Netezza Permissions

There are three sets of permissions involved with the in-database software.
  • The first set of permissions is needed by the person who publishes the SAS formats library and the SAS_COMPILEUDF, SAS_DIRECTORYUDF, and SAS_HEXTOTEXTUDF functions. These permissions must be granted before the %INDNZ_PUBLISH_JAZLIB and %INDNZ_PUBLISH_COMPILEUDF macros are run. Without these permissions, running these macros fails.
    The following table summarizes the permissions that are needed by the person who publishes the formats library and the functions.
    Permission Needed
    Authority Required to Grant Permission
    Examples
    CREATE LIBRARY permission to run the %INDNZ_PUBLISH_JAZLIB macro that publishes the SAS formats library (sas_jazlib object)
    System Administrator or Database Administrator
    Note: If you have SYSADM or DBADM authority, then you have these permissions. Otherwise, contact your database administrator to obtain these permissions.
    GRANT CREATE LIBRARY
    TO fmtlibpublisherid
    CREATE FUNCTION permission to run the %INDNZ_PUBLISH_COMPILEUDF macro that publishes the SAS_COMPILEUDF, SAS_DIRECTORYUDF, and the SAS_HEXTOTEXTUDF functions
    GRANT CREATE FUNCTION TO
    compileudfpublisherid
  • The second set of permissions is needed by the person who runs the format publishing macro, %INDNZ_PUBLISH_FORMATS, or the scoring publishing macro, %INDNZ_PUBLISH_MODEL. The person who runs these macros is not necessarily the same person who runs the %INDNZ_PUBLISH_JAZLIB and %INDNZ_PUBLISH_COMPILEUDF macros. These permissions are most likely needed by the format publishing or scoring model developer. Without these permissions, the publishing of the scoring model functions and the SAS_PUT( ) function and formats fails.
    Note: Permissions must be granted for every format and scoring model publisher and for each database that the format and scoring model publishing uses. Therefore, you might need to grant these permissions multiple times. After the Netezza permissions are set appropriately, the format and scoring publishing macros can be run.
    Note: When permissions are granted to specific functions, the correct signature, including the sizes for numeric and string data types, must be specified.
    The following table summarizes the permissions that are needed by the person who runs the format or scoring publishing macro.
    Permission Needed
    Authority Required to Grant Permission
    Examples
    EXECUTE permission for the SAS Formats Library
    System Administrator or Database Administrator
    Note: If you have SYSADM or DBADM authority, then you have these permissions. Otherwise, contact your database administrator to obtain these permissions.
    GRANT EXECUTE ON SAS_JAZLIB TO
     scoringorfmtpublisherid
    EXECUTE permission for the SAS_COMPILEUDF function
    GRANT EXECUTE ON SAS_COMPILEUDF
     TO scoringorfmtpublisherid
    EXECUTE permission for the SAS_DIRECTORYUDF function
    GRANT EXECUTE ON SAS_DIRECTORYUDF
     TO scoringorfmtpublisherid
    EXECUTE permission for the SAS_HEXTOTEXTUDF function
    GRANT EXECUTE ON 
     SAS_HEXTOTEXTUDF
     TO scoringorfmtpublisherid
    CREATE FUNCTION, CREATE TABLE, CREATE TEMP TABLE, and CREATE EXTERNAL TABLE permissions to run the format and scoring publishing macros
    GRANT CREATE FUNCTION TO 
    scoringorfmtpublisherid
    
    GRANT CREATE TABLE TO 
    scoringorfmtpublisherid
    
    GRANT CREATE TEMP TABLE TO 
    scoringorfmtpublisherid
    
    GRANT CREATE EXTERNAL TABLE TO 
    scoringorfmtpublisherid
    
    GRANT UNFENCED TO 
    scoringorfmtpublisherid
  • The third set of permissions is needed by the person who runs the SAS Embedded Process to create scoring files.
    The SAS Embedded Process has a dependency on the IBM Netezza Analytics (INZA) utility. You must grant the user and database permissions using these commands.
    /nz/export/ae/utlities/bin/create_inza_db_user.sh user-name database-name
    /nz/export/ae/utilities/bin/create_inza_db.sh database-name
Note: If you plan to use SAS Model Manager with the SAS Scoring Accelerator for in-database scoring, additional permissions are required. For more information, see Configurations for SAS Model Manager.