Native Table Copy Task Template
An XDM native table copy task template is designed to copy data using a database specific copy tool (e.g. Db2 Unload/Load, MSSQL Export, Oracle Data Pump).
When a native table copy task is executed, it examines the source and target environment by processing selection rules, exclude rules, mapping rules, and reduction rules. The structures of the source and target tables are compared in order to determine whether there are any conditions that would prevent a successful copy, and whether any special handling of the tables is required. If necessary, a native table copy task is able to re-create tables and dependent objects.
The source and target RDBMS of a native table copy task can be of different types. For example, a native table copy task is able to copy from DB2 for Linux to Oracle for Windows. In this case XDM uses a generic load format (CSV).
Permissions
Task Templates have specific permissions to manage user access. The table below displays the available permissions and their purposes.
For more details about the concept of XDMs permission management refer to Permission Management.
Permission |
Description |
|---|---|
ADMINISTRATION |
Specifies that the grantee can grant and revoke permissions to and from other users. A user that creates an object automatically receives the |
DELETE |
Specifies that the grantee can delete objects of the selected types. |
DIAGNOSE |
This permission controls access to diagnostic data of a task execution. The diagnostic data consists of the stages, their outputs and the batch reports. |
EXECUTE |
Specifies that the grantee may execute the object, or schedule the object for later execution. This permission only applies to objects that are executable, i.e. tasks, task templates, workflows, workflow templates, and data shops. |
READ |
Specifies that the grantee has read permission on the object. The grantee is able to see the object in lists and can see all of the object’s details, such as rules or access permissions. In addition, the grantee can reference this object.
For example, a user who has |
WRITE |
Specifies that the grantee has the permission to change the settings and attributes of an object. This also includes modifying any rule lists that might be associated with the object (for example, the selection rules of a task template). |
Properties
The table below documents the available properties for task templates. The 'name' column displays the property name as it can be used in Groovy and Java Scripts.
Name |
Type |
Default |
Description |
||||
|---|---|---|---|---|---|---|---|
Check uniqueness after modification checkUniquenessAfterModification |
Boolean |
true |
This option specifies whether XDM checks uniqueness of modified unique key fields.
When a modification method of modification type |
||||
Compare evaluator abort on empty table set cmpevalAbortOnEmptyTableSet |
Boolean |
false |
This flag controls whether the task process should abort if no tables are about to be copied. |
||||
|
dataTransferMethod |
Enum |
N |
Specifies the method that XDM uses to transport extracted data from the source database server to the target database server when copying full tables.
|
||||
Deactivate history table for load deactivateHistoryTableForLoad |
Boolean |
false |
This enables versioning with history tables to be deactivated before the target load starts. After the load is finished, versioning is reactivated. This option is can be used whenever the target system is Db2 LUW. In order to apply this option the user must have |
||||
Deactivate identity value adaption deactivateIdentityValueAdaption |
Boolean |
false |
By enabling this property, identity values will not be checked and added for auto generated columns. This saves time, but can lead to incorrect identity values. Only check this option if you are sure that no inserted values will be in conflict with the current identity values of the target tables. |
||||
Delete execution files on success deleteExecutionFilesOnSuccess |
Boolean |
false |
Specifies if working files of a task execution should be deleted in case of a successful task execution. This reduces the required space for a task and should therefore prevent space problems on the server when many tasks exist. |
||||
|
description |
String |
n/a |
An optional description for this object. The description can contain multiple lines to give more context on the configured object. The description is not used in a technical context. |
||||
|
displayName |
String |
n/a |
Specifies the name of the object. The name is used to display and identify the object in lists. The name can contain any valid UTF-8 characters. |
||||
|
dropOption |
Enum |
NOTHING |
This option specifies how XDM handles the target tables of a task during structure comparison.
|
||||
|
dropRestrictOnDrop |
Boolean |
false |
Within Db2, with the attribute |
||||
|
executionPlatform |
String |
default |
This property defines whether and on which platform the Dataflow server is being built for a task or workflow execution. The property on the template is overwritten by the property on the task or workflow. |
||||
|
executionRetentionPeriod |
String |
-1 |
Specifies how long executions are kept for the specific task or workflow.
If an execution is older than the specified retention period, the XDM service will remove it.
If the executions should not be deleted automatically, the retention period must be set to -1. Otherwise, the input must start with
A detailed description of the period syntax can be found here. |
||||
|
extractTraceActive |
Boolean |
false |
This option prepares an additional temporary database, that allows previewing of the extracted data in the user interface. When enabled, the data can be investigated in the task execution detail view using the Schema Browser button. If this option is enabled, additional space and time will be used during the execution of the task. Use this option during task development or debugging, but disable it for productive task usages. For this option to work, the XDM core service needs access to the task directories.
Please ensure, that the |
||||
Target foreign key deactivation foreignKeyDeactivation |
Enum |
DISABLE |
There are three options which specify how to deal with foreign keys during the load process:
|
||||
|
generateAlias |
Boolean |
true |
If you copy a source table or sequence you can specify whether any aliases for these source objects should be generated in the DDL for the target as well. If the property is set to true, DDL for aliases will be generated and executed during task execution. |
||||
|
generateComment |
Boolean |
true |
If you copy a source table you can specify whether any comments for this source table should be generated in the DDL for the target as well. If the property is set to true, DDL for comments will be generated and executed during task execution. |
||||
|
generateForeignKey |
Boolean |
true |
If you copy a source table you can specify whether the foreign keys for this table should be generated in the DDL for the target as well. If the property is set to true, DDL for foreign keys will be generated and executed during task execution. |
||||
|
generateGrant |
Boolean |
true |
If you copy a source table you can specify whether the grants for this table should be generated in the DDL for the target as well. If the property is set to true, DDL for grants will be generated and executed during task execution. |
||||
Handle multi table tablespaces handleMultiTableTablespaces |
Enum |
ABORT |
Controls how XDM should react if data should be loaded into a Db2 for z/OS table when there are other tables in the same tablespace. This operation can be problematic, since the other tables would be overwritten by the usual LOAD REPLACE operation. Therefore, special consideration is required of the user. This property has no effect if the target system is not Db2 for z/OS, nor if there are no other tables in the target tablespace (except for the ´APPEND´ option).
|
||||
|
incompatibleAction |
Enum |
ABORT |
Defines XDM behavior, when source and target table structures are deemed to be incompatible.
|
||||
|
jdbcProfiling |
Boolean |
false |
Activate the performance supervision in the associated task template (all task types are supported).
If this option is activated certain warnings in the task logs will be activated and profiling statistics for JDBC queries are logged.
They are available through a task execution export in the task folder |
||||
|
logLevel |
Loglevel |
INFO |
Controls the granularity of the log messages for the XDM task issued directly by XDM. The number of log messages decreases in the following order: Trace → Info → Warning → Error
It is also possible to overwrite the log level in specific program parts. This can be done by adding the prefix Possible values are:
|
||||
|
modificationSet |
ModificationSet |
n/a |
The property contains a list of modification sets that can be used to modify data during the task execution. For every modification set it is also stored, if it is selected or not. Only selected modification sets are shown in the view mode of the object. |
||||
|
modificationValidation |
Boolean |
false |
By enabling this property, values affected by modification methods will be checked if they can be inserted in the target. The task will abort if this is not possible. |
||||
|
mvsUseInternalLoadFormat |
Boolean |
true |
If this is active, the internal load format will be used instead of the delimited load format. This may enhance the load performance and can be used to transport binary data, which would be truncated using the delimited format. |
||||
|
mvsUseSpannedLoadFormat |
Boolean |
false |
If this is active, all lobs will be transported inline in spanned datasets, instead of using PDS format.
