Database System Cubes


User rights information is contained in the System cubes of the System database. To view the database, open the Modeler and click on System→System Cubes in the Navigation pane.  

The following System cubes are relevant for user rights:

Level 1 user rights
#_ROLE_RIGHT_OBJECT Defines role access to right objects.
#_GROUP_ROLE Defines roles for groups.
#_USER_GROUP Defines groups for users.
Level 2 user rights
#_GROUP_DATABASE_DATA Defines group access to DB objects.

For more information, see Administration of User Rights.

Other System cubes

There are 3 other System cubes that are not relevant for user rights: 


The entries of these cubes have no direct effect on user rights, but they do offer the possibility of making specific users, groups, or roles “inactive”. This can be very useful for preventing login during maintenance activities such as ETL jobs. This behavior can be controlled with the “inactive” column in the cube properties.


The password column shown here is hidden in order to guarantee that only encrypted password entries are possible. CreateTime and LastLoginTime are Unix timestamps that show when the user was created and the last time the user logged in. Note: CreateTime is only set for users that are created after the initial installation (or creation of a Cloud environment).

Cube #_ ROLE_ROLE_PROPERTIES_compressed