Avatar of Jim Youmans
Jim Youmans
Flag for United States of America asked on

DB2 SYSADM_GROUP not working

DB2 10.5 on Windows Server 2012 R2

I am trying to get DB2 to work with the DB2ADMN group on a windows server.  I want any account in the DB2ADMN group to have sysadmin rights on DB2.  From everything I have read and from other questions I have posted here, this should work, but it does not.  
Here is what I have done.

Create the windows group DB2ADMNS and add my domain1\AITDB2Service account to it.  This is a domain account and it runs the DB2 service under Windows and it is a local admin on the windows server.

db2set DB2_GRP_LOOKUP=LOCAL,TOKENLOCAL
db2 update dbm cfg using sysadm_group DB2ADMNS
DB2STOP
DB2START


When I look at the DBM CFG see this.

SYSADM group name                        (SYSADM_GROUP) = DB2ADMNS
 SYSCTRL group name                        (SYSCTRL_GROUP) =
 SYSMAINT group name                     (SYSMAINT_GROUP) = xxx
 SYSMON group name                        (SYSMON_GROUP) = xxx


I can log into DB2 using AITDB2Service no issue, even though when I look at the SECURITY tab in TOAD, the AITDB2Service user is not there.  I can do selects and updates and such on tables, but I can't do CREATE TABLE or run a backup. When I try to run a backup I get...

SQL1092N  The requested command or operation failed because the user ID does
not have the authority to perform the requested command or operation.  User
ID: "AITDB2SERVICE".


If I try to grant privileges using AITDB2Service I get this.

GRANT DBADM WITH DATAACCESS WITH ACCESSCTRL ON DATABASE TO USER ANYUSER;
 ERROR [42502] [IBM][DB2/NT64] SQL0552N  "AITDB2SERVICE" does not have the privilege to perform operation "GRANT".


So what am I doing wrong?  There does not seem to be an account on this database that has SYSADMIN rights, so I can't use it to grant rights to AITDB2Service.  This is a test database that I copied from production, did I do something wrong when I restored it?

Any help would be greatly appreciated.

Jim
Windows OSWindows Server 2012DB2Windows Server 2016Databases

Avatar of undefined
Last Comment
Tomas Helgi Johannsson

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Tomas Helgi Johannsson

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Tomas Helgi Johannsson

Hi,

Did you manage to solve this or do you need any more help on this ?

Regards,
    Tomas Helgi
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck