Siebel Installation Guide for UNIX > Installing the Siebel Database on the RDBMS > Creating Table Owner and Administrator Accounts >

Running the grantusr.sql Script on IBM DB2

Before you install the Siebel database, your DBA must manually create the Siebel table owner account, the Siebel administrator account (default: SADMIN), and the sse_role group. The DBA must then add the Siebel administrator account to the sse_role group at the operating system level.

You can add users to the sse_role group and permit them to use administrative commands to start, stop or otherwise administer the Siebel Server or components. However, you must change the permissions on the directory to enable write access, using the following command:

chmod -R 775 $SIEBEL_ROOT

NOTE:  On Oracle Solaris, the sse_role group cannot be created using admintool, due to the use of an underscore in the name. Instead, use the command groupadd sse_role to create the sse_role group. Ignore the warning: groupadd: sse_role name should be all lower case or numeric.

Before you install the Siebel database, execute the grantusr.sql script against your database server to grant the appropriate privileges to these users. The grantusr.sql script is located in the DBSRVR_ROOT/db2udb subdirectory.

Your DBA must review and execute this script, which performs the following functions:

• Grants the appropriate permissions to the Siebel table owner account that will own all of the database objects for your Siebel deployment.
• Creates a role (sse_role) with CREATE SESSION privileges.

You cannot create the LDAPUSER account by running grantusr.sql. This account must belong to the sse_role group and be created by the DBA or the UNIX network administrator, as appropriate. For more information about authentication using the LDAP security adapter, see Siebel Security Guide.

This topic is part of Creating Table Owner and Administrator Accounts.

To run the grantusr.sql script on IBM DB2

1. Execute the grantusr.sql script, using an account with DBA privileges.

   The usual DB2 System Administration account is called db2inst1 for this procedure.

2. Enter the following commands:

   db2 connect to DB2database_alias user instance_owner_username using password

   db2 -vf $SIEBEL_ROOT/dbsrvr/db2udb/grantusr.sql

   where:

   • DB2database_alias is the DB2 alias that you use
   • instance_owner_username is the login ID of the database instance owner
   • password is the password for the database instance owner
   • $SIEBEL_ROOT is the full path to the Siebel root directory

     The script prompts you for the default tablespace in which your Siebel objects are to be created.

3. Enter the tablespace name that you recorded in the copy that you made of Siebel Deployment Planning Worksheet.

The length and allowable characters of the account names and passwords depend on the rules of your underlying RDBMS platform. For more information, see IBM DB2 documentation.

Before you install the Siebel database, see Installing the Stored Procedures and User-Defined Functions on IBM DB2.