Managing Databases

The Databases page in the new web interface allows users to take the following actions on databases:

  • Explore databases. Drill down into the databases accessible by the selected role to view details of the objects (e.g. schemas, tables, and views) in the database. The page only displays details for the objects that the role has sufficient privileges to view.

  • Manage access control for databases and database objects:

    • View the privileges that have been granted on objects to roles. Group the listing by role or privilege.

    • Grant or revoke privileges on objects.

Databases page

In this Topic:

Exploring Databases

Navigation:

Data » Databases

Explore databases using either of the following options or a combination of both options:

Database object explorer
  1. On the left side of the Databases page, drill down into the database object explorer. Expand a database, then any schema in the database. Click on any object to learn about the object and the privileges granted on the object. Objects in a schema are organized by type.

  2. Expand an object type, and click on an object.

Details page
  1. In the table of databases on the page, click on the name of a database. The database details page opens.

  2. At the top of the page, click Schemas. The page displays a table of schemas in the database.

  3. Click on a schema.

  4. At the top of the page, click on an object type (e.g. Tables or Views). A table displays all objects of that type that you have privileges on. Click on an object to learn about the object and the privileges granted on the object.

Managing Access Control on Database Objects

Navigation:

Data » Databases

Viewing Current Privileges Granted on an Object

  1. Navigate to the database object you want to grant privileges on using either of the options described in Exploring Databases (in this topic).

  2. Scroll to the Privileges area of the page. The Privileges area lists the privilege grants by role. To group the list by privilege, choose this option from the menu at the top of the Privileges area.

When the listing of privilege grants is grouped by privilege, the Inherited privileges symbol beside a role indicates that the privilege was inherited from a child role in a role hierarchy. Hover your pointer over the role to view the child role from which the privilege was inherited.

Granting or Revoking Privileges on Objects

Administrators of objects can perform either of the following actions to manage the privileges granted on objects:

Either action requires one of the following roles:

  • The owner of a database or database object (e.g. the role with the OWNERSHIP privilege on the object).

  • A role with the global MANAGE GRANTS privilege.

Granting Privileges on Objects to Other Roles

To grant privileges on database objects:

  1. Navigate to the database object using either of the options described in Exploring Databases (in this topic).

  2. Scroll to the Privileges area of the page.

  3. Click the + Privileges button. The Grant new privileges dialog opens.

  4. Select a role from the dropdown menu.

  5. Select a privilege from the dropdown menu. The dialog displays the privilege below the dropdown menus. To give the selected role the ability to grant the privilege to other roles, click the Grant option box.

  6. Repeat the previous step for any additional privileges you want to grant to the same role.

  7. Click the Grant Privileges button. The dialog closes. The privileges you selected are added to the role.

Revoking Privileges on Objects From Other Roles

To revoke privileges on database objects:

  1. Navigate to the database object using either of the options described in Exploring Databases (in this topic).

  2. Scroll to the Privileges area of the page.

  3. Click on the row for a role. The Edit privileges for <role_name> dialog opens. The dialog lists the privileges currently granted on the object to the selected role.

  4. Click the X button to the right of a privilege. The privilege is removed from the dialog.

  5. Repeat the previous step for any additional privileges you want to revoke from the same role.

  6. Click the Update Privileges button. The dialog closes. The privileges you removed are revoked from the role.