the properties of a PHP object associated with an SAP IQ database. Only the comment can be
modified.

Prerequisites
Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

View properties none


Modify comment MANAGE ANY EXTERNAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand
PHP.

IQ Servers

Compiled Objects

External Environments , and then click

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in read-only
mode.
Area
General

Description
Name (read-only) name of the PHP object.
Type (read-only) type of PHP object.
Creator (read-only) user who created the PHP ob
ject.
External environment (read-only) name of the exter
nal environment of the PHP object
Time modified (read-only) date and time the PHP
object was last modified.
Comment text description of the PHP object.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1125

Area

Description

Content

The content of the PHP script.

(Read-only)

6. Click OK to update any changes to the database and close the page.

5.21.3.6 Testing the Configuration of a PHP External


Environment
Test the configuration of a PHP external environment to make sure the PHP object is accessible and
responding.

Prerequisites
Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click External Environments.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Test Configuration.
The Test Configuration dialog displays progress messages to report stopping and then starting the
external environment
5. Click Finish to close the view.

Results
If the text fails because the PHP object has been deleted or moved to a new location, see Updating a PHP
Object to specify a new location.

1126

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.21.3.7 Viewing or Modifying PHP External Environment


Properties
Display and change the properties of a PHP external environment, including the location of the PHP object and
the associated user.

Prerequisites
Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL OBJECT sys
tem privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click External Environments.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in read-only
mode.
Page

Property

Description

General

Name (Read-only)

Name of the external environment.

Type (Read-only)

Type of environment.

Scope (Read-only)

Scope of the environment. Valid val


ues are:

SAP IQ Cockpit
Administer SAP IQ

DATABASE

CONNECTION

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1127

Page

Property

Description

Supports results set (Read-only)

Indicates whether the environment


supports a results set. Valid values
are:

Yes

No

Location

Path to the PHP object It must be on a


file system accessible to the SAP IQ
system..

User

SAP IQ user or role/group that the ex


ternal environment uses to log in to
the database. The user or role/group
must have been granted DBA author
ity (15.x) or the MANAGE ANY EXTER
NAL ENVIRONMENT system privilege
(16.x).

Comment

Text field for adding optional com


ments.

6. Click OK to update any changes to the database and close the page.

5.21.3.8 PHP External Environment Privilege Summary


A list of the system privileges and object permissions required to complete the various PHP external
environment tasks.

Installing a PHP Object


Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

View external environment properties none


Modify external environment properties DBA authority

SAP IQ 16.0

View external environment properties none


Modify external environment properties MANAGE ANY EXTERNAL OBJECT system
privilege

1128

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Updating a PHP Object


Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Deleting a PHP Object


Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Viewing or Modifying a PHP Object Properties


Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

View properties none


Modify comment MANAGE ANY EXTERNAL OBJECT system privilege

Testing the Configuration of a PHP External Environment


Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY EXTERNAL OBJECT system privilege

Viewing or Modifying PHP External Environment Properties


Database Version

External Environment PHP Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1129

Database Version

External Environment PHP Privileges Required

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL OBJECT sys
tem privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.21.4 Working in a C ESQL External Environment


View and update the properties of C ESQL32 and C ESQL64 external environments.
Install the C or C++ code outside of SAP IQ Cockpit. You cannot use SAP IQ Cockpit to install the executable.

Related Information
Viewing or Modifying C ESQL Executable Properties [page 1131]
Other External Environment Privilege Summary [page 1132]

1130

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.21.4.1 Viewing or Modifying C ESQL Executable Properties


Display and change the properties of a C ESQL32 or C ESQL64 external environment, including the location of
the executable and the associated user.

Prerequisites
Database Version

Other External Environment Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL OBJECT sys
tem privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click External Environments.

3. In the right pane, select a C ESQL32 or C ESQL64 external environment, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in read-only
mode.
Page

Property

Description

General

Name

Name of the external environment.

Type (Read-only)

Type of environment.

Scope (Read-only)

Scope of the environment. Valid val


ues are:

SAP IQ Cockpit
Administer SAP IQ

DATABASE

CONNECTION

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1131

Page

Property

Description

Supports results set (Read-only)

Indicates whether the environment


supports a results set. Valid values
are:

Yes

No

Location

Path to the C ESQL32 or C ESQL64


executable. It must be on a file sys
tem accessible to the SAP IQ system.

User

SAP IQ user or role/group that the ex


ternal environment uses to log in to
the database. The user or role/group
must have been granted DBA author
ity (15.x) or the MANAGE ANY EXTER
NAL ENVIRONMENT system privilege
(16.x).

Comment

Text field for adding optional com


ments.

6. Click OK to update any changes to the database and close the page.

5.21.4.2 Other External Environment Privilege Summary


A list of the system privileges and object permissions required to complete the various external environment
tasks.

Viewing or Modifying C ESQL, C ODBC, or CLR (.NET) Executable Properties


Database Version

Other External Environment Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL OBJECT sys
tem privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]

1132

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Adding a System Privilege to a Standalone Role [page 886]


Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.21.5 Working in a C ODBC External Environment


View and update the properties of C ODBC32 and C ODBC64 external environments.
Install the C or C++ code outside of SAP IQ Cockpit. You cannot use SAP IQ Cockpit to install the executable.

Related Information
Viewing or Modifying C ODBC Executable Properties [page 1133]
Other External Environment Privilege Summary [page 1135]

5.21.5.1 Viewing or Modifying C ODBC Executable Properties


Display and change the properties of a C ODBC32 or C ODBC64 external environment, including the location
of the executable and the associated user.

Prerequisites
Database Version

Other External Environment Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1133

Database Version

Other External Environment Privileges Required

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL OBJECT sys
tem privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click External Environments.

3. In the right pane, select a C ODBC32 or C ODBC64 external environment, and do one of:
Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in read-only
mode.
Page

Property

Description

General

Name

Name of the external environment.

Type (Read-only)

Type of environment.

Scope (Read-only)

Scope of the environment. Valid val


ues are:

Supports results set (Read-only)

1134

DATABASE

CONNECTION

Indicates whether the environment


supports a results set. Valid values
are:

Yes

No

Location

Path to the C ODBC32 or C ODBC64


executable. It must be on a file sys
tem accessible to the SAP IQ system.

User

SAP IQ user or role/group that the ex


ternal environment uses to log in to
the database. The user or role/group
must have been granted DBA author
ity (15.x) or the MANAGE ANY EXTER
NAL ENVIRONMENT system privilege
(16.x).

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Comment

Text field for adding optional com


ments.

6. Click OK to update any changes to the database and close the page.

5.21.5.2 Other External Environment Privilege Summary


A list of the system privileges and object permissions required to complete the various external environment
tasks.

Viewing or Modifying C ESQL, C ODBC, or CLR (.NET) Executable Properties


Database Version

Other External Environment Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL OBJECT sys
tem privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1135

5.21.6 Working in a CLR (.NET) External Environment


View and update the properties of a CLR external environment.
The CLR external environment is supported on Windows servers only.
Install the .NET code outside of SAP IQ Cockpit. You cannot use SAP IQ Cockpit to install the executable.

Related Information
Viewing or Modifying CLR (.NET) Executable Properties [page 1136]
Other External Environment Privilege Summary [page 1138]

5.21.6.1 Viewing or Modifying CLR (.NET) Executable


Properties
Display and change the properties of a CLR external environment, including the location of the executable and
the associated user.

Prerequisites
Database Version

Other External Environment Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL OBJECT sys
tem privilege

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click External Environments.

3. In the right pane, select a CLR (.NET) external environment, and do one of:

1136

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Click the arrow to the right of the name.


Click the Actions button.
4. Select Properties.
5. View or modify the properties.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in read-only
mode.
Page

Property

Description

General

Name

Name of the external environment.

Type (Read-only)

Type of environment.

Scope (Read-only)

Scope of the environment. Valid val


ues are:

Supports results set (Read-only)

DATABASE

CONNECTION

Indicates whether the environment


supports a results set. Valid values
are:

Yes

No

Location

Path to the .NET executable. It must


be on a file system accessible to the
SAP IQ system.

User

SAP IQ user or role/group that the ex


ternal environment uses to log in to
the database. The user or role/group
must have been granted DBA author
ity (15.x) or the MANAGE ANY EXTER
NAL ENVIRONMENT system privilege
(16.x).

Comment

Text field for adding optional com


ments.

6. Click OK to update any changes to the database and close the page.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1137

5.21.6.2 Other External Environment Privilege Summary


A list of the system privileges and object permissions required to complete the various external environment
tasks.

Viewing or Modifying C ESQL, C ODBC, or CLR (.NET) Executable Properties


Database Version

Other External Environment Privileges Required

SAP IQ 15.3 and 15.4

View any external environment property page none


Modify any external environment property DBA authority

SAP IQ 16.0

View any external environment property page none


Modify any external environment property MANAGE ANY EXTERNAL OBJECT sys
tem privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.22 Functions
Create, delete, display, and manage the properties of functions in SAP IQ.
Sample functions and procedures are provided with SAP IQ. Sample functions are visible in SAP IQ Cockpit in
the EXPLORE workset (

1138

IQ Servers

Compiled Objects

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

Functions . The samples include explanatory

SAP IQ Cockpit
Administer SAP IQ

comments and can be found in IQ/IQ-X_X/samples/udf, where X_X is the SAP IQ release number (16.0, for
example).

Related Information
Creating a Watcom SQL or Transact-SQL Function [page 1139]
Creating an External Java Function [page 1141]
Creating an External C/C++ Scalar or Aggregate Function [page 1142]
Deleting a Function [page 1144]
Generating Function DDL Commands [page 1145]
Viewing and Modifying a Function [page 1146]
Granting Function EXECUTE Permission [page 1148]
Revoking Function EXECUTE Permission [page 1150]
Function Privilege Summary [page 1151]

5.22.1 Creating a Watcom SQL or Transact-SQL Function


Set up a new Watcom SQL or Transact-SQL function on an SAP IQ server.

Prerequisites
Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

Watcom SQL or Transact-SQL function to be owned by self one of:

DBA authority

RESOURCE ADMIN authority

Watcom SQL or Transact-SQL function to be owned by any user DBA authority


SAP IQ 16.0

Watcom SQL or Transact-SQL to be owned by self CREATE PROCEDURE system


privilege
Watcom SQ or Transact-SQL function to be owned by any user one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1139

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Functions.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the function will be created

Select the system for which the function will be created.

Which user or group/role do you want to own the func


tion?

Select the user or role/group to own the function.

What do you want to name the function?

Select a unique name for the new function; maximum of


128 characters.

Which SQL dialect or language do you want to use?

Select Watcom-SQL or Transact-SQL.