This option increases transport and load performance when |
||||
|
nonrecoverableMode |
Boolean |
true |
Specifies whether the target DBMS logs all changes that are made to the target tables when XDM populates them with data from the source tables. Writing log records ensures that the target environment is able to perform a recovery operation if required. However, it also means that a large number of log records will be created in the target environment, which may not be desirable. If you want to minimize the number of log records that are written in the target, consider setting this option to true and taking a fresh backup copy of the target environment after the copy process finishes. If the property is set to true, no log records will be written for the target tables while they are populated. Otherwise, the target DBMS is instructed to write log records for all changes that XDM makes to the contents of the target tables. If the LUW database is configured as high available database, this flag must be set to
false and in the connection, the parameter
Backup path for COPY YES option must contain a valid path for the LOAD statement to be successful.
Otherwise an error message |
||||
|
parallelModification |
Boolean |
true |
The parallel modifications flag determines whether modifications to tables should be processed in parallel (simultaneously) or sequentially (one after the other). Setting the flag to true enables parallel processing, which is faster but only suitable if there are no dependencies between the modification rules. Setting it to false enforces sequential processing, ensuring that modifications are applied in the correct order when dependencies exist. Dependencies Between Modification Rules: Dependencies occur when one modification rule relies on the results of another. If such dependencies exist, sequential processing is necessary to ensure data integrity and correctness. Examples of Dependencies: Data Collection Dependency:
Data Obfuscation and Usage:
Summary: Use the parallel modifications flag to control the order of table modifications:
|
||||
|
sourceConnection |
Connection |
n/a |
Specifies the connection that is used as source connection in the task. A source connection must be set in either the task template or the task. If it is set in both, the connection set in the task is used. |
||||
|
sourceMountPoint |
String |
n/a |
The mount point on the source database server for a shared drive. When copying data between two different database servers, using a shared drive is one of the available transport options to move the data from the source database server to the target database server. This property specifies the full path under which the shared drive is accessible from the source database server. |
||||
|
sourceWorkingDirectory |
String |
n/a |
With this option it is possible to use a specific working directory on the source database server.
If a file path has been specified here, this path will be independent of that which is defined on the database server under working directory |
||||
|
stopSource |
Enum |
TABLESPACE |
Specifies whether the source tables are stopped while the copy process is running.
|
||||
|
tags |
Tag |
n/a |
Contains the tags that apply to this object. These tags can be used in the search to find objects quickly and effortlessly. |
||||
|
targetConnection |
Connection |
n/a |
Specifies the connection that is used as the target in the task. A target connection must be set in either the task template or the task. If it is set in both, then the connection set in the task is used. |
||||
|
targetMountPoint |
String |
n/a |
The mount point on the target database server for a shared drive. When copying data between two different database servers, using a shared drive is one of the available transport options to move the data from the source database server to the target database server. This option specifies the full path under which the shared drive is accessible from the target database server. |
||||
|
targetWorkingDirectory |
String |
n/a |
With this option it is possible to use a specific working directory on the target database server.
If a file path has been specified here, this path will be independent of that which is defined on the database server under working directory |
||||
|
taskExecutionReport |
TaskExecutionReport |
n/a |
This list defines which reports are created at the end of an execution and are displayed in the task execution. The list includes all defined reports to which the current user has READ access. The selected reports are generated at the end of a task or workflow execution.
|
||||
|
tolerationMode |
Enum |
1 |
If a source table differs in structure from a destination table you have to specify how differences are treated while copying it from source to target. The values are still written to the target database as they are. It depends on the handling of the database if there is a truncation or an error message. It is necessary to use a modification rule on the respective column to implement a proper data truncation. For more details, see toleration mode in Comparing and Generating Objects.
|
||||
|
traceDataConfiguration |
String |
n/a |
This property specifies a list with one or more values which should be traced during XDM task processing. If multiple values are specified, these should be separated by semicolons. The specified values are reported in a trace data report at the end of a task stage in which the value was detected. Reported are the rows of a table in which one of the specified values occurs in any of the row’s columns, whenever that row is part of an INSERT, UPDATE, DELETE, or SELECT action. If a specified value is detected in a stage as part of one of the above named actions, then the row in which it occurs is reported in the trace data report at the end of that stage. In the event that a specified value is affected by a modification method, the row in which it occurs is reported in the trace data modification report. |
||||
|
useDelimiter |
Boolean |
true |
Specifies whether a double quote delimiter should be used in DDL and SQL statements to identify objects such as schemas, tables, etc. Unquoted identifiers are case-insensitive. This means that they will recognize customer, Customer, and CUSTOMER as the same object. However, quoted identifiers are case-sensitive. This leads to treating "CUSTOMER" and "customer" as entirely different objects. You should keep in mind that XDM uses double quote delimiters by default.
