Access Privileges for Database-Related Resources

The following section provides information on access privileges for DB2 or SAP system directories and files.

Some of the directories described in the following tables may not exist or remain empty depending on the set up of your SAP system and the archiving method (direct or indirect) you are using.

The access rights as described in the following table are automatically set in the installation procedures.

Access Privileges for DB2 Directories and Files

Directory or File

Access Privileg in Octal Form

Owner

Group

/db2/db2<dbsid>

755

db2<dbsid>

SYSADM_GROUP

/db2/<DBSID>/db2dump

755

db2<dbsid>

SYSADM_GROUP

/db2/<DBSID>/log_dir

755

db2<dbsid>

SYSADM_GROUP

/db2/<SAPSID>/sapdata*

755

db2<dbsid>

SYSADM_GROUP

/db2/<SAPSID>/sapdata*/container

600

db2<dbsid>

SYSADM_GROUP

/db2/<DBSID>/saptemp1

755

db2<dbsid>

SYSADM_GROUP

SAP System Directory or File

Access Privileges in Octal Form

Owner

Group

<sapmnt>/exe

755

<sapsid>adm

sapsys

<sapmnt>/global

700 (lower than4.5B)

750 (greater than 4.5B)

<sapsid>adm

sapsys (lower than 4.5B)

SYSADM_GROUP (greater than 4.5B)

<sapmnt>/profile

755

<sapsid>adm

sapsys

/usr/sap/trans

755

<sapsid>adm

sapsys

/usr/sap/<SAPSID>

755

<sapsid>adm

sapsys

/usr/sap/<SAPSID>/SYS

755

<sapsid>adm

sapsys

/usr/sap/<SAPSID>/<instance directory>

755

<sapsid>adm

sapsys

/usr/sap/<SAPSID>/SYS/exe/run/dscdb6up

4750

root

SYSCTRL_GROUP

/usr/sap/<SAPSID>/SYS/
global/dscdb6.conf

600 (lower than 4.5B)
640 (greater than 4.5B)

<sid>adm

SYSADM_GROUP

We recommend that you restrict the UNIX file and directory access privileges according to the table above and as described in Setting Access Privileges for Files and Directories. 

See also:

For information on access privileges for directories and files, see the documentation Database Administration Guide: SAP on IBM DB2 Universal Database for UNIX and Windows that is available in SAP Service Marketplace at service.sap.com/instguidesnw2004s  ® Operations.