In the Teradata security model, the database or user that contains an object is considered its immediate owner. This ownership confers all privileges on that object automatically and implicitly. For example, the Sales database inherently has all privileges (SELECT, INSERT, etc.) on the Sales.Products table. These ownership privileges are fundamental to the system and do not require an explicit GRANT statement to be issued. The system automatically recognizes the owner's rights to the objects within its space.

A. Granting a privilege at any level is an explicit action that is always recorded as a new row in the DBC.AccessRights system table.

B. A database-level grant creates a single entry in DBC.AccessRights for the database itself; this privilege is then implicitly applied to all objects within it, not by creating separate rows for each object.

D. Users who create objects are the owners of those objects and, by virtue of ownership, automatically possess all privileges on them without needing separate grants.

1. Teradata Vantage™ - Security Administration, B035-1100-162K, April 2021.

Page 30, "Owner Privileges": "The immediate owner of an object is the database or user in which the object is created. The immediate owner of an object automatically holds all privileges on that object. These privileges are implicit and are not recorded in the DBC.AccessRights table." (Supports correct answer C and refutes D).

2. Teradata Vantage™ - SQL Data Control Language, B035-1149-162K, April 2021.

Page 100, "Usage Notes for GRANT (SQL Form)": "When you grant a privilege on a database or user, the privilege applies to all existing and future objects in that database or user space." (Refutes B's assertion of individual row insertion for each object).

Page 21, "Access Logging": "The AccessRights table contains one row for each explicit privilege granted on a database object." (Refutes A, as any explicit grant is recorded).