# SYSCS_UTIL.SYSCS_SET_USER_ACCESS system procedure

The `SYSCS_UTIL.SYSCS_SET_USER_ACCESS` system procedure sets the connection access permission for the user specified.

## Syntax

    SYSCS_UTIL.SYSCS_SET_USER_ACCESS (USERNAME VARCHAR(128),
    CONNECTION_PERMISSION VARCHAR(128))

USERNAME

  An input argument of type VARCHAR(128) that specifies the user ID in the Derby database.

CONNECTION_PERMISSION

  Valid values for CONNECTION_PERMISSION are:

  FULLACCESS
    Adds the user to the list of users with full access to the database. The value for the database property is `derby.database.fullAccessUsers`.
  READONLYACCESS
    Adds the user to the list of users with read-only access to the database. The value for the database property is `derby.database.readOnlyAccessUsers`.
  null
    Removes the user from the list of permissions, reverting the user to the default permission. You must specify `null` without the quotation marks.

## Execute privileges

If authentication and SQL authorization are both enabled, only the database owner has execute privileges on this procedure by default. See "Configuring user authentication" and "Configuring user authorization" in the Derby Security Guide for more information. The database owner can grant access to other users.

## Example

    CALL SYSCS_UTIL.SYSCS_SET_USER_ACCESS ('BRUNNER', 'READONLYACCESS')

To remove the user from the list of permissions, you specify the `null` value without the quotation marks. For example:

    CALL SYSCS_UTIL.SYSCS_SET_USER_ACCESS ('ISABEL', null)

Parent topic: Built-in system procedures
Related reference
SYSCS_UTIL.SYSCS_GET_USER_ACCESS system function