2.5.1 User types (OS users and HADB users)
The following types of users are involved in HADB server operation:
-
OS user
-
HADB user
Since OS users are different from HADB users, you must manage them properly so that they do not get mixed up.
The following figure provides an overview of OS users and HADB users.
- Organization of this subsection
(1) OS user
An OS user is a user who logs on to the OS and can utilize the OS functions. To log on to the OS, the user must possess an OS user ID and password.
An OS user ID and password do not permit the OS user to connect to the HADB server. To connect to the HADB server, the user must possess an HADB user ID and password.
There is a concept called privilege that affects OS users. To install the HADB server under the OS, an OS user must have administrator privileges.
There is also a concept called group that affects OSs. The operations that can be executed differ depending on the group to which an OS user belongs.
The following types of OS users are involved in HADB server operation:
-
Superuser
This is an OS user who has administrator privileges.
A superuser takes actions such as setting up the OS environment, managing OS users, and installing the HADB server.
-
HADB administrator
This is a dedicated OS user who manages the HADB server.
The HADB administrator is created when the superuser adds an OS user who will function as the HADB administrator to the OS of the machine on which the HADB server is to be installed.
The HADB administrator takes actions such as setting up the HADB server environment, starting/terminating the HADB server, and managing/operating the HADB server.
The HADB administrator has the privileges needed to execute various types of HADB commands. The HADB administrator also becomes the owner of the directories for operating the HADB server (server directory and DB directory) and the files created under these directories.
-
OS user belonging to the HADB administrators group
This is an OS user who manages the HADB server separately from the HADB administrator. This user belongs to the same OS group (HADB administrators group) as the HADB administrator.
This user is created when the superuser adds an OS user belonging to the HADB administrators group to the OS of the machine on which the HADB server is to be installed.
The OS user belonging to the HADB administrators group has the privileges needed to execute some of the HADB commands. This OS user can also access the server directory and DB directory owned by the HADB administrator.
(2) HADB user
An HADB user is a user who, by connecting to the HADB server, can take such actions as importing data, retrieving or updating data, and managing HADB users.
To connect to the HADB server, an HADB user authorization identifier and password must be entered. A user authorization identifier is a user ID that is used for connecting to the HADB server.
The first HADB user is created during database initialization. The created HADB user is managed within the HADB server. You can also create multiple HADB users.
An HADB user must possess the privileges needed to connect to the HADB server and perform various operations. For details about privileges, see 2.7.1 Privilege types.