-32510 User does not have discrete privilege to change session authorization.

You must obtain the PRIV_CANSETIDENTITY discrete privilege from the DBSSO before the start of a session in which you use the SET SESSION AUTHORIZATION statement.