Skip to Main Content
IBM Data Platform Ideas Portal for Customers


This portal is to open public enhancement requests against products and services offered by the IBM Data Platform organization. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:


Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,


Post your ideas

Post ideas and requests to enhance a product or service. Take a look at ideas others have posted and upvote them if they matter to you,

  1. Post an idea

  2. Upvote ideas that matter most to you

  3. Get feedback from the IBM team to refine your idea


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

IBM Employees should enter Ideas at https://ideas.ibm.com



Status Submitted
Workspace Db2
Components Db2 on-premise
Created by Guest
Created on Jan 6, 2026

Add USAGE for schema level security like USAGEIN schema

I would like to set to some database users to have INSERT on schema privilege. I have set:

GRANT INSERTIN ON SCHEMA myschema TO GROUP myusergroup;

Now inserts on some tables works just fine, but on some of them I get error:

SQL Error [42501]: The statement failed because the authorization ID does not have the required authorization or privilege to perform the operation. Authorization ID: "USER1". Operation: "USAGE". Object: "MYSCHEMA.MYSEQENCE".. SQLCODE=-551, SQLSTATE=42501, DRIVER=4.33.31

The work around is to search for all of the sequences in schema and apply privilege to them like:

SELECT
'GRANT USAGE ON SEQUENCE '
|| RTRIM(seqschema)
|| '.'
|| RTRIM(seqname)
|| ' TO GROUP MYUSERGROUP;' AS command
FROM syscat.sequences
WHERE seqschema = 'MYSCHEMA'

But there are two issues:

  1. When ever new sequence is created I will get the same error message. The work-around is to create some job that periodically executes above command and grants privilege on new sequences. This may still fail if job execution frequency is not set aggressively enough.

  2. Having GRANT USAGE on particular sequences I get large list of privileges in SYSIBMADM.PRIVILEGES that makes managing sequence privileges pretty opaque.

Idea: Add option to grant privilege similar to INSERTIN, but for GRANT USAGE on all current and future sequences like in schema.

GRANT USAGEIN ON SCHEMA myschema TO GROUP myusergroup;

P.S. Alternate idea would be to just grant USAGE on all sequences on schema if INSERTIN privilege is assigned. But... this may not be desirable for some cases when grants on sequences should be more controlled, so maybe USAGEIN would be more appropriate.

Needed By Quarter
  • Guest
    Jan 12, 2026

    I have now found 5 years old idea: https://ibm-data-and-ai.ideas.ibm.com/ideas/DB24LUW-I-1180 that looks like almost the same as this current one. In both ideas there is to add "GRANT USAGEIN ON SCHEMA..." in idea above it is request to add "TO ROLE", but in my current idea I have requested "TO GROUP" privilege.

    But I assume if "USAGEIN ON SCHEMA" privilege option is added, then it will be added for: "TO ROLE", "TO GROUP" and "TO USER", just like it is for all of existing privileges. If this is true, then my idea is actually a duplicate idea of above one and can probably be closed down.