Skip to main content

2-Db2_PermissionScan Job

This job collects Db2 database level permissions from all the targeted Db2 database servers.

Queries for the 2-Db2_PermissionScan Job​

The 2-Db2_PermissionScan Job uses the SQL Data Collector for queries.

warning

Don't modify the query. The query is preconfigured for this job.

Query Selection

The query is:

  • Db2 Permission — Scan Db2 databases for permissions

Before running a Db2 0.Collection query, you must establish a connection to the appropriate IBM Db2 server. As long as you set up that connection first, don't make configuration changes to the 0.Collection jobs before they run.

Establish the connection only for the 1-Db2 SensitiveDataScan Job. After you establish the connection, it applies to all jobs in the 0.Collection job group. It does not apply to any other job groups. For additional information on establishing a database connection, see 1-Db2_SensitiveDataScan.

Analysis Tasks for the 2-Db2_PermissionScan Job​

Navigate to the Databases > 0.Collection > Db2 > 2-Db2_PermissionScan > Configure node and select Analysis to view the Analysis Tasks.

warning

Don't modify or deselect the selected analysis tasks. The analysis tasks are preconfigured for this job.

Analysis Selection

The default analysis tasks are:

  • Update Instance Name — Updates the instance name with a port if there are multiple instances in a single host
  • AIC Permissions Import — Imports Db2 permissions to the AIC
  • AIC Roles Import — Imports roles to the AIC for Db2