Add Azure Active Directory User to Local Group

How do I add Azure Active Directory User to Local db2admins Group?

With Windows 10 you can join an organisation (=Azure Active Directory) and login with your cloud credentials.

Open a command prompt as Administrator and using the command line, and run command

net localgroup db2admins AzureAD\MOHAMEDRAFIE /add




Notes:

You cannot use the domain user ID to run the db2cmd command to create a new database and tables. If you do, you might see this error in the DB2 log files:

 SQL1092N "USERID does not have the authority to perform the requested command or operation."

DB2 cannot look up the domain user ID "USERID" as an authorization ID. It ignores the local group for the domain user ID. Even if you add the domain user ID to the local DB2ADMNS group, DB2 does not have the authority to perform database operations.

Resolving the problem

To enable the domain user ID to access the database, complete the following steps.

1. Add the domain user ID to the local group DB2ADMNS.
2. Open the DB2 command window and run the following commands from the prompt:

   db2set DB2_GRP_LOOKUP=LOCAL,TOKENLOCAL        
   db2 update dbm cfg using sysadm_group DB2ADMNS
   db2stop                                        
   db2start