This article details DB2 permissions for DPA monitoring.
DPA requires an operating system user to have SYSMON authority and connect privileges in order to monitor a DB2 instance. DPA uses this authority to view the snapshot tables: table(snapshot_statement) and table(snapshot_appl_info). Then, DPA records the statement operations or wait events for each active session in the monitored database into a performance data warehouse.
DPA requires that the instance wide parameter, DFT_MON_STMT, be turned on in order to monitor the instance.
Note: Turning on DFT_MON_STMT requires an instance restart before it will take effect.
To obtain Access Plans, DPA requires the DBADM authority for each monitored database. This allows DPA to explain the data access path for each specific SQL statement collected.
You can optionally turn on the DFT_MON_BUFPOOL parameter to allow DPA to collect the following resource metrics:
The SYSMON_GROUP Users, having SYSMON authority at the instance level, have the ability to take database system monitor snapshots of a database manager instance or its databases. SYSMON authority includes the ability to use the following commands:
Users with SYSADM, SYSCTRL, or SYSMAINT authority automatically have the ability to take database system monitor snapshots and to use these commands. DBADM does not.