Turning this feature off can lead to usability issues.
If you decide not to use double quote delimiters, you should be aware of how the database you are dealing with handles identifiers.
For example, Db2 converts unquoted identifiers to uppercase, whereas PostgreSQL converts them to lowercase.
Therefore, if you want to select a table named You should avoid mixing tasks with and without double quote delimiters. |
||||
|
usingAliasedTables |
Boolean |
false |
This property enables a task to use an alias on a table as a replacement for this table. This is useful in the following scenario: You have defined a uniform application model that names tables in the rules. In a certain environment the tables are named differently and have an alias for the original name. Then XDM creates a virtual table object in the task process under the name of the alias, and the column list of the underlying table.
|
||||
|
usingViewedTables |
Boolean |
false |
Using viewed tables controls when views should be handled like tables.
In the event that a view references another view or an alias, XDM will follow the chain of references to a depth of 5 steps by default.
You can control the selection depth by setting a custom parameter Views can be used as a source in most cases, even if they are based on multiple tables or using functions to modify column values. For target usage, only views can be used that are based on a single table and reflect the columns without modifying any value. Please refer to the definition on deletable views, insertable views and updatable views of the database system documentation. When inserting on a view, the view will receive the DELETE, UPDATE and INSERT statements and the database system evaluates if the operation is permitted.
|
Actions
The available actions are described below. Some actions apply to the list, while others are specific to selected task templates.
List Actions
The following actions are available on the task templates list. If the action is disabled a tooltip will provide the exact reason for the deactivation. The required permissions are described in detail for each action.
-
Bulk Create Permission
-
Bulk Delete
-
Bulk Export
-
Create
-
List History
Create a new permission on the selected objects. Shows in the result list whether the permission could be granted on the respective object. Only these permissions can be granted that are existing on the underlying object.
A permission in the result list can have three different states, these are:
- CREATED
-
The permission successfully granted on the object.
- MERGED
-
The granted permission already exists on the object and merged with the new permission.
- SKIPPED
-
The permission could not be granted, because of missing administration permission on the object.
The following permissions are required on the list:
-
ADMINISTRATION
-
READ
Delete the selected objects.
The following options are available:
- Cascade
-
Recursively delete depending objects.
|
When using cascade, dependent objects are deleted first also with cascade enabled. Thus, a cascade deletion is a recursive function that deeply searches for dependent objects and deletes them first. There is only a confirmation for the first object. The dependent objects are deleted without confirmation but only when the user has the DELETE permission. This feature is only available in development mode. More information about development mode can be found in the chapter User Settings. It should be used with caution. |
An object in the result list can have two different states, these are:
- DELETED
-
The object could be deleted.
- NOT_DELETED
-
The object could be not deleted. This may be because the executing person does not have a delete permission on the object or the object is still referenced by others. A detailed reason can be determined with the help of the error message. If the object is still in use, these objects are also displayed.
The following permissions are required on the list:
-
DELETE
-
READ
Exports the selected objects.
- YAML
-
Generates a YAML file containing all the object’s settings. The user has the option to download the export file, or to paste the content in the import dialog. The YAML export is particularly suitable for importing the exported objects again via the XDM UI.
- ZIP
-
This export writes several individual YAML-files. Each YAML-file is stored in a directory according to its type. For example, when exporting a native table backup task template named 'A backup template', a YAML-file 'A backup template.yaml' is created inside the directory /TaskTemplate/native-table-backup-task-template/ of the ZIP-file. This kind of export is suitable for usage in git-repositories together with XDM’s configuration as code feature.
