I am logging to the window system using Administrator. I have setup the ODM and install DB2 and db2admin is the database administrator which it is using jdbc/ilogDataSource jndi to point to ODMDC database, which I have the helloworld decision service project deployed.

Then I have ran the tool to generate the gen-archive-repository-role script, it will fails with the the permission issue.

Below is the error:

GRANT SELECT, UPDATE, DELETE ON DB2ADMIN.ACTIVITYCOMMENTLINK TO RTSPURGE

DB21034E The command was processed as an SQL statement because it was not a

valid Command Line Processor command. During SQL processing it returned:

SQL0551N The statement failed because the authorization ID does not have the

required authorization or privilege to perform the operation. Authorization

ID: "DB2ADMIN3". Operation: "GRANT". Object: "DB2ADMIN.ACTIVITYCOMMENTLINK".

SQLSTATE=42501

What's the reason of the error and how can I fix it?

You need to make sure the db2admin has the secadmin permission. You can try it by executing the following db2 command:

select authid as username,

case connectauth when 'Y' then 1 else 0 end as connect,

case securityadmauth when 'Y' then 1 else 0 end as securityadm,

case accessctrlauth when 'Y' then 1 else 0 end as accessctrl,

case createsecureauth when 'Y' then 1 else 0 end as createsecure

from sysibmadm.authorizationids a

left join syscat.dbauth d

on d.grantee = a.authid

where authidtype = 'U'

order by username;