Use SQL template

(Optional) Select to insert a hardcoded SQL template and


skip the wizard page for specifying a return type. You can
also set a Watcom SQL function to be deterministic or
nondeterministic.

6. If you chose to use the SQL template, skip to step 7 [page 1140]. Otherwise, on the Specify Return Type
page, select the type of value to return and define a name for the return variable.
7. On the SQL page, edit the code provided by the wizard.
a. Define input parameters: name, type, and default value.
b. Enter function statements.
c. Make any other changes needed to complete your function.
d. (Optional) Enter a comment describing the function.
Comments can include both HTML and Javadoc tags, so you can incorporate them into your
generated database documentation.
8. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1140

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.22.2 Creating an External Java Function


Set up a new external Java function on an SAP IQ server.

Prerequisites
Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

External Java function to be owned by self or any user DBA authority

SAP IQ 16.0

External Java function to be owned by self all of:

CREATE PROCEDURE system privilege

CREATE EXTERNAL REFERENCE system privilege

External Java function to be owned by any user CREATE EXTERNAL REFERENCE


system privilege along with one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


(Optional) Install the required Java classes and JAR files in the database. (You can create the function if
the classes and JAR files are not installed, but SAP IQ cannot execute the function.)

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Functions.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select click New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the function will be created

Select the system for which the function will be created.

Which user or group/role do you want to own the func


tion?

Select the user or role/group to own the function.

What do you want to name the function?

Select a unique name for the new function; maximum of


128 characters.

Which SQL dialect or language do you want to use?

Select External Java.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1141

Property

Description

Use SQL template

(Optional) Select to insert a hardcoded SQL template and


skip the wizard page for specifying a return type. You can
also set a Watcom SQL function to be deterministic or
nondeterministic.

6. If you chose to use the SQL template, skip to step 7 [page 1142]. Otherwise, on the Specify Return Type
page, select the type of value to return and define a name for the return variable.
7. On the SQL page, edit the code provided by the wizard.
a. Define input parameters: name, type, and default value.
b. If you chose to use the SQL template, replace the placeholder external name at the end of the query
with a real name that follows the format of the placeholder.
c. Make any other changes needed to complete your function.
d. (Optional) Enter a comment describing the function.
Comments can include both HTML and Javadoc tags, so you can incorporate them into your
generated database documentation.
8. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.22.3 Creating an External C/C++ Scalar or Aggregate


Function
Set up a new external C or C++ aggregate function on an SAP IQ server.

Prerequisites
Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

External C/C++ Scalar or Aggregate function to be owned by self or any user DBA
authority

1142

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Function Privileges Required

SAP IQ 16.0

External C/C++ Scalar or Aggregate function to be owned by self all of:

CREATE PROCEDURE system privilege

CREATE EXTERNAL REFERENCE system privilege

External C/C++ Scalar or Aggregate function to be owned by any user CREATE EX


TERNAL REFERENCE system privilege along with one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


You must be licensed for the InDatabase Analytics Option (IQ_IDA).
(Optional) Copy the library that contains the external function to a location accessible to the SAP IQ
server. (You can create the function if the library is not accessible to SAP IQ, but SAP IQ cannot execute
the function.)

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Functions.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the function will be created

Select the system for which the function will be created.

Which user or group/role do you want to own the func


tion?

Select the user or role/group to own the function.

What do you want to name the function?

Select a unique name for the new function; maximum of


128 characters.

Which SQL dialect or language do you want to use?

Select External C/C++ scalar or External C/C++ aggre


gate.

Use SQL template

(Optional) Select to insert a hardcoded SQL template and


skip the wizard page for specifying a return type. You can
also set a Watcom SQL function to be deterministic or
nondeterministic.

6. If you chose to use the SQL template, skip to step 9 [page 1144]. Otherwise, on the Specify Return Type
page, select the type of value to return and whether to create a deterministic function.
7. On the Function Attributes page, specify the attributes of the function, including the names of its shared
library file and descriptor function.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1143

8. For External C/C++ aggregate only, on the Function Clauses page, configure clauses that control windows
on the Function Clauses page.
9. On the SQL page, edit the code provided by the wizard.
a. Define input parameters: name, type, and default value.
b. If you chose to use the SQL template, replace the placeholder external name at the end of the query
with a real name of the form functionDescriptorName@libraryName.
c. Make any other changes needed to complete your function.
d. (Optional) Enter a comment describing the function.
Comments can include both HTML and Javadoc tags, so you can incorporate them into your
generated database documentation.
10. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.22.4 Deleting a Function


Remove a function from an SAP IQ server.

Prerequisites
Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the function

One of:

DROP ANY PROCEDURE system privilege

DROP ANY OBJECT system privilege

You own the function

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

1144

IQ Servers

Compiled Objects , and then click Functions.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete.
5. Click Yes to confirm deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.22.5 Generating Function DDL Commands


Generate the data description language for creating a function on an SAP IQ server. The DDL code can be a
useful reference and training tool.

Prerequisites
Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Functions.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1145

4. Select Generate DDL.


The DDL view shows the SQL code used to add the selected functions.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.22.6 Viewing and Modifying a Function


View and change the SQL statement and properties of a function on an SAP IQ server.

Prerequisites
Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

View any function property page regardless of type none


Modify permissions for any function type one of:

DBA authority

PERMS ADMIN authority

You own the database object

Modify any other function property regardless of type one of:

1146

DBA authority

You own the function

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Function Privileges Required

SAP IQ 16.0

View any function property page regardless of type none


Modify SQL code for Watcom SQL or Transact-SQL function one of:

ALTER ANY PROCEDURE system privilege

ALTER ANY OBJECT system privilege

You own the function

Modify SQL code for External C/C++ Scalar or Aggregate, or External Java function
CREATE EXTERNAL REFERENCE system privilege along with one of:

ALTER ANY PROCEDURE system privilege

ALTER ANY OBJECT system privilege

You own the function

Modify a comment for any function type one of:

CREATE ANY PROCEDURE system privilege.

ALTER ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the function

Modify permissions for any function type one of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Functions.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1147

Page

Property

Description

General

Name (Read-only)

Name of the function.

Owner (Read-only)

Owner of the function.

Creation Time (Read-only)

Date and time the function was cre


ated.

Dialect (Read-only)

Ddialect of the function. Valid values


are:

Comment
Parameters

Watcom-SQL

Transact-SQL

External C/C++ scalar

External C/C++ aggregate

External Java

Text field for adding optional com


ments.

The parameters defined from the function.

(Read-only)
SQL

The SQL code to be executed by the function.

Permissions

See Granting Function EXECUTE Permission [page 1148] and Revoking Func
tion EXECUTE Permission [page 1150]

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.22.7 Granting Function EXECUTE Permission


Grant function execute permission to users and roles.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

1148

DBA authority

PERMS ADMIN authority

You own the database object

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Database Version

Database Object Privileges Required

SAP IQ 16.0

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Functions.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions, then click Grant in the right pane.
6. On the Welcome page, indicate whether the permission is being granted to users or roles/groups.
7. On the Grantees page, select one or more grantees. Click the box in the header row to select all available
grantees.
8. On the Permissions page, ensure Execute is selected.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1149

5.22.8 Revoking Function EXECUTE Permission


Remove function execute permission from users and roles.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Functions.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
A list of grantees currently granted permission on the function appears.
6. In the right pane, select a grantee, and click Revoke.

Caution
There is no confirmation prompt before the permission is revoked.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1150

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.22.9 Function Privilege Summary


A list of the system privileges and object permissions required to complete the various function tasks.

Creating a Watcom SQL or Transact-SQL Function


Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

Watcom SQL or Transact-SQL function to be owned by self one of:

DBA authority

RESOURCE ADMIN authority

Watcom SQL or Transact-SQL function to be owned by any user DBA authority


SAP IQ 16.0

Watcom SQL or Transact-SQL to be owned by self CREATE PROCEDURE system


privilege
Watcom SQ or Transact-SQL function to be owned by any user one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

Creating an External C/C++ Scalar or Aggregate Function


Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

External C/C++ Scalar or Aggregate function to be owned by self or any user DBA
authority

SAP IQ 16.0

External C/C++ Scalar or Aggregate function to be owned by self all of:

CREATE PROCEDURE system privilege

CREATE EXTERNAL REFERENCE system privilege

External C/C++ Scalar or Aggregate function to be owned by any user CREATE EX


TERNAL REFERENCE system privilege along with one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

Creating an External Java Function


Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

External Java function to be owned by self or any user DBA authority

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1151

Database Version

Function Privileges Required

SAP IQ 16.0

External Java function to be owned by self all of:

CREATE PROCEDURE system privilege

CREATE EXTERNAL REFERENCE system privilege

External Java function to be owned by any user CREATE EXTERNAL REFERENCE


system privilege along with one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

Deleting a Function
Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the function

One of:

DROP ANY PROCEDURE system privilege

DROP ANY OBJECT system privilege

You own the function

Generating Function DDL Commands


Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

1152

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Viewing or Modifying Function Properties


Database Version

Function Privileges Required

SAP IQ 15.3 and 15.4

View any function property page regardless of type none


Modify permissions for any function type one of:

DBA authority

PERMS ADMIN authority

You own the database object

Modify any other function property regardless of type one of:

SAP IQ 16.0

DBA authority

You own the function

View any function property page regardless of type none


Modify SQL code for Watcom SQL or Transact-SQL function one of:

ALTER ANY PROCEDURE system privilege

ALTER ANY OBJECT system privilege

You own the function

Modify SQL code for External C/C++ Scalar or Aggregate, or External Java function
CREATE EXTERNAL REFERENCE system privilege along with one of:

ALTER ANY PROCEDURE system privilege

ALTER ANY OBJECT system privilege

You own the function

Modify a comment for any function type one of:

CREATE ANY PROCEDURE system privilege.

ALTER ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the function

Modify permissions for any function type one of:

SAP IQ Cockpit
Administer SAP IQ

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1153

Granting or Revoking Function EXECUTE Permission


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.23 Procedures
Create, delete, display, and manage the properties of procedures in SAP IQ, including remote procedures and
table-valued user-defined functions / table parameterized functions.
SAP provides sample procedures and functions with SAP IQ. Sample procedures are visible in SAP IQ Cockpit
in the EXPLORE workset ( IQ Servers Compiled Objects Procedures ). The samples include
explanatory comments and can be found in IQ/IQ-X_X/samples/udf, where X_X is the SAP IQ release
number (16.0, for example).

