This section lists the user required privileges to access specific KVStore APIs as well as CLI commands.
READ_ANY:
get kv
READ_ANY_TABLE or READ_TABLE (on $table_name):
get table –name table_name
WRITE_ANY:
delete kv
put kv
INSERT_ANY_TABLE or INSERT_TABLE (on $table_name):
put table –name table_name
DELETE_ANY_TABLE or DELETE_TABLE (on $table_name):
delete table –name table_name
SYSDBA:
ddl
plan add-index
plan add-table
plan evolve-table
plan remove-index
plan remove-table
CREATE_ANY_TABLE:
plan add-table
DROP_ANY_TABLE:
plan remove-table
EVOLVE_ANY_TABLE or EVOLVE_TABLE (on $table_name):
plan evolve-table –name table_name
CREATE_ANY_INDEX or CREATE_INDEX (on $table_name):
plan add-index –table table_name
DROP_ANY_INDEX or DROP_INDEX (on $table_name):
plan remove-index –table table_name
SYSVIEW:
logtail
ping
show admins
show events
show topology
show upgrade-order
show users (all users)
show zones
verify
show parameters
show perf
show plans (plans created by all users)
show pools
show snapshots
DBVIEW:
show indexes
show schemas
show tables
USRVIEW:
show users (for self)
show plans (plans created by self)
plan change-user (for self)
DBVIEW and READ_ANY:
aggregate
SYSOPER:
change-policy
configure
plan change-parameters
plan change-storagedir
plan change-user (for all users)
plan deploy-admin
plan deploy-datacenter
plan deploy-sn
plan deploy-topology
plan deploy-zone
plan drop-user
plan grant
plan migrate-sn
plan remove-admin
plan remove-sn
plan remove-zone
plan repair-topology
plan revoke
plan start-service
plan stop-service
pool (all sub-commands)
snapshot (all sub-commands)
topology (all sub-commands)
No privilege is required for the following commands:
connect
exit
help
hidden
history
verbose
show faults
table (all sub-commands)
Privilege required depends on the command being timed:
time
Privilege required depends on the commands contained in the script file:
load
Privilege required depends on the privilege needed for the plan being referred to:
plan cancel
plan execute
plan interrupt
plan wait