Related and dependent objects can optionally be included in the export. The export dialog has the following options:
- Include dependent objects
-
Dependent objects only belong to the exported object like rules and tasks.
- Include permissions
-
Permissions of each exported object, only when the object supports permissions. Some objects like rules don’t have permissions.
- Include referenced objects
-
Referenced objects exist by their own and are used in the exported object like connections and environments.
- Include objects that depend on referenced objects
-
Also include the dependent objects of the referenced objects. E.g. the rules of a modification set or the rules in an application model version.
| Objects on which the user does not have READ permission are not exported. This includes dependent and referenced objects. However, the reference to an object will be exported. For example a connection object would refer to the credential, even if the user does not have READ permission on the credential. The definition of the credential object itself will not be part of the export file. This can lead to issues during the import, because the connection cannot be created without an existing credential. |
The following permissions are required on the list:
-
READ
Creates a new object in the current list. Depending on the object type either a popup dialog is shown for the most important settings, or the complete object is shown in edit mode. The dialog provides the option to create the object and remain in the current list or to switch to the newly created object in edit mode to perform further changes.
The following permissions are required on the list:
-
CREATE
The history list tracks all modifications made to objects within it. A new record is added each time an object is created, edited, or deleted. A record indicates who made the change, which object was affected, and when the change was made.
For more information about the concept of the history refer to the history concepts.
The following permissions are required on the list:
-
READ
Object Actions
The following actions are available on specific task templates. In order to execute the action, the user must possess the necessary permissions for the object. The permissions required for each action are described individually. If the user does not have these permissions, the action will be disabled and the tooltip will provide the exact reason for the deactivation.
-
Check
-
Delete
-
Duplicate
-
Edit
-
Event List
-
Export
-
Object History
-
Permission Check
-
Usage
-
Uses
This action validates the object and its dependencies, reporting configuration errors that could cause issues during task or workflow execution. The validation will cascade through the child objects of the checked objects and objects referenced by them.
For instance, if an installed application of an environment is checked, the check will process the application model, the specified version, the connection, modification sets, and involved modification methods. If an object has rules, all active rules will be checked. The modeling connection and version, including their modification sets and methods, will also be checked. Deactivated objects will not be included in recursive checks, but can be checked individually if the check is executed on the object itself.
Checks often require additional information from the context of the objects being checked, such as necessary connections or custom parameter values. The check will gather information from the objects being checked and use it to perform checks on child objects. Any required additional information must be provided before the check begins. The check queries the user to provide these missing information.
- Database object checks
-
For all rules which reference database objects such as tables, columns, etc, the check verifies that the those objects exist in the database system. If a connection can be inferred from the context, then this connection is used. If no connection is available in the context, it must be specified before the check is executed.
- Connection checks
-
For objects which configure access to external systems, such as connections or storage locations, the configuration check verifies that access can be established using the given credentials. Furthermore, additional operations on database connections are performed to check whether the credential user has the necessary authorization to access relevant database objects. In particular, the credential user’s permission to read source tables and write to target tables is verified. Similarly, for storage locations the check verifies that the credential user has permission to write to the working directory.
- Code checks
-
For all entities containing code segments, such as modification methods or condition scripts, the syntax for the code is checked. This does not check, however, whether at run time all necessary variables are likely to be available.
The following permissions are required:
-
READ
Delete the object. If the object is still used by another entity, an error message is displayed, and the object is not deleted. The delete operation must be confirmed in a separate popup.
The following options are available:
- Cascade
-
Recursively delete depending objects.
|
When using cascade, dependent objects are deleted first also with cascade enabled. Thus, a cascade deletion is a recursive function that deeply searches for dependent objects and deletes them first. There is only a confirmation for the first object. The dependent objects are deleted without confirmation but only when the user has the DELETE permission. This feature is only available in development mode. More information about development mode can be found in the chapter User Settings. It should be used with caution. |
The following permissions are required:
-
DELETE
-
READ
Will create an exact copy of the current object with a different display name in the same list. Users can decide whether they want to copy child objects like rules, permissions or tasks. It is only possible to select complete classes of objects and not to select individual child objects. Copied child-objects will preserve their display name. The default is to copy all child objects.