1154

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Related Information
Creating a Procedure [page 1155]
Creating a Remote Procedure [page 1157]
Creating a Table UDF or TPF [page 1159]
Executing a Procedure, Table UDF, or TPF using View Data in SQL [page 1162]
Deleting a Procedure, Table UDF, or TPF [page 1163]
Generating Procedure, Table UDF, or TPF DDL Commands [page 1164]
Viewing or Modifying a Procedure, Table UDF, or TPF [page 1165]
Granting Procedure EXECUTE Permission [page 1167]
Revoking Procedure EXECUTE Permission [page 1168]
Procedure Privilege Summary [page 1169]

5.23.1 Creating a Procedure


Set up a new procedure on an SAP IQ server.

Prerequisites
Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

Watcom SQL or Transact-SQL procedure to be owned by self one of:

DBA authority

RESOURCE ADMIN authority

Watcom SQL or Transact-SQL, to be owned by any user DBA authority


External C/C++ or External Environment procedure to be owned by self or any user
DBA authority

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1155

Database Version

Procedure Privileges Required

SAP IQ 16.0

Watcom SQL or Transact-SQL procedure to be owned by self CREATE PROCEDURE


system privilege
Watcom SQL or Transact-SQL procedure to be owned by any user one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

External C/C++ or External Environment procedure to be owned by self all of:

CREATE EXTERNAL REFERENCE system privilege

CREATE PROCEDURE system privilege

External C/C++ or External Environment procedure to be owned by any user CRE


ATE EXTERNAL REFERENCE system privilege along with one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


(Optional) If you are creating a Java procedure, install the required Java classes and JAR files in the
database. (You can create the procedure if the classes and JAR files are not installed, but SAP IQ cannot
execute the procedure.)
(Optional) If you are creating a procedure that relies on a non-Java external environment, copy the library
that contains the external procedure to a location accessible to the SAP IQ server. (You can create the
procedure if the library is not accessible to SAP IQ, but SAP IQ cannot execute the procedure.)

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Procedures.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:

1156

Property

Description

Select a resource on which the procedure will be created

Select the system for which the procedure will be created.

Which user or group/role do you want to own the proce


dure?

Select the user or role/group to own the procedure.

What do you want to name the procedure?

Enter a unique name for the new procedure; maximum of


128 characters.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

Which SQL dialect or language do you want to use?

Select the language or SQL dialect for the procedure. If


you choose External environment, select an environ
ment.

Use SQL template

(Optional) Select to insert a hardcoded SQL template.


Leave the box unchecked to retrieve generated SQL from
the back end.

6. On the SQL page, edit the code provided by the wizard.


a. For Watcom SQL and Transact-SQL, define input parameters in the format provided.
b. For Watcom SQL, define the result in the format provided.
c. For external languages, fill in the external name in the format provided.
d. Enter procedure statements.
e. Make any other changes needed to complete your procedure.
f. (Optional) Enter a comment describing the procedure.
Comments can include both HTML and Javadoc tags, so you can incorporate them into your
generated database documentation.
7. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.23.2 Creating a Remote Procedure


Define a local alias for a procedure: a means of accessing a procedure on a remote server, through a local
resource. Before you can map procedures from another server to the local alias, you must define the remote
server where the procedure is located.

Prerequisites
Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

Remote procedure to be owned by self or any user DBA authority

SAP IQ 16.0

Remote procedure to be owned by self CREATE PROCEDURE system privilege


Remote procedure to be owned by any user one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1157

In a multiplex configuration, the coordinator is running.

Note
You must define a remote server before you can define a remote procedure on it.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Procedures.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New Remote Procedure.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the remote procedure will be


created

Select the system for which the remote procedure will be


created.

Which user or group/role do you want to own the remote


procedure?

Select the user or role/group to own the remote proce


dure.

Which remote server contains the procedure?

Select the remote server.

Which procedure do you want to use for this remote pro


cedure?

Select the remote procedure.

What do you want to name the remote procedure?

Enter a unique name for the new remote procedure defini


tion; maximum of 128 characters. The combination of
owner and procedure name must be unique in the data
base

6. On the SQL page, edit the code provided by the wizard to provide parameter definitions for the remote
procedure.

Note
When a query is made to list procedures on a remote server, the query result does not display
parameters. Therefore, if a remote procedure does have set parameters (IN, OUT, IN/OUT or RESULT),
they must be typed in the editor.
7. (Optional) Enter a comment to further identify the remote procedure.
8. Click Finish.

Example
Use a case statement to classify the results of a query:
CREATE PROCEDURE ProductType (IN product_id INT, OUT type CHAR(10))

1158

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

BEGIN
DECLARE prod_name CHAR(20) ;
SELECT name INTO prod_name FROM "GROUPO"."Products"
WHERE ID = product_id;
CASE prod_name
WHEN 'Tee Shirt' THEN
SET type = 'Shirt'
WHEN 'Sweatshirt' THEN
SET type = 'Shirt'
WHEN 'Baseball Cap' THEN
SET type = 'Hat'
WHEN 'Visor' THEN
SET type = 'Hat'
WHEN 'Shorts' THEN
SET type = 'Shorts'
ELSE
SET type = 'UNKNOWN'
END CASE ;
END

Related Information
Creating a Proxy Table [page 453]
Creating an External Login [page 406]
Creating a Remote Server [page 397]
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.23.3 Creating a Table UDF or TPF


Set up an external table-valued user-defined function (Table UDF) or external table parameterized function
(TPF) in C/C++, or an external table-valued user-defined function in Java (Java Table UDF) on an SAP IQ
server.

Prerequisites
Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1159

Database Version

Procedure Privileges Required

SAP IQ 16.0

Table UDF or TPF to be owned by self all of:

CREATE EXTERNAL REFERENCE system privilege

CREATE PROCEDURE system privilege

Table UDF or TPF to be owned by any user CREATE EXTERNAL REFERENCE system
privilege along with one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

The SAP IQ system is running, registered, and authenticated.


(Optional) If you are creating a Java procedure, install the required Java classes and JAR files in the
database. (You can create the procedure if the classes and JAR files are not installed, but SAP IQ cannot
execute the procedure.)
(Optional) If you are creating a C/C++ procedure, copy the library that contains the procedure to a
location accessible to the SAP IQ server. (You can create the procedure if the library is not accessible to
SAP IQ, but SAP IQ cannot execute the procedure.)

Context
For detailed information on UDFs, in the SAP IQ documentation, see SAP IQ User-Defined Functions.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Procedures.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New Table UDF/TPF.
5. On the Welcome page, specify:

1160

Property

Description

Select a resource on which the procedure will be created

Select the system for which the procedure will be created.

Which user or group/role do you want to own the proce


dure?

Select the user or role/group to own the procedure.

What do you want to name the procedure?

Enter a unique name for the new procedure; maximum of


128 characters.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Property

Description

What do you want to create?

Select the type of table to create. Valid values are:

External C/C++ table UDF

External C/C++ TPF

External Java table UDF

What do you want to name the remote procedure?

Enter a unique name for the new remote procedure; maxi


mum of 128 characters.

Use SQL template

Select provide comments with syntax examples to help


you define parameters and results. Leave the box un
checked if you want to use the Return Structure page to
define the result.

6. If you chose not to use the SQL template, define the result on the Return Structure page.
7. On the SQL page, edit the code provided by the wizard.
a. Define input parameters using the format provided.
b. Replace the placeholder external name at the end of the query with a real name that follows the format
of the placeholder.
c. Make any other changes needed to complete your procedure.
8. (Optional) Enter a comment describing the procedure.
Comments can include both HTML and Javadoc tags, so you can incorporate them into your generated
database documentation.
9. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1161

5.23.4 Executing a Procedure, Table UDF, or TPF using View


Data in SQL
Populate the Mini iSQL window with the result set of a selected procedure, remote procedure, Table UDF, or
TPF.

Prerequisites
Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You have EXECUTE permission on the procedure

You own the procedure

One of:

EXECUTE ANY PROCEDURE system privilege

You have EXECUTE permission on the procedure

You own the procedure

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Procedures.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select View Data in SQL.
5. (For a procedure or remote procedure requiring additional parameters only) On the Parameters page,
click in the Value column for each parameter and enter a value.
6. On the Results page, click Execute.
The results of the executed procedure display in SQL. Select Execute to execute the procedure again.

Related Information
Creating a Remote Server [page 397]
Creating an External Login [page 406]
Creating a Proxy Table [page 453]

1162

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Creating a Remote Procedure [page 1157]


Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.23.5 Deleting a Procedure, Table UDF, or TPF


Remove a procedure, remote procedure, Table UDF, or TPF from an SAP IQ server.

Prerequisites
Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You own the procedure

One of:

DROP ANY PROCEDURE system privilege

DROP ANY OBJECT system privilege

You own the procedure

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Procedures.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete
5. Click Yes to confirm the deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1163

5.23.6 Generating Procedure, Table UDF, or TPF DDL


Commands
Generate the data description language for creating a procedure, remote procedure, Table UDF, or TPF on an
SAP IQ server. The DDL code can be a useful reference and training tool.

Prerequisites
Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Procedures.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view shows the SQL code used to add the selected procedures.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1164

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.23.7 Viewing or Modifying a Procedure, Table UDF, or TPF


Examine the SQL statement and properties of a procedure, remote procedure, Table UDF, or TPF on an SAP IQ
server. You can edit the SQL statement and change some property values.

Prerequisites
Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

View any procedure property page regardless of type none


Modify permissions for any procedure type one of:

DBA authority

PERMS ADMIN authority

You own the database object

Modify any other procedure property regardless of type one of:

SAP IQ 16.0

DBA authority

You own the procedure

View any procedure property page regardless of type none


Modify SQL code for Watcom-SQL or Transcat-SQL procedures one of:

ALTER ANY PROCEDURE system privilege

ALTER ANY OBJECT system privilege

You own the procedure

Modify SQL code for Table UDFs, TPFs, or External Environment procedures CREATE
EXTERNAL REFERENCE system privilege along with one of:

ALTER ANY PROCEDURE system privilege.

ALTER ANY OBJECT system privilege

You own the procedure

Modify a comment for any procedure type one of:

CREATE ANY PROCEDURE system privilege

ALTER ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the procedure

Modify permissions for any procedure type one of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

The SAP IQ system is running, registered, and authenticated.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1165

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Procedures.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify the properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Read-only)

Name of the procedure.

Owner (Read-only)

Owner of the procedure.

Creation Time (Read-only)

Date and time the procedure was cre


ated.

Dialect (Read-only)

Dialect of the procedure. Valid values


are:

Comment
Parameters

Watcom-SQL

Transact-SQL

External C/C++ scalar

External C/C++ aggregate

External Java

Text field for adding optional com


ments.

The parameters defined from the procedure.

(Read-only)
SQL

The SQL code to be executed by the procedure.

