1. Security Guide
  2. KVStore Required Privileges
  3. Privileges for Accessing CLI Commands

Privileges for Accessing CLI Commands

READ_ANY:

  • get kv

READ_ANY_TABLE or READ_TABLE (on $table_name):

  • get table –name table_name

WRITE_ANY:

  • delete kv

  • put kv

INSERT_ANY_TABLE or INSERT_TABLE (on $table_name):

  • put table –name table_name

DELETE_ANY_TABLE or DELETE_TABLE (on $table_name):

  • delete table –name table_name

SYSDBA:

  • ddl

  • plan add-index

  • plan add-table

  • plan evolve-table

  • plan remove-index

  • plan remove-table

CREATE_ANY_TABLE:

  • plan add-table

DROP_ANY_TABLE:

  • plan remove-table

EVOLVE_ANY_TABLE or EVOLVE_TABLE (on $table_name):

  • plan evolve-table –name table_name

CREATE_ANY_INDEX or CREATE_INDEX (on $table_name):

  • plan add-index –table table_name

DROP_ANY_INDEX or DROP_INDEX (on $table_name):

  • plan remove-index –table table_name

SYSVIEW:

  • await-consistency

  • logtail

  • ping

  • show admins

  • show events

  • show topology

  • show upgrade-order

  • show users (all users)

  • show zones

  • verify

  • show parameters

  • show perf

  • show plans (plans created by all users)

  • show pools

  • show snapshots

DBVIEW:

  • show indexes

  • show tables

USRVIEW:

  • show users (for self)

  • show plans (plans created by self)

  • plan change-user (for self)

DBVIEW and READ_ANY:

  • aggregate

SYSOPER:

  • change-policy

  • configure

  • plan change-parameters

  • plan change-storagedir

  • plan change-user (for all users)

  • plan deploy-admin

  • plan deploy-datacenter

  • plan deploy-sn

  • plan deploy-topology

  • plan deploy-zone

  • plan drop-user

  • plan failover

  • plan grant

  • plan migrate-sn

  • plan remove-admin

  • plan remove-sn

  • plan remove-zone

  • plan repair-topology

  • plan revoke

  • plan start-service

  • plan stop-service

  • pool (all sub-commands)

  • repair-admin-quorum

  • snapshot (all sub-commands)

  • topology (all sub-commands)

No privilege is required for the following commands:

  • connect

  • exit

  • help

  • hidden

  • history

  • verbose

  • show faults

  • table (all sub-commands)

Privilege required depends on the command being timed:

  • time

Privilege required depends on the commands contained in the script file:

  • load

Privilege required depends on the privilege needed for the plan being referred to:

  • plan cancel

  • plan execute

  • plan interrupt

  • plan wait