The following permissions are required:
-
CREATE
-
READ
Opens the current entity in edit mode.
The following permissions are required:
-
READ
-
WRITE
This list shows all registered events for the object. It includes events that are specific to the object, or for that type.
The following permissions are required:
-
READ
This action allows to export XDM objects in different formats in order to import them via export or CasC in another environment.
Refer to configuration of export for more information.
Related and dependent objects can optionally be included in the export. The export dialog has the following options:
- Include dependent objects
-
Dependent objects only belong to the exported object like rules and tasks.
- Include permissions
-
Permissions of each exported object, only when the object supports permissions. Some objects like rules don’t have permissions.
- Include referenced objects
-
Referenced objects exist by their own and are used in the exported object like connections and environments.
- Include objects that depend on referenced objects
-
Also include the dependent objects of the referenced objects. E.g. the rules of a modification set or the rules in an application model version.
- Include implicit created objects
-
Implicit created objects are tasks or workflows which were automatically created for execution. These objects won’t be exported by default, but can be included by setting this flag. When exporting implicit objects, make sure that the
Include dependent objectsflag is also enabled.
|
Objects on which the user does not have For example a connection object would refer to the credential, even if the user does not have |
The following permissions are required:
-
READ
The history displays all changes made to the respective XDM object, including any changes made to its rules.
Each change record includes information about the operation performed (e.g. CREATE, UPDATE, DELETE), the timestamp, and the user responsible for the change.
For more information about the concept of the history refer to the history concepts.
The following permissions are required:
-
READ
The check verifies that the current user has the authorization to access the object. The check can also be performed for a specific user or role, if needed. By default, the check is performed using the current user’s credentials. It is then applied to child and referenced objects.
Additional permission checks are applied when these can be inferred from the context in which the check was started. For example, if the check is performed on a table copy task, the referenced source and target connections are checked to determine whether the given identity has source or target usage permission respectively.
The following permissions are required:
-
READ
The Usage List shows all objects that refer to the current object. It provides an overview of the relationships and makes it easy to track these relationships.
The following permissions are required:
-
READ
The Uses List shows all objects that the current object uses. It provides an overview of the relationships and makes it easy to track these relationships.
The following permissions are required:
-
READ
License Options
This object is available if at least one of the following license options is enabled:
-
TASK_TYPE:NATIVE_TABLE_COPY_TASK
-
TASK_TYPE:TABLE_COPY_TASK
The object is also available if the license package is at least: ESSENTIAL.
Prerequisites
Before an XDM native table copy task template can be completely configured you have to set up a connection with storage location and corresponding credentials.
| If the source database is PostgreSQL and the target database is not or vice versa, then you should use a compatibility table copy task template. |
Required permissions
Users and Groups
During execution a native table copy task requires four different users:
-
Source operating system user, defined in the storage location credential of the source connection,
-
Source database user, defined in the credential of the source connection,
-
Target operating system user, defined in the storage location credential of the target connection and,
-
Target database user, defined in the credential of the target connection.
Authorization for the source operating system user
The operating system user on the source database server must have authority to perform the following actions:
-
Create a working directory on source database server or shared drive (via FTP or SSH)
-
Write to the working directory (via FTP, FTPS or SSH)
-
Read from the working directory (via FTP, FTPS or SSH)
-
Delete the working directory (via FTP, FTPS or SSH)
For Oracle databases, the following authority is also required:
-
Execute Data pump
-
Execute SQL Loader jobs
The process owner for Data Pump jobs is typically not the user who invokes the job.