Permissions

See Granting Procedure EXECUTE Permission [page 1167] and Revoking


Procedure EXECUTE Permission [page 1168].

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1166

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.23.8 Granting Procedure EXECUTE Permission


Grant procedure execute permission to users and roles.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Procedures.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions, then click Grant in the right pane.
6. On the Welcome page, indicate whether the permission is being granted to users or roles/groups.
7. On the Grantees page, select one or more grantees. Click the box in the header row to select all available
grantees.
8. On the Permissions page, ensure Execute is selected.
9. Click Finish.
10. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1167

5.23.9 Revoking Procedure EXECUTE Permission


Remove procedure execute permission from users and roles.

Prerequisites
Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Procedures.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. In the left pane, click Permissions.
A list of grantees currently granted permission on the procedure appears.
6. In the right pane, select a grantee, and click Revoke.

Caution
There is no confirmation prompt before the permission is revoked.
7. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1168

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.23.10 Procedure Privilege Summary


A list of the system privileges and object permissions required to complete the various procedure tasks.

Creating a Procedure
Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

Watcom SQL or Transact-SQL procedure to be owned by self one of:

DBA authority

RESOURCE ADMIN authority

Watcom SQL or Transact-SQL, to be owned by any user DBA authority


External C/C++ or External Environment procedure to be owned by self or any user
DBA authority
SAP IQ 16.0

Watcom SQL or Transact-SQL procedure to be owned by self CREATE PROCEDURE


system privilege
Watcom SQL or Transact-SQL procedure to be owned by any user one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

External C/C++ or External Environment procedure to be owned by self all of:

CREATE EXTERNAL REFERENCE system privilege

CREATE PROCEDURE system privilege

External C/C++ or External Environment procedure to be owned by any user CRE


ATE EXTERNAL REFERENCE system privilege along with one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

Creating a Remote Procedure


Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

Remote procedure to be owned by self or any user DBA authority

SAP IQ 16.0

Remote procedure to be owned by self CREATE PROCEDURE system privilege


Remote procedure to be owned by any user one of:

SAP IQ Cockpit
Administer SAP IQ

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1169

Creating a Table UDF or TPF


Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

Table UDF or TPF to be owned by self all of:

CREATE EXTERNAL REFERENCE system privilege

CREATE PROCEDURE system privilege

Table UDF or TPF to be owned by any user CREATE EXTERNAL REFERENCE system
privilege along with one of:

CREATE ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

Executing a Procedure Using View Data in SQL


Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

You have EXECUTE permission on the procedure

You own the procedure

One of:

EXECUTE ANY PROCEDURE system privilege

You have EXECUTE permission on the procedure

You own the procedure

Deleting a Procedure
Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

1170

DBA authority

You own the procedure

One of:

DROP ANY PROCEDURE system privilege

DROP ANY OBJECT system privilege

You own the procedure

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Generating Procedure DDL Commands


Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

Viewing or Modifying Procedure Properties


Database Version

Procedure Privileges Required

SAP IQ 15.3 and 15.4

View any procedure property page regardless of type none


Modify permissions for any procedure type one of:

DBA authority

PERMS ADMIN authority

You own the database object

Modify any other procedure property regardless of type one of:

SAP IQ Cockpit
Administer SAP IQ

DBA authority

You own the procedure

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1171

Database Version

Procedure Privileges Required

SAP IQ 16.0

View any procedure property page regardless of type none


Modify SQL code for Watcom-SQL or Transcat-SQL procedures one of:

ALTER ANY PROCEDURE system privilege

ALTER ANY OBJECT system privilege

You own the procedure

Modify SQL code for Table UDFs, TPFs, or External Environment procedures CREATE
EXTERNAL REFERENCE system privilege along with one of:

ALTER ANY PROCEDURE system privilege.

ALTER ANY OBJECT system privilege

You own the procedure

Modify a comment for any procedure type one of:

CREATE ANY PROCEDURE system privilege

ALTER ANY PROCEDURE system privilege

CREATE ANY OBJECT system privilege

ALTER ANY OBJECT system privilege

COMMENT ANY OBJECT system privilege

You own the procedure

Modify permissions for any procedure type one of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

Granting or Revoking Procedure EXECUTE Permission


Database Version

Database Object Privileges Required

SAP IQ 15.3 and 15.4

One of:

SAP IQ 16.0

DBA authority

PERMS ADMIN authority

You own the database object

One of:

MANAGE ANY OBJECT PRIVILEGE system privilege

You own the database object

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]

1172

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Adding a System Privilege to a Standalone Role [page 886]


Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

5.24 Web Services


The IQ (catalog) system store contains a built-in HTTP server that allows you to provide Web services, as well
as to access Web services in other databases and over the Internet. You can manage Web services only for IQ
(catalog) system store tables.
Web services define valid URLs and their functionality. Web services commonly facilitate data transfer and
interoperability. You create and store Web services in databases; a single database can define multiple Web
services. You can define Web services in different databases so that they appear to be part of a single Web
site.
Simple Object Access Protocol (SOAP) is the standard used for access, but the built-in HTTP server also lets
you handle standard HTTP and HTTPS requests from client applications.
SOAP provides a method for internet communication, between applications such as those written in Java, or a
Microsoft .NET language like Visual C#. SOAP messages define the services that a server provides. Actual data
transfer generally takes place using HTTP. Any application, such as a client or server, that participates in SOAP
communication is called a SOAP node or SOAP endpoint. Such applications can transmit, receive, or process
SOAP messages.
SAP IQ Web services can listen for and handle standard SOAP requests. Web services provide client
applications an alternative to such traditional interfaces as JDBC and ODBC. Web services can be accessed
from client applications written in a variety of languages and running on a variety of platforms. Even common
scripting languages such as Perl and Python provide access to Web services. You create Web services in a
database using the CREATE SERVICE statement.
SAP IQ can also function as a SOAP or HTTP client, permitting applications running within the database to
access standard Web services available over the Internet, or provided by other SAP IQ databases. This client
functionality is accessed through stored functions and procedures.
In addition, the term Web services also refers to applications that use the built-in Web server to handle HTTP
requests from clients. These applications generally function like traditional database-backed Web
applications, but can be more compact and are easier to write as the data and the entire application can reside

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1173

within a database. In this type of application, the Web service typically returns documents in HTML format.
The GET, HEAD, and POST methods are supported.
The collection of Web services within your database together define the available URLs. Each service provides
a set of Web pages. Typically, the content of these pages is generated by procedures that you write and store
in your database, although they can be a single statement or, optionally, allow users to execute statements of
their own. These Web services become available when you start the database server with options that enable it
to listen for HTTP requests.
Since the HTTP server that handles Web service requests is embedded in the database, performance is good.
Applications that use Web services are easily deployed, since no additional components are needed, beyond
the database and database server.

Related Information
Creating a Web Service [page 1174]
Enabling a Web Service [page 1178]
Disabling a Web Service [page 1179]
Deleting a Web Service [page 1181]
Generating Web Service DDL Commands [page 1182]
Viewing or Modifying Web Services Properties [page 1183]
Web Service Privilege Summary [page 1187]

5.24.1 Creating a Web Service


Create a Web service to facilitate data transfer with SOAP or HTTP.

Prerequisites
Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY WEB SERVICE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Context
Web service definitions are stored in the IQ (catalog) system store only.

1174

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Web Services.

3. In the left pane, do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select New.
5. On the Welcome page, specify:
Property

Description

Select a resource on which the web service will be created Select the system for which the Web service will be cre
ated.
(Multiplex only) Select a multiplex server on which to we
service will be created?

Select the multiplex server on which the Web service will


be created.

SAP IQ Cockpit agent status

The SAP IQ Cockpit agent for the multiplex server must


be registered and authenticated in order to create a Web
service on it. If the SAP IQ Cockpit Agent status indicates
unregistered, click the Register Agent and Authenticate
Agent buttons to register and authenticate.

What do you want to name the new web service?

Enter a unique name for the new procedure; maximum of


128 characters. The Web service name must not begin or
end with a slash (/) or contain two or more consecutive
slashes.

6. Click Next.
7. On the Type page, specify:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1175

Property

Description

Which type of web service do you want to create?`

Select the Web service type. Valid values are:


Raw the result set of the SQL statement or proce
dure is sent to the client without any additional for
matting. You must enable authorization if this service
does not have a statement.
XML the result set of the SQL statement or proce
dure is assumed to be XML; if it is not, then the result
set is converted to XML RAW format. You must ena
ble authorization if this service does not have a state
ment.
HTML the result set of the SQL statement or proce
dure is formatted as an HTML document with a table
containing the rows and columns. You must enable
authorization if this service does not have a state
ment.
SOAP the request must be a valid SOAP (Simple Ob
ject Access Protocol) request, and the result set is
formatted as a SOAP response.
DISH a DISH service acts as a proxy for a group of
SOAP services and generates a WSDL (Web Services
Description Language) file for each of its SOAP serv
ices.

Do you want this web service to be enabled.

Select to enable the Web service.

8. (For Raw, XML, HTML or JSON service types only) On the URL Path page, specify whether the remainder
of the URL path is permitted, and if so, how it is processed. Valid values are:
Property

Description

Off

The remainder of the URL path is not permitted (for ex


ample, http://<host-name>/<service-name>).

On

The remainder of the URL path is permitted and is set as a


single parameter (for example, http://<host-name>/
<service-name>/aaa/bbb/ccc url=aaa/bbb/ccc).

Elements

The remainder of the URL path is permitted and is set as


multiple parameters (for example, http://<host-name>/
<service-name>/aaa/bbb/ccc url1=aaa, url2=bbb,
url3=ccc).

9. (For SOAP or DISH service types only) On the Data Payload Format page, specify type of data payload
format the Web service should expose. Valid values are:

1176

Format

Description

Default

This format is equivalent to .NET in all cases except for


SOAP services that are handled by a DISH service. In such
cases, the DISH service's format is used instead of the
SOAP service's format.

.NET

This format is used for .NET clients that can accept Micro
soft's Dataset format. This is useful to SOAP clients devel
oped with Microsoft and Microsoft-compatible tools.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Format

Description

Concrete

This is a generic format used by SOAP toolkits such as


JAX-RPC (JAVA) to generate interfaces that correlate to a
result set returned by SQL Anywhere.
Select Expose an explicit response object for this web
service to have this web service expose an explicit re
sponse object if the service calls a procedure that returns
a result set. The XML schema of this object will contain
column names and data types based on the result set.

XML

This is the most compatible format; it simply returns the


result set as a string. Clients will need to parse this string
to access the various elements within it.

