Privileges for Accessing CLI Commands

READ_ANY:

• get kv

READ_ANY_TABLE or READ_TABLE (on $table_name):

• get table –name table_name

WRITE_ANY:

• delete kv

• put kv

INSERT_ANY_TABLE or INSERT_TABLE (on $table_name):

• put table –name table_name

DELETE_ANY_TABLE or DELETE_TABLE (on $table_name):

• delete table –name table_name

SYSDBA:

• ddl

• plan add-index

• plan add-table

• plan evolve-table

• plan remove-index

• plan remove-table

CREATE_ANY_TABLE:

• plan add-table

DROP_ANY_TABLE:

• plan remove-table

EVOLVE_ANY_TABLE or EVOLVE_TABLE (on $table_name):

• plan evolve-table –name table_name

CREATE_ANY_INDEX or CREATE_INDEX (on $table_name):

• plan add-index –table table_name

DROP_ANY_INDEX or DROP_INDEX (on $table_name):

• plan remove-index –table table_name

SYSVIEW:

• logtail

• ping

• show admins

• show events

• show topology

• show upgrade-order

• show users (all users)

• show zones

• verify

• show parameters

• show perf

• show plans (plans created by all users)

• show pools

• show snapshots

DBVIEW:

• show indexes

• show tables

USRVIEW:

• show users (for self)

• show plans (plans created by self)

• plan change-user (for self)

• await-consistent

DBVIEW and READ_ANY:

• aggregate

SYSOPER:

• change-policy

• configure

• plan change-parameters

• plan change-storagedir

• plan change-user (for all users)

• plan deploy-admin

• plan deploy-datacenter

• plan deploy-sn

• plan deploy-topology

• plan deploy-zone

• plan drop-user

• plan failover

• plan grant

• plan migrate-sn

• plan remove-admin

• plan remove-sn

• plan remove-zone

• plan repair-topology

• plan revoke

• plan start-service

• plan stop-service

• pool (all sub-commands)

• repair-admin-quorum

• snapshot (all sub-commands)

• topology (all sub-commands)

No privilege is required for the following commands:

• connect

• exit

• help

• hidden

• history

• verbose

• show faults

• table (all sub-commands)

Privilege required depends on the command being timed:

• time

Privilege required depends on the commands contained in the script file:

• load

Privilege required depends on the privilege needed for the plan being referred to:

• plan cancel

• plan execute

• plan interrupt

• plan wait