# Setting access for individual users

Use the `derby.database.fullAccessUsers` and `derby.database.readOnlyAccessUsers` properties to specify the user IDs that have read-write access and read-only access to a database.

You can specify multiple user IDs by using a comma-separated list, with no spaces between the comma and the next user ID.

To set the user authorizations for individual users, specify the access in a CALL statement. For example:

To specify read-write access for the system administrator user ID `sa` and for the user ID `maria`, issue this CALL statement:

    CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
        'derby.database.fullAccessUsers', 'sa,maria')

To specify read-only access for a guest user ID and for Fred, issue this CALL statement:

    CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
        'derby.database.readOnlyAccessUsers', 'guest,Fred')

To specify read-write access for the user ID "Elena!", use delimited identifiers for the user ID. For example:

    CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
        'derby.database.fullAccessUsers', '"Elena!"')

- Read-only and full access permissions
  The actions that users can perform on a Derby database is determined by the type of access that users have to the database objects.
- User authorization exceptions
  SQL exceptions are returned when errors occur with user authorizations.

Parent topic: User authorizations
Related concepts
Setting the default connection access mode
Setting the SQL standard authorization mode