Most commonly it is the user oracle. The Data Pump process owner
must be made a member of the XDM administration group on the target operating system.
|
When using reduction or modification in the task, the data will be written directly in the target working directory. In this case, it is necessary to have authority to perform the following actions:
-
Create files in the target working directory on target database server or target shared drive mount point (via FTP or SSH)
-
Write to the target working directory (via FTP, FTPS or SSH)
-
Read from the target working directory (via FTP, FTPS or SSH)
Additional authorization for members of the XDM administration group
When using an XDM administration group for the source operating system, additional authorization is required if you are working with DB2 LUW or Oracle as database systems.
For DB2 LUW, members of this group must be:
-
Instance fenced user of the source database (for
UNLOADof source database tables) -
Operating system user to copy files from the source database server.
For Oracle, members of this group must be:
-
Instance user of the source database (in order to use the Data Pump utility on the source database)
-
Operating system user to copy files from the source database server.
When extracting data and copying files to the target server, the group of the data files will be set to the administration group and the permissions for the data files will be set to 770 by XDM.
Authorization for the source database user
-
Select information from database catalog
-
Read from data tables (
SELECTauthority)
Additional authorization for the source database user on a DB2 z/OS system
-
Authorization to call
SYSPROC.DSNUTILU/Vin order to execute utilities on the source system. Section CustomizingSYSPROC.DSNUTILU/Vin DB2 z/OS explains howSYSPROC.DSNUTILU/Vhas to be customized to work with XDM. -
Authorization to call
SYSPROC.ADMIN_COMMAND_DB2in order to execute DB2 commands on the source system -
Authorization to run the
UNLOADutility on the selected tables. ForUNLOADone of the following privileges must be held:-
Ownership of the table,
-
SELECTauthority on the table, -
UNLOADauthority on the table, -
DBADMauthority for the database, -
DATAACCESSauthority, -
SYSADMauthority.
-
Additional authorization for the source database user on a DB2 LUW system
-
Authority to use the stored procedure
SYSPROC.ADMIN_CMDforEXPORTstatements -
Read access to the administrative view
SYSIBMADM.TBSP_UTILIZATIONto determine the sizes of tablespaces -
System monitor authority (
SYSMON) to retrieve additional information from the database catalog (optional, but recommended)
Additional authorization for the source database user on a MS SQL system
-
The user must be a database user, a domain user is not sufficient.
-
The user must have authority to execute
BCPutility with theEXEC xp_cmdshellcommand.The system procedure xp_cmdshellmust be activated on the database server. If this is not possible or not desired for security reasons, it is possible to use local BCP instead. See the local BCP property reference documentation for further information.
Authorization for the target operating system user
The operating system user on the target database server must have authority to perform the following actions:
-
Create a working directory on the target database server (via FTP, FTPS or SSH).
-
Write to the working directory on the target database server (via FTP, FTPS or SSH).
-
Read from the working directory (via FTP, FTPS or SSH).
-
Delete the working directory (via FTP, FTPS or SSH).
For Oracle, the following additional authority is required:
-
Execute Data pump
-
Execute SQL Loader jobs
Additional authorization for members of the XDM administration group
When using an XDM administration group for the target operating system, some additional authorization is required if you are working with DB2 LUW or Oracle as database system.
For DB2 LUW members of this group must be:
-
An instance user of the target database in order to use the
LOADutility. -
An instance fenced user of the target database in order to be a file owner.
-
The target operating system user of the task to copy files to the target server.
For Oracle members of this group must be:
-
An instance user of the target database who is the owner of the data files in order to use the Data Pump and SQL Loader utilities of target database
-
The target operating system user of the task to copy files to the target server
When copying files to the target server, the owning group of the data files will be set to the administration group and the permissions for the data files will be set to 770 by XDM.
Authorization for the target database user
For the target database user the following privileges are required:
-
SELECTauthority for the database catalog -
INSERT/UPDATE/DELETEauthority to write into the database tables -
Authority to execute DDL (only required if database objects are to be created)
Additional authorization for the target database user on a DB2 z/OS system
-
Authorization to execute the
REPAIRutility with theNOCHECKPENDoption and -
Authorization to execute the
LOADutility on the database. ForLOADone of the following privileges must be held:-
Ownership of the table,
-
LOADprivilege on the table, -
DBADMorDBCTRLauthority for the database, -
DATAACCESSauthority or -
SYSCTRLorSYSADMauthority.
