We have a separate group that execute the backup, reorg and runstat scripts that we create.

What we want to do is restrict them to just these activities. If we add them to the SYSMAINT group then they can also stop/restart the instance, update db cfg and other tasks that we don't want to allow them to do.

Is there a way to restrict the user to just the tasks that we want them to perform?

We're using DB2 v9.5.0.3", "s081210", "U823474", and Fix Pack "3a". ESE


Thanks in advance

Yes. Write a script and give them ability to kick it off. Script shall use another id to connect.