10. (For SOAP service type only) On the Data Type Behavior page, specify which data typing behavior to be
used for this Web service. Valid formats are:
Behavior

Description

Off

This is the default behavior. No data typing of inputs and


outputs (DNET is String only). Equivalent to the behavior
in SQL Anywhere version 9.0.x.

On

Supports data typing for input parameters and result set


responses.

In

Supports data typing for input parameters only. XML and


CONCRETE formats contain no type information; DNET is
String only.

Out

Supports data typing for result set responses of all SOAP


service formats; input parameters are Strings only.

11. (For DISH service type only) (Optional) On the Service Name Prefix page, specify a SOAP service name
prefix to specify the group of SOAP services that apply to this DISH service. Only those SOAP services
whose names begin with this prefix will be handled by this DISH service.
12. On the Methods page, specify the request methods to be enabled for the Web service. Valid methods are:

Note
Available methods depend on the service type specified.
Method

Description

HEAD

Retrieve information written in a response header.

GET

Request a response

POST

Submit data to be processed by a resource

PUT

Upload a resource

DELETE

Remove a resource

13. On the Authorization page specify:

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1177

Property

Description

Require authentication for this web service

Select if authentication is required to execute the Web


service.

User

If user authentication is required, select a user.

14. On the Security page, select the option to configure the Web service to only be processed if the request is
made through a secure (HTTPS) connection. If a request to a secure web service is received on the HTTP
port, then the request will be redirected to the HTTPS port.
15. On the SQL Statement page, specify a SQL command, (usually a stored procedure) called when someone
accesses a service.
Defining an SQL command is optional for Raw, XML, HTML or JSON service types. You must select the
This web service has the following SQL statement option before you can enter the SQL command. For
SOAP or DISH service types, the This web service has the following SQL statement option is unavailable
since defining an SQL command is mandatory.
Services without statements cause serious security risk because they permit Web clients to execute
arbitrary commands. When creating services without statements, you must enable authorization, which
forces all clients to provide a valid user name and password. SAP recommends that all production
systems define statements in their services.
In a non-production environment, you can create services that do not include statements. Services
configured in this way can be useful when you are testing a service, or want a general way to access
information. Either omit the statement entirely or use the phrase NULL in place of the statement.
16. (Optional) On the Comment page, specify a comment for the Web service.
17. Click Finish.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.24.2 Enabling a Web Service


Enable a disabled Web service so the service can listen for requests over HTTP or HTTPS.

Prerequisites
Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY WEB SERVICE system privilege

The SAP IQ system is running, registered, and authenticated.

1178

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

In a multiplex configuration, the coordinator is running.


The Web service is disabled.

Context
Web service definitions are stored in the IQ (catalog) system store only.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Web Services.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Enabled. A disabled Web service has a value of false in the Enabled column.
5. Click Yes to confirm enabling.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

5.24.3 Disabling a Web Service


Disable a Web service to prevent the service from listening for requests over HTTP or HTTPS. The Web service
definition remains in the database.

Prerequisites
Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1179

Database Version

Web Service Privileges Required

SAP IQ 16.0

MANAGE ANY WEB SERVICE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.
The Web service is enabled.

Context
Web service definitions are stored in the IQ (catalog) system store only.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Web Services.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Disable. An enabled Web service has a value of true in the Enabled column.
5. Click Yes to confirm disabling.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1180

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.24.4 Deleting a Web Service


Delete an enabled or disabled Web service to permanently remove the object and its definition from the server.

Prerequisites
Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY WEB SERVICE system privilege

The SAP IQ system is running, registered, and authenticated.


In a multiplex configuration, the coordinator is running.

Context
Web service definitions are stored in the IQ (catalog) system store only.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Web Services.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Delete
5. Click Yes to confirm deletion.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1181

5.24.5 Generating Web Service DDL Commands


Display the data description language SQL code for adding a Web service to the IQ (catalog) system store. The
SQL code can be a useful reference and training tool.

Prerequisites
Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

The SAP IQ system is running, registered, and authenticated.

Context
Web service definitions are stored in the IQ (catalog) system store only.

Procedure
1. In the left pane, expand

IQ Servers

Schema Objects

Views , and then click Views.

2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Web Services.

3. In the right pane, select one or more items, and do one of:
Click the arrow to the right of the name.
Click the Actions button.

Tip
Use Shift-click or Control-click to select multiple items.
4. Select Generate DDL.
The DDL view shows the SQL code used to add the selected Web service to the IQ (catalog) system store.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1182

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.24.6 Viewing or Modifying Web Services Properties


Display or change the properties of the selected Web service.

Prerequisites
Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

View any Web service property page none


Modify any Web service property DBA authority

SAP IQ 16.0

View any Web service property page none


Modify any Web service property MANAGE ANY WEB SERVICE system privilege

The SAP IQ system is running, registered, and authenticated.


(Modifying properties only) In a multiplex configuration, the coordinator node is running.

Procedure
1. In SAP IQ Cockpit, click the EXPLORE workset.
2. In the left pane, expand

IQ Servers

Compiled Objects , and then click Web Services.

3. In the right pane, select an item, and do one of:


Click the arrow to the right of the name.
Click the Actions button.
4. Select Properties.
5. View or modify Web service properties.
When you are modifying properties, you need not click Apply before changing screens; however,
doing so saves any changes.
If you do not have privileges to modify properties, SAP IQ Cockpit displays the properties view in readonly mode.
Page

Property

Description

General

Name (Read-only)

Name of the selected web service.

Enabled

Select to enable the web service to listen for requests over HTTP or HTTPS. By de
fault, database servers do not listen for web service requests, leaving no way for cli
ents to access any services that may be defined in your database. If you clear this
option, the database server keeps the definition of the web service in the database,
but makes the web service unusable.

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1183

Page

Property

Description

Service type

Type of Web service. Valid values are:


Raw the result set of the SQL statement or procedure is sent to the client with
out any additional formatting. You must enable authorization if this service
does not have a statement.
XML the result set of the SQL statement or procedure is assumed to be XML; if
it is not, then the result set is converted to XML RAW format. You must enable
authorization if this service does not have a statement.
HTML the result set of the SQL statement or procedure is formatted as an
HTML document with a table containing the rows and columns. You must ena
ble authorization if this service does not have a statement.
SOAP the request must be a valid SOAP (Simple Object Access Protocol) re
quest, and the result set is formatted as a SOAP response.
DISH a DISH service acts as a proxy for a group of SOAP services and gener
ates a WSDL (Web Services Description Language) file for each of its SOAP
services.

URL path

Indicates whether URL paths are accepted, and if so, how they are processed. Valid
settings are:
Off

The remainder of the URL path is not permitted. If


the service name ends with a forward slash (/), se
lect Off.
For example, if Off is selected and you have the URL
path http://<host-name>/<service-

name>/aaa/bbb/ccc, only http://<hostname>/<service-name> is permitted. The re


mainder of the URL path, /<aaa/bbb/ccc is not
permitted.
On

The remainder of the URL path is permitted and is


set as a single parameter.
For example, in the URL path http://<host-

name>/<service-name>/aaa/bbb/ccc, the
remainder of the URL path is /aaa/bbb/ccc. It is
treated as a single parameter.
Elements

The remainder of the URL path is permitted and is


set as multiple parameters.
For example, in the URL path http://<host-

name>/<service-name>/aaa/bbb/ccc,
each element of the path is treated as a separate
parameter. For example, url1=aaa, url2=bbb,
url3=ccc, and so on.

1184

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Page

Property

Description

Format (For SOAP Generates output formats


and DISH services compatible with various types
only.)
of SOAP clients, such as .NET
or Java JAX-RPC. If a SOAP
service's format is not speci
fied, the format is inherited
from the service's DISH serv
ice declaration. If the DISH
service does not declare a
format, it defaults to DNET,
which is compatible with .NET
clients. A SOAP service that
does not declare a format can
be used with different types
of SOAP clients by defining
multiple DISH services, each
with a different format type.
Valid values are:
Default

This format is equivalent to .NET in all cases except


for SOAP services that are handled by a DISH serv
ice. In such cases, the DISH service's format is used
instead of the SOAP service's format.

.NET

This format is used for .NET clients that can accept


Microsoft's Dataset format. This is useful to SOAP
clients developed with Microsoft and Microsoftcompatible tools.

Concrete

This is a generic format used by SOAP toolkits such


as JAX-RPC (JAVA) to generate interfaces that cor
relate to a result set returned by SQL Anywhere. It
affects the WSDL document that is generated.
Select Expose an explicit response object for this
web service to have the DISH service return an
XML schema that explicitly describes the result set.
It returns all the column names and their data types
in the result set. If you don't select this option, then
the DISH service returns an XML schema (a WSDL
document) that describes the generic SimpleData
set object. The SimpleDataset describes a rowset
consisting of rows and columns; no column name or
data type information is returned.

XML

Data type (For


SOAP services
only)

Indicates SOAP service data typing. Valid values are:

OFF

SAP IQ Cockpit
Administer SAP IQ

This is the most compatible format; it simply re


turns the result set as a string. Clients will need to
parse this string to access the various elements
within it.

(Default) No data typing of inputs and outputs.

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1185

Page

Property

Description
ON

Supports data typing of input parameters and result


set responses.

IN

Supports data typing of input parameters only.

OUT

Provides data type information for result set re


sponses of all SOAP service formats.

Service name pre


fix (For DISH serv
ices only)

Only SOAP services whose names begin with this prefix are handled by the DISH
service.

Methods

Indicates the methods of the Web service. Valid values are:


HEAD

Retrieve information written in a response header.

GET

Request a response

POST

Submit data to be processed by a resource

PUT

Upload a resource

DELETE

Remove a resource

Authorization re
quired

Indicates whether users must authenticate to use this web service. When authoriza
tion is required, all users connecting to this service must provide a user name and
password. Valid values are:

User

Uuser account used to execute service requests.


If Authorization required is not selected, you must choose a user from the User list.
The web service is executed with the permissions of the user specified.
If Authorization required and User are selected, you must choose you must choose
a user from the User list. You must authenticate as this user in order to use the web
service.
If Authorization required is selected, but User is not selected, you can authenticate
with any database user to use the Web service.

SQL

Security required

Indicates whether unsecured connections are accepted. Select this option to indi
cate that the web service requires security. If the web service requires security,
then only secure (HTTPS) connections are accepted. If this option is cleared, then
both HTTP and HTTPS connections are accepted.

Comment

Text field for adding optional comments.

This web service


has the following
SQL statement

nables the text box where you can specify the SQL statement for the Web service.

SQL statement
area

Text box containing the SQL statement for the Web service.

6. Click OK to update any changes to the database and close the page.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]

1186

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

5.24.7 Web Service Privilege Summary


A list of the system privileges and object permissions required to complete the various Web service tasks.

Creating a Web Service


Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY WEB SERVICE system privilege

Enabling or Disabling a Web Service


Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY WEB SERVICE system privilege

Deleting a Web Service


Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

DBA authority

SAP IQ 16.0

MANAGE ANY WEB SERVICE system privilege

Generating Web Service DDL Commands


Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

None

SAP IQ 16.0

None

SAP IQ Cockpit
Administer SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1187

Viewing or Modifying Web Service Properties


Database Version

Web Service Privileges Required

SAP IQ 15.3 and 15.4

View any Web service property page none


Modify any Web service property DBA authority

SAP IQ 16.0

View any Web service property page none


Modify any Web service property MANAGE ANY WEB SERVICE system privilege

Related Information
Adding a System Privilege to a Role-Based User [page 819]
Adding a System Privilege to a User-Extended Role [page 849]
Adding a System Privilege to a Standalone Role [page 886]
Adding a System Privilege to a System Role [page 942]
Adding Permissions on a Table or Column to a User or Role [page 907]
Adding Permissions on a View or Materialized View to a User or Role [page 916]
Adding EXECUTE Permission to a User or Role [page 922]
Adding CREATE Permission to a User or Role [page 924]
Adding USAGE Permission to a User or Role [page 926]
Adding an Authority to an Authority-Based User [page 758]
Adding an Authority to a Group [page 776]
Adding Permissions on a Table or Column to a User or Group [page 784]
Adding EXECUTE Permission to a User or Group [page 799]
Adding CREATE Permission to a User or Group [page 801]
Adding USAGE Permission to a User or Group [page 803]

1188

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Administer SAP IQ

Alerts in SAP IQ

Monitor and manage alerts in a SAP IQ simplex or multiplex environment.


Alerts in SAP IQ Cockpit are categorized into three key performance areas (KPA): Availability, Performance,
and Capacity.
Each KPA is composed of several key performance indicators (KPI). Data is collected at defined intervals and
alerts triggered when the KPI exceeds the predefined thresholds or state.
By default, all alerts are enabled. You can customize the threshold of each alert and disable alerts not required.
You cannot add additional alerts to a KPA.
Data for KPIs is collected using these default collection jobs:
IQ Availability Statistics
IQ Performance Statistics
IQ Capacity Statistics
Additional statistic collections are available for analysis, but do not support alerts or appear on the ALERT
workset. See Collection Jobs.

Related Information
Monitor and Resolve Alerts [page 1189]
Setting Alert Notification [page 1190]
Managing Alert Notification Settings [page 1192]
Adjusting the Monitoring Interval of a KPA [page 1193]
Configuring Alerts [page 1194]

6.1

Monitor and Resolve Alerts

The Alert Monitor page displays a dynamically updated list of active alerts, which can be resolved by entering a
resolution description.
Active alerts for all priorities display by default, sorted by priority (high to low).
For the current session, you can:
Display for all alerts or only those resolved
Filter by priority
Sort by various parameters in ascending or descending order. You cannot subsort the list.

SAP IQ Cockpit
Alerts in SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1189

Each alert remains on the Alert Monitor page until it has been resolved. The alert record indicates its original
timestamp and the age field is updated to reflect the amount of time elapsed since the alert was initially
triggered.
Active alerts appear in color, with a status of Active. When the condition that triggered the alert is resolved,
and the KPI returns to the expected range, the system automatically changes the status of the alert to
Resolved and creates a resolution record. Resolved alerts appear in grey. SAP IQ Cockpit stores details on the
last 10 resolved alerts for each KPI. You can also manually change the status of an alert, but if the KPI has not
returned to the expected range, the alert reappears.
To manually change an alert status, click Resolve, enter a mandatory description, and click Finish.

Note
The Finish button is unavailable until a description is entered.
Once set to resolved, an alert status cannot be changed. The resolved alert disappears if Active Alerts Only is
selected; otherwise, the alert turns grey, but remains visible.
Select Resolved Alerts Only or All Alerts to view resolved alerts.

6.2

Setting Alert Notification

A nonadministrative SAP IQ Cockpit user can set an email address for notification.

Prerequisites
The email server and port must be configured to enable email notification. See Configuring the E-mail
Server.
At least one notification email address must be defined by an administrative user before a
nonadministrative user can enter an email address.
A technical user account exists.

Context
Once set, notification is sent when any enabled alert is triggered. You cannot select specific alerts for
notification (for example, notification sent for a Resource State alert, but not a Total CPU Usage alert). You
can also elect to be notified if an alert is not resolved before its escalation period has expired.
If a nonadministrative user modifies the email address, the modified address is appended to the notification
list, but the original email address is not removed. It must be manually removed by an administrative user. If
only a notification check mark is changed, administrative user action is not required; the email address is
automatically added to or removed from the notification list. It is the responsibility of the nonadministrative
user to notify the administrative user of the change.

1190

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Alerts in SAP IQ

If an administrative user modifies a nonadministrative user email address, the notification check marks
become deselected on the Notify page of the nonadministrative user, and the email address does not reflect
the address change. However, the nonadministrative user does receive email notification using the modified
address.
SAP IQ Cockpit validates the format of the email address but not the address itself. The Apply button is
unavailable when the format of an address is invalid.
Each managed system must have its own notification email addresses defined; notification addresses are
specific to the managed system, not SAP IQ Cockpit.

Note
An administrative SAP IQ Cockpit user can set additional notification parameters. See Managing Alert
Notification Settings.

Procedure
1. In SAP IQ Cockpit, click the ALERT workset.
2. Click NOTIFY.

Note
When you click the ALERT workset for the first time in the current session, there may be a delay before
the NOTIFY option appears.
3. Type an email address for alerts.
4. Specify the type of notification to receive:
Option

Description

Alert notifications

Select to receive alert notifications.

Escalation notifications

Select to receive escalation notifications.

5. Click Apply, and wait for notification changes to update.

Related Information
Configuring the E-mail Server [page 188]
Technical User [page 38]

SAP IQ Cockpit
Alerts in SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1191

6.3

Managing Alert Notification Settings

An administrative SAP IQ Cockpit user can set his or her email address for notification and define additional
notification attributes for alerts.

Prerequisites
Membership in the COCKPIT_ADMIN role.
The email server and port must be configured to enable email notification. See Configuring the E-mail
Server.
A technical user account exists.

Context
At least one notification email address must be defined by an administrative user before a nonadministrative
user can enter an email address.
If a nonadministrative user modifies the email address, the modified address is appended to the notification
list, but the original email address is not removed. It must be manually removed by an administrative user. If
only a notification check mark is changed, administrative user action is not required; the email address is
automatically added to or removed from the notification list.
If an administrative user modifies a nonadministrative user email address, the notification check marks
become deselected on the Notify page of the nonadministrative user, and the email address does not reflect
the address change. However, the nonadministrative user does receive email notification using the modified
address.
SAP IQ Cockpit validates the format of the email address but not the address itself. The Apply button is
unavailable when the format of an address is invalid.

Procedure
1. In SAP IQ Cockpit, click the ALERT workset.
2. Click NOTIFY.

Note
When you click the ALERT workset for the first time in the current session, there may be a delay before
the NOTIFY option appears.
3. Adjust the alert notification options, as needed:

1192

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Alerts in SAP IQ

Setting

Description

Notification: Enabled

Enable email notification when an alert is triggered.

Email

Email addresses to receive notification when an alert is triggered. Separate


multiple addresses by semicolons.

Escalation period

The elapsed time period, in minutes, in which an alert must be resolved before
an escalation email notification is sent.

Escalation email

Email address to receive notification in the event an alert remains unresolved


once the escalation period has elapsed. Separate multiple addresses by semi
colons.

Script Execution: Enabled

Associate a script file to the triggering of an alert.

Script path

The path to a script to execute in the event an alert is raised, but controlled by
suppression. For example, if suppression is 10 minutes and the alert is on a 1
minute interval, the script runs once every 10 minutes.

Storm Suppression

Suppress email notifications and script execution for a period of time speci
fied, in minutes, if an alert continues to fire.

4. Click Apply, and wait for notification changes to update.

Related Information
Configuring the E-mail Server [page 188]
Technical User [page 38]

6.4

Adjusting the Monitoring Interval of a KPA

Adjust the frequency at which a KPA alert is monitored.

Prerequisites
Membership in the COCKPIT_ADMIN role.
A technical user account exists.

Procedure
1. In SAP IQ Cockpit, click the ALERT workset.
2. Click CONFIGURE.

SAP IQ Cockpit
Alerts in SAP IQ

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1193

Note
When you click the ALERT workset for the first time in the current session, there may be a delay before
the CONFIGURE option appears.
3. Click the up and down arrows to increase or decrease the monitoring interval (in minutes) for a specific
KPA, or enter an integer in the field.
4. Click Apply.

6.5

Configuring Alerts

You can enable and disable alerts as well as configure the trigger thresholds for each alert.

Prerequisites
Membership in the COCKPIT_ADMIN role.
A technical user account exists.

Context
Modifications to alert thresholds take effect the next time the monitoring interval is reached.

Note
If a message appears indicating the technical user account does not exist, and it was created in the current
session, log out and back in to the SAP IQ Cockpit console using the current user (not the technical user
account).

Procedure
1. In SAP IQ Cockpit, click the ALERT workset.
2. Click CONFIGURE.

Note
When you click the ALERT workset for the first time in the current session, there may be a delay before
the CONFIGURE option appears.
3. To enable or disable an alert, select or unselect the box in the Enabled column.

