How to create a new user aaa with same rights as existing user bbb ?

Question

Assume user bbb already exists in Oracla 10g database.
How can I create a new user aaa with the same rights/permissions as the old user bbb?
Is this procedure/command also working if the old user is user "system" (=dbadmin)?

Answer 1

There is some possibilty to generate a EXPDP dump file which contains only DDL statements related to account and
privileges: EXCLUDE/INCLUDE parameter can help.
For example, following EXPDP statements seem to work with SYSTEM account:
expdp / schemas=system content=metadata_only exclude=table,sequence,package,function,procedure,synonym,,type view dumpfile=DPD:system.dmp logfile=DPD:system.log
Export: Release 10.2.0.2.0 - Production on Thursday, 14 February, 2008 9:41:36
Copyright (c) 2003, 2005, Oracle.  All rights reserved.
Connected to: Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - Produc
tion
With the Partitioning, OLAP and Data Mining options
Starting "OPS$XXX"."SYS_EXPORT_SCHEMA_01":  /******** schemas=system con
tent=metadata_only exclude=table,sequence,package,function,procedure,synonym,type view dumpfile=DPD:system.dmp logfile=DPD:system.log
Processing object type SCHEMA_EXPORT/USER
Processing object type SCHEMA_EXPORT/SYSTEM_GRANT
Processing object type SCHEMA_EXPORT/ROLE_GRANT
Processing object type SCHEMA_EXPORT/DEFAULT_ROLE
Processing object type SCHEMA_EXPORT/PRE_SCHEMA/PROCACT_SCHEMA
Processing object type SCHEMA_EXPORT/POST_SCHEMA/PROCACT_SCHEMA
Master table "OPS$XXX"."SYS_EXPORT_SCHEMA_01" successfully loaded/unload
ed
Dump file set for OPS$XXX.SYS_EXPORT_SCHEMA_01 is:
  C:\TEMP\SYSTEM.DMP
Job "OPS$XXX"."SYS_EXPORT_SCHEMA_01" successfully completed at 09:41:41
impdp / sqlfile=dpd:system.sql dumpfile=DPD:system.dmp logfile=DPD:system.logImport: Release 10.2.0.2.0 - Production on Thursday, 14 February, 2008 9:42:46
Copyright (c) 2003, 2005, Oracle.  All rights reserved.
Connected to: Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - Produc
tion
With the Partitioning, OLAP and Data Mining options
Master table "OPS$XXX"."SYS_SQL_FILE_FULL_05" successfully loaded/unload
ed
Starting "OPS$XXX"."SYS_SQL_FILE_FULL_05":  /******** sqlfile=dpd:system
.sql dumpfile=DPD:system.dmp logfile=DPD:system.log
Processing object type SCHEMA_EXPORT/USER
Processing object type SCHEMA_EXPORT/SYSTEM_GRANT
Processing object type SCHEMA_EXPORT/ROLE_GRANT
Processing object type SCHEMA_EXPORT/DEFAULT_ROLE
Processing object type SCHEMA_EXPORT/PRE_SCHEMA/PROCACT_SCHEMA
Processing object type SCHEMA_EXPORT/POST_SCHEMA/PROCACT_SCHEMA
Job "OPS$XXX"."SYS_SQL_FILE_FULL_05" successfully completed at 09:42:50and system.sql is:
-- CONNECT OPS$XXX
-- new object type path is: SCHEMA_EXPORT/USER
-- CONNECT SYSTEM
ALTER USER "SYSTEM" IDENTIFIED BY VALUES '970BAA5B81930A40'
      TEMPORARY TABLESPACE "TEMP";
-- new object type path is: SCHEMA_EXPORT/SYSTEM_GRANT
GRANT GLOBAL QUERY REWRITE TO "SYSTEM";
GRANT CREATE MATERIALIZED VIEW TO "SYSTEM";
GRANT SELECT ANY TABLE TO "SYSTEM";
GRANT CREATE TABLE TO "SYSTEM";
GRANT UNLIMITED TABLESPACE TO "SYSTEM" WITH ADMIN OPTION;
-- new object type path is: SCHEMA_EXPORT/ROLE_GRANT
GRANT "DBA" TO "SYSTEM" WITH ADMIN OPTION;
GRANT "AQ_ADMINISTRATOR_ROLE" TO "SYSTEM" WITH ADMIN OPTION;
GRANT "MGMT_USER" TO "SYSTEM";
-- new object type path is: SCHEMA_EXPORT/DEFAULT_ROLE
ALTER USER "SYSTEM" DEFAULT ROLE ALL;
-- new object type path is: SCHEMA_EXPORT/PRE_SCHEMA/PROCACT_SCHEMA
BEGIN
sys.dbms_logrep_imp.instantiate_schema(schema_name=>SYS_CONTEXT('USERENV','CURRENT_SCHEMA'), export_db_name=>'BAS002.REGRESS.RDBMS.DEV.US.ORACLE.COM', inst_scn=>'1456160');
COMMIT;
END;
-- new object type path is: SCHEMA_EXPORT/POST_SCHEMA/PROCACT_SCHEMA
BEGIN
SYS.DBMS_AQ_IMP_INTERNAL.CLEANUP_SCHEMA_IMPORT;
COMMIT;
END;
/ These export and import steps don't take into account privileges granted on schema objects belonging to another user likely due to to the EXCLUDE statements.
Message was edited by:
Pierre Forstmann