Define Hive Database Roles

A role uses Windows security accounts to limit the scope of access and permissions when users access the database. A database role specifies a set of database level permissions that let a user perform specific tasks. Database roles are not fixed and can be created, modified, and removed. Database roles let you collect users into a single unit to which you can apply permissions. You can define a set of roles based on job functions and assign each role the permissions that apply to that job.

Note: For Hive, only an administrator can create or delete database roles. While generating a Role, on the Forward Engineer Schema Generation dialog box, under Other Options, ensure that you select Set Admin Role.

Use the Hive Database Role Editor to define database role objects in a Hive physical model.

To define Hive database roles

1. In the Model Explorer, right-click Database Roles and click New.

   An instance of Database Role is created.

2. Right-click the instance and click Properties.

   The Hive Database Role Editor opens.

3. In the navigation grid, select the role that you want to define and work with the following options:

   Note: Click New on the toolbar to create a role. Use the Enter filter text box to filter a very large list of roles to quickly locate the one that you want to define.

   Name

   Displays the database role name. You can change the database role name in this field.

   Generate

   Generates SQL during forward engineering. Clear the check box if you do not want to generate SQL.

4. Click the Roles tab to select or remove role usage.
5. (Optional) Click the UDP tab to work with user-defined properties for the object.
6. (Optional) Click the Notestab to view and edit user notes.
7. (Optional) Click the Extended Notes tab to view or edit user notes.
8. Click Close.

   The database role is defined and the Hive Database Role Editor closes.

For more information on table properties, refer to Hive documentation.