-
-
If system-period temporal tables are copied, the user also needs authorization for:
-
ALTER TABLE <table_name> DROP VERSIONINGand -
ALTER TABLE <table_name> ADD VERSIONING.
-
Additional authorization for the target database user on a DB2 LUW system
-
Authority to use the stored procedure
SYSPROC.ADMIN_CMDforIMPORTstatements -
Execute
SET INTEGRITY PENDINGstatements. -
System monitor authority (
SYSMON) to retrieve additional information from the database catalog (optional, but recommended).
Additional authorization for the target database user on an MS SQL system
-
The user must be a database user, a domain user is not sufficient,
-
Authority to execute
BCPutility with theEXEC xp_cmdshellcommand.The system procedure xp_cmdshellmust be activated on the database server. If this is not possible or not desired for security reasons, it is possible to use local BCP instead. See the local BCP property reference documentation for further information.
Space requirement considerations
-
Enough physical free space on the target database management system.
-
Enough allocated free space in the target database.
-
Enough physical free space on the source database server.
-
Enough physical free space on the target database server.
-
Enough physical free space on the shared drive, if used.
Restrictions
-
Oracle only: When using modification or reduction rules on a table, XDM uses SQL Loader to load data into the target table. If the table contains LOB columns or XML columns, the SQL Loader is not able to load LOBs and XML into the target column. In this case, use a compatibility table copy task template.
If the LOBs or XML can be omitted in the target system, it is possible to remove the LOBs or XML by using a modification rule.
XDM Permissions to execute a task
The user needs the following permissions to successfully start the task execution:
-
READpermission on the task and task template, -
EXECUTEpermission on the task, -
SOURCE_USAGEon the source connection, -
TARGET_USAGEon the target connection, -
READpermission on any storage location linked in the connections if table copy tools (UNLOAD/LOAD) are used, -
READpermission on any credential used in the connections or storage locations, -
READpermission on any modification set linked to the task, task template, or connection, -
READpermission on any modification method used in the linked modification sets, and -
READpermission on any custom parameter used in the task template.
Task procedure
XDM table copy tasks have six stages. This procedure description applies to both compatibility table copy tasks and native table copy tasks.
Before executing Stage 1, XDM creates all necessary files and folders in the task directory with the Tailoring process.
- Tailoring
-
All necessary files and folders are created in the task directory.
The following reports are generated by this stage. - Stage 1
-
The structure of the source connection is stored in task files. XDM collects all tables that match at least one selection rule together with their dependent objects. Tables and columns that match any exclude rule will not be in the task’s selection set.
The following reports are generated by this stage: - Stage 2
-
The structure of the target connection is stored in task files. XDM fetches all objects for the target environment matching a table from the source environment, in accordance with mapping rules. Exclude rules with scope Target can further reduce the selection set.
The following reports are generated by this stage: - Stage 3
-
XDM compares the structures in the source and target connections and generates DDL for new objects in the target connection, if required.
The following reports are generated by this stage: - Stage 4
-
XDM executes the DDL that was created in Stage 3 of the task execution, if any.
The following reports are generated by this stage: - Stage 5
-
XDM extracts the data from the source tables and copies it into a file on the source server. Afterwards, these files will be moved to the target server, if necessary. If no reduction rules are set on a table, then XDM will extract all rows. During the extraction all modification Rules with scope source are processed. Those rules can be taken from the definition of a modification set, either on the task template or on the connection.
The following reports are generated by this stage: - Stage 6
-
XDM loads the data into the target tables. Additionally, all modification Rules with scope target are processed. Those rules can be taken from the definition of a modification set, either on the task template or on the connection. After the execution, working files are deleted to save storage space.
The following reports are generated by this stage: