Privileges determine what a user is authorized to do with the data and the database. Assign privileges based on the type of work the person does within the organization.
Users connecting to Teradata from ArcGIS require privileges on specific Teradata system tables and the user data they need to access. As a Teradata administrator, you create groups based on what users need to do in the database, grant privileges to the groups, and add the appropriate database users to each group.
Teradata grants SELECT privileges on system tables to PUBLIC by default. If you revoke those privileges, you must grant privileges to individual groups or users.
The following table lists three groups of users and the minimum privileges they require to query, edit, or create data from ArcGIS.
| Type of user | Required privileges | Purpose |
|---|---|---|
Data viewer | SELECT ON SYSSPATIAL.SPATIAL_REF_SYS SELECT ON SYSSPATIAL.GEOMETRY_COLUMNS | Required to read ST_GEOMETRY metadata for spatial operations. |
SELECT ON <table1>,<table2>, <tablen> | Allows data viewers to query data in specific tables. | |
UDTUSAGE ON SYSUDTLIB | Required to preview features. | |
Data editor* Data editors require the same privileges as data viewers, plus these additional privileges. | INSERT, UPDATE, DELETE on other users' tables | Grant the editing operations you want editors to perform on specific tables. You can grant any combination of INSERT, UPDATE, and DELETE privileges depending on what editors need to do. Therefore, you might create multiple editor groups and grant the appropriate privileges to each. For example, you might have a full_edit group that has all three privileges plus SELECT on the tables group members need to edit and an updates_only group that has only SELECT and UPDATE privileges on the tables members need to edit. |
Data creator Data creators require the same privileges as data viewers, plus these additional privileges. | INSERT ON SYSSPATIAL.SPATIAL_REF_SYS UPDATE ON SYSSPATIAL.GEOMETRY_COLUMNS EXECUTE FUNCTION ON SYSSPATIAL EXECUTE PROCEDURE ON SYSSPATIAL | Required to update ST_GEOMETRY metadata when creating or updating spatial data. Alternatively, you can grant SELECT, EXECUTE PROCEDURE, and EXECUTE FUNCTION on the sysspatial database to the user. |
CREATE TABLE DROP TABLE | Required to create tables and feature classes in the database. |
*To edit data, publish editable feature service layers that reference the data in your Teradata database.
Additional, optional privileges you may want to grant data creators include the following:
- CREATE VIEW and DROP VIEW
Grant these privileges if you want to allow the data creator to create views on tables. This might be needed if the data creator owns feature classes that contain a spatial column that is not named shape. To use the data with ArcGIS, a view must be created on the feature class that aliases the spatial column to a column named shape.
- CREATE TRIGGER and DROP TRIGGER
These privileges are required to create tessellation indexes, which use side tables that are updated via a trigger.
- CREATE INDEX
This is required for data creators to create attribute indexes on their tables.