Netezza Permissions

There are three sets of permissions involved with the in-database software.

The first set of permissions is needed by the person who publishes the SAS formats library and the SAS_COMPILEUDF, SAS_DIRECTORYUDF, and SAS_HEXTOTEXTUDF functions. These permissions must be granted before the %INDNZ_PUBLISH_JAZLIB and %INDNZ_PUBLISH_COMPILEUDF macros are run. Without these permissions, running these macros fails.

The following table summarizes the permissions that are needed by the person who publishes the formats library and the functions.

Permission Needed	Authority Required to Grant Permission	Examples
CREATE LIBRARY permission to run the %INDNZ_PUBLISH_JAZLIB macro that publishes the SAS formats library (`sas_jazlib` object)	System Administrator or Database Administrator Note: If you have SYSADM or DBADM authority, then you have these permissions. Otherwise, contact your database administrator to obtain these permissions.	GRANT CREATE LIBRARY TO fmtlibpublisherid
CREATE FUNCTION permission to run the %INDNZ_PUBLISH_COMPILEUDF macro that publishes the SAS_COMPILEUDF, SAS_DIRECTORYUDF, and the SAS_HEXTOTEXTUDF functions		GRANT CREATE FUNCTION TO compileudfpublisherid

The second set of permissions is needed by the person who runs the format publishing macro, %INDNZ_PUBLISH_FORMATS, or the scoring publishing macro, %INDNZ_PUBLISH_MODEL. The person who runs these macros is not necessarily the same person who runs the %INDNZ_PUBLISH_JAZLIB and %INDNZ_PUBLISH_COMPILEUDF macros. These permissions are most likely needed by the format publishing or scoring model developer. Without these permissions, the publishing of the scoring model functions and the SAS_PUT( ) function and formats fails.

Note: Permissions must be granted for every format and scoring model publisher and for each database that the format and scoring model publishing uses. Therefore, you might need to grant these permissions multiple times. After the Netezza permissions are set appropriately, the format and scoring publishing macros can be run.

Note: When permissions are granted to specific functions, the correct signature, including the sizes for numeric and string data types, must be specified.

The following table summarizes the permissions that are needed by the person who runs the format or scoring publishing macro.

Permission Needed	Authority Required to Grant Permission	Examples
EXECUTE permission for the SAS Formats Library	System Administrator or Database Administrator Note: If you have SYSADM or DBADM authority, then you have these permissions. Otherwise, contact your database administrator to obtain these permissions.	GRANT EXECUTE ON SAS_JAZLIB TO scoringorfmtpublisherid
EXECUTE permission for the SAS_COMPILEUDF function		GRANT EXECUTE ON SAS_COMPILEUDF TO scoringorfmtpublisherid
EXECUTE permission for the SAS_DIRECTORYUDF function		GRANT EXECUTE ON SAS_DIRECTORYUDF TO scoringorfmtpublisherid
EXECUTE permission for the SAS_HEXTOTEXTUDF function		GRANT EXECUTE ON SAS_HEXTOTEXTUDF TO scoringorfmtpublisherid
CREATE FUNCTION, CREATE TABLE, CREATE TEMP TABLE, and CREATE EXTERNAL TABLE permissions to run the format and scoring publishing macros		GRANT CREATE FUNCTION TO scoringorfmtpublisherid GRANT CREATE TABLE TO scoringorfmtpublisherid GRANT CREATE TEMP TABLE TO scoringorfmtpublisherid GRANT CREATE EXTERNAL TABLE TO scoringorfmtpublisherid GRANT UNFENCED TO scoringorfmtpublisherid

The third set of permissions is needed by the person who runs the SAS Embedded Process to create scoring files.
The SAS Embedded Process has a dependency on the IBM Netezza Analytics (INZA) utility. You must grant the user and database permissions using these commands.
```
/nz/export/ae/utlities/bin/create_inza_db_user.sh user-name database-name
/nz/export/ae/utilities/bin/create_inza_db.sh database-name
```

Note: If you plan to use SAS Model Manager with the SAS Scoring Accelerator for in-database scoring, additional permissions are required. For more information, see Configuring SAS Model Manager.

Last updated: February 9, 2017