1194

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Alerts in SAP IQ

4. To modify the thresholds of an alert, click Edit and adjust the levels. Click Finish to save the changes.

Related Information
IQCockpit-product-name Simplex Alert Summary [page 1195]
IQCockpit-product-name Multiplex Alert Summary [page 1198]
IQCockpit-product-name Logical Server Alert Summary [page 1200]
Technical User [page 38]

6.5.1 IQCockpit-product-name Simplex Alert Summary


A list of configurable alerts for a simplex.
Table 31: AVAILABILITY
KPI

Priority

As Count:

Available Connections
Normal
Low
Medium
High
DBSpaces Online

9 to 1000000
5 to 9
2 to 5
0 to 2
As Count:

Normal
Low
Medium
High
Resource State

2 to 10000
1 to 2
0 to 1
1 to 0
As State:

High
Low
Normal
High
Low
Medium

SAP IQ Cockpit
Alerts in SAP IQ

Default State or Range

ERROR
PENDING
RUNNING
STOPPED
UNKNOWN
WARNING

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1195

KPI

Priority

Default State or Range


As Percent:

Total CPU Usage


Normal
Low
Medium
High

0 to 70
70 to 79
79 to 90
90 to 100

Table 32: PERFORMANCE


KPI

Priority

As Percent:

Catalog Cache in Use


Normal
Low
Medium
High
Deadlocks Count

0 to 70
70 to 85
85 to 95
95 to 100
As Count:

Normal
Low
Medium
High
IQ Threads Usage

0 to 5
5 to 20
20 to 30
30 to 1000000
As Percent:

Normal
Low
Medium
High
IQ Waiting Operations

0 to 75
75 to 85
85 to 95
95 to 100
As Count:

Normal
Low
Medium
High
Long Running Transactions

0 to 80
80 to 89
89 to 99
99 to 1000000
As Count:

Normal
Low
Medium
High

1196

Default State or Range

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

0 to 5
5 to 14
14 to 20
20 to 1000000

SAP IQ Cockpit
Alerts in SAP IQ

KPI

Priority

Default State or Range


As Percent:

Main Cache in Use


Normal
Low
Medium
High
Temporary Cache in Use

0 to 70
70 to 85
85 to 95
95 to 100
As Percent:

Normal
Low
Medium
High

0 to 70
70 to 85
85 to 95
95 to 100

Table 33: CAPACITY


KPI

Priority

As Percent:

DBSpace Highest Size in Use


Normal
Low
Medium
High
Percentage of Available RLV Memory

0 to 70
70 to 80
80 to 90
90 to 100
As Percent:

Normal
Low
Medium
High
Storage Disk Usage

30 to 100
20 to 30
10 to 20
0 to 10
As Percent:

Normal
Low
Medium
High
Total CPU Idle

0 to 70
70 to 80
80 to 90
90 to 100
As Percent:

Normal
Low
Medium
High

SAP IQ Cockpit
Alerts in SAP IQ

Default State or Range

69 to 100
19 to 69
9 to 19
0 to 9

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1197

6.5.2 IQCockpit-product-name Multiplex Alert Summary


A list of configurable alerts for a multiplex.
Table 34: AVAILABILITY
KPI

Priority

Default State or Range


As Count:

Average Available Connections


Normal
Low
Medium
High
Average CPU Usage

9 to 1000000
5 to 9
2 to 5
0 to 2
As Percent:

Normal
Low
Medium
High
Resource State

0 to 70
70 to 79
79 to 90
90 to 100
As State:

High
Low
Normal
High
Low
Medium

ERROR
PENDING
RUNNING
STOPPED
UNKNOWN
WARNING

Table 35: PERFORMANCE


Priority

KPI

As Percent:

Average Catalog Cache in Use


Normal
Low
Medium
High
Average Deadlocks

0 to 70
70 to 80
80 to 94
94 to 100
As Count:

Normal
Low
Medium
High

1198

Default State or Range

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

0 to 5
5 to 20
20 to 30
30 to 1000000

SAP IQ Cockpit
Alerts in SAP IQ

KPI

Priority

Default State or Range


As Count:

Average Long Running Transactions


Normal
Low
Medium
High
Average Main Cache in Use

0 to 5
5 to 14
14 to 20
20 to 1000000
As Percent:

Normal
Low
Medium
High
Average Temporary Cache in Use

0 to 70
70 to 80
80 to 94
94 to 100
As Percent:

Normal
Low
Medium
High
Average Threads Usage

0 to 70
70 to 80
80 to 94
94 to 100
As Percent:

Normal
Low
Medium
High
Average Waiting Operations

0 to 75
75 to 85
85 to 95
95 to 100
As Count:

Normal
Low
Medium
High

0 to 80
80 to 89
89 to 99
99 to 1000000

Table 36: CAPACITY


KPI

Priority

As Percent:

Average CPU Idle


Normal
Low
Medium
High

SAP IQ Cockpit
Alerts in SAP IQ

Default State or Range

69 to 100
19 to 69
9 to 19
0 to 9

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1199

KPI

Priority

Default State or Range


As Percent:

Average DBSpace High Usage


Normal
Low
Medium
High
Average Storage Disk Usage

0 to 70
70 to 80
80 to 90
90 to 100
As Percent:

Normal
Low
Medium
High

0 to 70
70 to 80
80 to 90
90 to 100

6.5.3 IQCockpit-product-name Logical Server Alert Summary


A list of configurable alerts for a logical server.
Table 37: AVAILABILITY
Priority

KPI

As Count:

Average Available Connections


Normal
Low
Medium
High
Average CPU Usage

10 to 1000000
5 to 10
2 to 5
0 to 2
As Percent:

Normal
Low
Medium
High

1200

Default State or Range

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

0 to 70
70 to 80
80 to 90
90 to 100

SAP IQ Cockpit
Alerts in SAP IQ

KPI

Priority

Default State or Range


As State:

Resource State
High
Low
Normal
High
Low
Medium

ERROR
PENDING
RUNNING
STOPPED
UNKNOWN
WARNING

Table 38: PERFORMANCE


KPI

Priority

As Percent:

Average Catalog Cache in Use


Normal
Low
Medium
High
Average Deadlocks

0 to 70
70 to 80
80 to 94
94 to 100
As Count:

Normal
Low
Medium
High
Average Long Running Transactions

0 to 5
5 to 20
20 to 30
30 to 1000000
As Count:

Normal
Low
Medium
High
Average Main Cache in Use

0 to 5
5 to 14
14 to 20
20 to 1000000
As Percent:

Normal
Low
Medium
High

SAP IQ Cockpit
Alerts in SAP IQ

Default State or Range

0 to 70
70 to 80
80 to 94
94 to 100

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1201

KPI

Priority

Default State or Range


As Percent:

Average Temporary Cache in Use


Normal
Low
Medium
High
Average Threads Usage

0 to 70
70 to 80
80 to 94
94 to 100
As Percent:

Normal
Low
Medium
High
Average Waiting Operations

0 to 75
75 to 85
85 to 95
95 to 100
As Count:

Normal
Low
Medium
High

0 to 80
80 to 89
89 to 99
99 to 1000000

Table 39: CAPACITY


Priority

KPI

As Percent:

Average CPU Idle


Normal
Low
Medium
High
Average DBSpace High Usage

69 to 100
19 to 69
9 to 19
0 to 9
As Percent:

Normal
Low
Medium
High
Average Storage Disk Usage

0 to 70
70 to 80
80 to 90
90 to 100
As Percent:

Normal
Low
Medium
High

1202

Default State or Range

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

0 to 70
70 to 80
80 to 90
90 to 100

SAP IQ Cockpit
Alerts in SAP IQ

Troubleshoot SAP IQ Cockpit

Troubleshoot problems that occur in SAP IQ Cockpit when administering a managed SAP IQ system.

Related Information
Browser Refresh (F5) Causes Logout [page 1203]
Cannot Change Another User's Password [page 1204]
Cannot Validate an IQ (Catalog) System Store Table [page 1204]
Cockpit Fails to Start [page 1204]
Data Collections Fail to Complete [page 1205]
Database Definition is Invalid [page 1205]
Fatal Error #2035 Prevents Successful Log in [page 1206]
Feature Disabled on the SAP IQ Cockpit Console Task Menu [page 1206]
Login Fails After Having Your Password Changed by Another User [page 1207]
Login Fails when Selecting a Chinese or Japanese SAP IQ Server [page 1207]
Login Fails when Entering Valid Credentials [page 1208]
Multiplex and Logical Servers Are Missing on Login Dropdown List [page 1209]
Multiplex Connection Disallowed by Login Policy [page 1209]
Node Fails to Restart when High Availability Is Enabled [page 1209]
Out of Memory Errors [page 1210]
Performance Statistics Do Not Cover Enough Time [page 1210]
SQL Anywhere Error -131 Appears When Changing A User's Password [page 1211]

7.1

Browser Refresh (F5) Causes Logout

Problem: Pressing the F5 key to refresh your browser logs you out of SAP IQ Cockpit.
Solution: Avoid using F5 when logged into SAP IQ Cockpit.
Browser refresh updates the loaded application or pages in the browserin this case, the Adobe Flash on
which SAP IQ Cockpit is built.
Consequently, pressing F5 logs you out of servers, including SAP IQ Cockpit.

SAP IQ Cockpit
Troubleshoot SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1203

7.2

Cannot Change Another User's Password

Problem: You are unable to change another user's password, even though you have been granted the CHANGE
PASSWORD system privilege.
This behavior may occur if the CHANGE PASSWORD system privilege was granted outside of SAP IQ Cockpit,
with limitations.
When this system privilege is granted using SAP IQ Cockpit, it is granted in such a way to allow you to manage
the password of any user. However, when granted outside of SAP IQ Cockpit, the privilege can be limited to
allow password management of select users and roles only.
Solution: Check with the IQ database administrator to verify which user passwords you can manage.

7.3

Cannot Validate an IQ (Catalog) System Store Table

Problem: A base table does not validate successfully.


Solution: Outside of SAP IQ Cockpit, try one of these:
Drop all the indexes and keys on a table and recreate them. Recreate any foreign keys to the table.
If you suspect a particular index, you can execute an ALTER INDEX ... REBUILD statement to rebuild
the corrupted index.
Unload and reload your entire database.

7.4

Cockpit Fails to Start

Problem: SAP IQ Cockpit does not start.

Solution 1: Port conflict


Solution: SAP IQ Cockpit might use a port that is used by another server or application. To check for port
conflicts:
1. Execute this command:
cockpit --info ports
The command lists all the ports on which SAP IQ Cockpit and its services listen, indicates whether each
port is in use, and shows the service running on each port. If the SAP IQ Cockpit is not running, any port
shown to be in use represents a conflict.
2. If you discover a conflict, use cockpit --port to change the port used by the SAP IQ Cockpit service.

1204

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Troubleshoot SAP IQ Cockpit

Solution 2: Insufficient memory


Increase the maximum memory setting if you see this error when you try to start: Could not create the
Java Virtual machine.

Related Information
Configuring Ports [page 226]
Configuring Memory Usage [page 228]

7.5

Data Collections Fail to Complete

Problem: A collection frequently times out or generates errors citing the


REJECT_DUPLICATE_RESOURCE_AND_COLLECTION policy, but no problems with the monitored resources
are evident.
The errors appear in the log and on the collection history screen.
Solution: Try to determine why the collection is taking so long. For example, are network delays slowing down
traffic between SAP IQ Cockpit and the monitored server?
In the case of network delays and other resource-related problems, the interval between collections might be
shorter than the time needed to finish the collection. To fix this problem, increase the time between
collections.

Related Information
Modifying the Collection Interval for a Scheduled Job [page 202]

7.6

Database Definition is Invalid

Problem: The Create Databases wizard flags your database definition with a red x.
The red x indicates that you entered an invalid parameter in your database definition.
Solution: Hover over the red x to display an explanation of the invalid parameter. Edit the database definition
until the red x becomes a green check mark. This table highlights some of the more common causes of an
invalid database definition and suggests solutions.
See Creating a Database for more detailed information on the requirements of each field.

SAP IQ Cockpit
Troubleshoot SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1205

Related Information
Creating a Database [page 413]

7.7

Fatal Error #2035 Prevents Successful Log in

Problem: When trying to connect to SAP IQ Cockpit in Firefox, fatal error #2035 appears before the login
screen appears.
Solution:
1. Clear the Firefox cache.
2. Restart Firefox.
3. Enter the SAP IQ Cockpit URL.

7.8

Feature Disabled on the SAP IQ Cockpit Console Task


Menu

Problem: Some menu options are unavailable when you select an item in the right pane and then click the
arrow to the right of the name or click the Actions icon.

Scenario #1
You have not been granted the required system privileges (16.0) or authorities (15.3 and 15.4) to perform a
task.
Solution: Grant the system privileges or authorities required for the authorized task.
Refer to SAP IQ System Privilege and Authority Summary Reference for a list of each authorized SAP IQ task
that can be performed in SAP IQ Cockpit and its required privileges or authorities.

Scenario #2
The SAP IQ Cockpit agent is not registered and authenticated.
Solution: See Registering and Authenticating a SAP IQ Cockpit Agent.

1206

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Troubleshoot SAP IQ Cockpit

Scenario #3
The menu item is not applicable to the current scenario. For example:
The Empty File option on a db file is unavailable when the file is not read-only.
The Start option on a node is unavailable if the node is already running.

Related Information
Registering and Authenticating an SAP IQ Cockpit Agent [page 36]
SAP IQ System Privilege and Authority Summary Reference [page 43]

7.9

Login Fails After Having Your Password Changed by


Another User

Problem: SAP IQ Cockpit does not accept your new password.


This behavior occurs when the dual change password option is enabled for a user, and he or she is attempting
to log in using the temporary dual part password.
Solution: Connect to the IQ database outside of SAP IQ Cockpit using the dual part password. At the prompt,
change your password. Log in to SAP IQ Cockpit using the newest password.

7.10 Login Fails when Selecting a Chinese or Japanese SAP


IQ Server
Problem: When logging in to a Chinese or Japanese SAP IQ server, if the login name or password contain
Chinese or Japanese characters, the login fails.
Solution:
1. Close the SAP IQ Cockpit console.
2. On the SAP IQ Cockpit server, navigate to the COCKPIT-4\plugins\IQ-CMAP folder.
3. Execute:
Windows

TechnicalUserCreate.bat

UNIX

TechnicalUserCreate.sh

4. Specify:

SAP IQ Cockpit
Troubleshoot SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1207

Do you wish to connect


to local database? (y/n)

Type y

Enter Host

Press Enter.

Enter Port

Enter the port number of the database.

Enter Login

Enter the login user name specified during database creation.

Enter Password

Enter the password of the login user.

Do you want to specify


charset for a server?
(y/n)

Type y.

Enter charset

Enter the charset defined during database creation.

Enter Technical user


Login

Enter a user name.

Enter Technical user


Password

Enter a password for the technical user.

Enter resource name for


which to use this techni
cal user

Enter the name of the SAP IQserver for the charset.

Note
After completing this task, do not complete the technical user task under Get Started with SAP IQ Cockpit.
Only one technical user is allowed.

7.11

Login Fails when Entering Valid Credentials

Problem: Login failed message appears when entering valid credentials.

Scenario #1
This message may appear if SAP IQ Cockpit cannot connect to the database.
Solution: Check that the database is running. Close and reopen the browser window and try again.

Scenario #2
This message may appear if the Require password change on next login is enabled for the user.
Solution: Close the browser window. Connect to the database using Interactive SQL or another SQL command
tool as the user. At the prompt, change the password. Log in to SAP IQ Cockpit using the new credentials.

1208

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Troubleshoot SAP IQ Cockpit

Note
If you do not close and reopen the browser window after restarting the database or changing the password,
the Login failed message continues to display, although the database successfully started.

Scenario #3
This message may appear if SAP IQ started the database with the -sb 0 (nobroadcast) startup option.
Solution: Remove the -sp 0 option from the configuration file (.cfg) for affected databases. Restart SAP IQ.
Close and reopen the browser window and try again.

7.12 Multiplex and Logical Servers Are Missing on Login


Dropdown List
Problem: Individual nodes in a multiplex that are on the SAP IQ Cockpit host appear in the dropdown list, but
not the multiplex system, logical servers, or nodes on other hosts.
SAP IQ Cockpit automatically discovers nodes running on the SAP IQ Cockpit host, but not nodes that reside
on other hosts.
Solution: Log in to one of the multiplex nodes and then log out. SAP IQ Cockpit recognizes and registers the
multiplex and any logical servers, and includes them on the login dropdown list on future logins.

7.13 Multiplex Connection Disallowed by Login Policy


Problem: If your login cannot access all nodes, authentication returns the security error Connection
disallowed by login policy for this user.
Solution: Use a login account with access to the SERVER logical server. A connection using the SERVER logical
server context requires the ACCESS SERVER LS system privilege.

7.14 Node Fails to Restart when High Availability Is Enabled


Problem: High availability is configured and enabled, but a node fails to automatically restart.
Solution: Start Interactive SQL, connect to the coordinator and issue the command:
ALTER LS POLICY root ENABLE_AUTOMATIC_FAILOVER=ON

SAP IQ Cockpit
Troubleshoot SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1209

7.15 Out of Memory Errors


Problem: SAP IQ Cockpit generates OutOfMemory errors and might fail to start.
Solution:
If the OutOfMemory error says that SAP IQ Cockpit is out of heap space, increase the maximum memory
setting (<COCKPIT_MEM_MAX> or jvmopt=-Xmx).
If the OutOfMemory error says that SAP IQ Cockpit is out of permanent generation space, increase the
permanent memory setting (<COCKPIT_MEM_PERM> or jvmopt=-XX:MaxPermSize).
Repeated OutOfMemory errors may indicate a memory leak. OutOfMemory errors generate heap dumps.
Heap dump files have a file extension of .hprof, in the COCKPIT-4\log directory.
Send the heap dump files to Technical Support for analysis.

Related Information
Configuring Memory Usage [page 228]

7.16 Performance Statistics Do Not Cover Enough Time


Problem: Instead of graphing performance counters over a long time period, the statistics chart shows only
very recent data.
Solution: Ask your SAP IQ Cockpit administrator to change the repository purging options to keep statistical
data available for as long as you need it. By default, statistics are purged frequently to conserve disk space.

Related Information
Configuring Repository Purging [page 208]

1210

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Troubleshoot SAP IQ Cockpit

7.17

SQL Anywhere Error -131 Appears When Changing A


User's Password

Problem: Changing another user's password returns an error like:


com.sybase.scc.jmx.ManagedObjectGateway.err_invoke_op SQL Anywhere Error -131:
Syntax error near 'BY' on line 1.
This error message indicates that the change_password_dual_control option is enabled in the login policy
for the selected user. This feature is not currently implemented in SAP IQ Cockpit.
Solution: Change the password using Interactive SQL.

Note
Once the new dual part password is set, the user must connect to the SAP IQ database outside of SAP IQ
Cockpit and change his or her password before logging into SAP IQ Cockpit. Failure to do this results in an
Invalid login error on login.

SAP IQ Cockpit
Troubleshoot SAP IQ Cockpit

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1211

Important Disclaimers and Legal Information

Coding Samples
Any software coding and/or code lines / strings ("Code") included in this documentation are only examples and are not intended to be used in a productive system
environment. The Code is only intended to better explain and visualize the syntax and phrasing rules of certain coding. SAP does not warrant the correctness and
completeness of the Code given herein, and SAP shall not be liable for errors or damages caused by the usage of the Code, unless damages were caused by SAP
intentionally or by SAP's gross negligence.

Accessibility
The information contained in the SAP documentation represents SAP's current view of accessibility criteria as of the date of publication; it is in no way intended to be
a binding guideline on how to ensure accessibility of software products. SAP in particular disclaims any liability in relation to this document. This disclaimer, however,
does not apply in cases of wilful misconduct or gross negligence of SAP. Furthermore, this document does not result in any direct or indirect contractual obligations of
SAP.

Gender-Neutral Language
As far as possible, SAP documentation is gender neutral. Depending on the context, the reader is addressed directly with "you", or a gender-neutral noun (such as
"sales person" or "working days") is used. If when referring to members of both sexes, however, the third-person singular cannot be avoided or a gender-neutral noun
does not exist, SAP reserves the right to use the masculine form of the noun and pronoun. This is to ensure that the documentation remains comprehensible.

Internet Hyperlinks
The SAP documentation may contain hyperlinks to the Internet. These hyperlinks are intended to serve as a hint about where to find related information. SAP does
not warrant the availability and correctness of this related information or the ability of this information to serve a particular purpose. SAP shall not be liable for any
damages caused by the use of related information unless damages have been caused by SAP's gross negligence or willful misconduct. All links are categorized for
transparency (see: http://help.sap.com/disclaimer).

1212

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

SAP IQ Cockpit
Important Disclaimers and Legal Information

SAP IQ Cockpit
Important Disclaimers and Legal Information

PUBLIC
2015 SAP SE or an SAP affiliate company. All rights reserved.

1213

www.sap.com/contactsap

2015 SAP SE or an SAP affiliate company. All rights reserved.


No part of this publication may be reproduced or transmitted in any
form or for any purpose without the express permission of SAP SE
or an SAP affiliate company. The information contained herein may
be changed without prior notice.
Some software products marketed by SAP SE and its distributors
contain proprietary software components of other software
vendors. National product specifications may vary.
These materials are provided by SAP SE or an SAP affiliate company
for informational purposes only, without representation or warranty
of any kind, and SAP or its affiliated companies shall not be liable for
errors or omissions with respect to the materials. The only
warranties for SAP or SAP affiliate company products and services
are those that are set forth in the express warranty statements
accompanying such products and services, if any. Nothing herein
should be construed as constituting an additional warranty.
SAP and other SAP products and services mentioned herein as well
as their respective logos are trademarks or registered trademarks
of SAP SE (or an SAP affiliate company) in Germany and other
countries. All other product and service names mentioned are the
trademarks of their respective companies.
Please see http://www.sap.com/corporate-en/legal/copyright/
index.epx for additional trademark information and notices.

You might also like