Configuring database security in DB2

Privileges for DB2 and DB2 for z/OS
To automatically create schemas, tables, and views during monitor model deployment, undeployment, and data movement services (DMS) enablement, the user-specified authentication alias for Monitor_Admin_Database must be granted DBADM authority. If the authentication alias that is associated with the Monitor_Admin_Database does not have at least DBADM authority, you must manually create the database schema for monitor model installation and DMS enablement.

Securing the MONITOR database in DB2
You can enhance security on DB2 by granting the MONITOR database user only the privileges needed to access the MONITOR database objects. You can also remove administrative grants from database scripts and place grants on specific database objects that IBM Business Monitor requires.

Securing the COGNOSCS database in DB2
IBM Cognos® BI requires additional grants to create tables for internal use. After the first successful startup of the IBM Cognos BI server, you can revoke the additional privileges required for table creation for the database user in the IBM Cognos BI content store database.