Privileges for Accessing CLI Commands
READ_ANY:
-
get kv
READ_ANY_TABLE or READ_TABLE (on $table_name):
-
get table –name table_name
WRITE_ANY:
-
delete kv
-
put kv
INSERT_ANY_TABLE or INSERT_TABLE (on $table_name):
-
put table –name table_name
DELETE_ANY_TABLE or DELETE_TABLE (on $table_name):
-
delete table –name table_name
SYSDBA:
-
ddl
-
plan add-index
-
plan add-table
-
plan evolve-table
-
plan remove-index
-
plan remove-table
CREATE_ANY_TABLE:
-
plan add-table
DROP_ANY_TABLE:
-
plan remove-table
EVOLVE_ANY_TABLE or EVOLVE_TABLE (on $table_name):
-
plan evolve-table –name table_name
CREATE_ANY_INDEX or CREATE_INDEX (on $table_name):
-
plan add-index –table table_name
DROP_ANY_INDEX or DROP_INDEX (on $table_name):
-
plan remove-index –table table_name
SYSVIEW:
-
await-consistency
-
logtail
-
ping
-
show admins
-
show events
-
show topology
-
show upgrade-order
-
show users (all users)
-
show zones
-
verify
-
show parameters
-
show perf
-
show plans (plans created by all users)
-
show pools
-
show snapshots
DBVIEW:
-
show indexes
-
show tables
USRVIEW:
-
show users (for self)
-
show plans (plans created by self)
-
plan change-user (for self)
DBVIEW and READ_ANY:
-
aggregate
SYSOPER:
-
change-policy
-
configure
-
plan change-parameters
-
plan change-storagedir
-
plan change-user (for all users)
-
plan deploy-admin
-
plan deploy-datacenter
-
plan deploy-sn
-
plan deploy-topology
-
plan deploy-zone
-
plan drop-user
-
plan failover
-
plan grant
-
plan migrate-sn
-
plan remove-admin
-
plan remove-sn
-
plan remove-zone
-
plan repair-topology
-
plan revoke
-
plan start-service
-
plan stop-service
-
pool (all sub-commands)
-
repair-admin-quorum
-
snapshot (all sub-commands)
-
topology (all sub-commands)
No privilege is required for the following commands:
-
connect
-
exit
-
help
-
hidden
-
history
-
verbose
-
show faults
-
table (all sub-commands)
Privilege required depends on the command being timed:
-
time
Privilege required depends on the commands contained in the script file:
-
load
Privilege required depends on the privilege needed for the plan being referred to:
-
plan cancel
-
plan execute
-
plan interrupt
-
plan wait