DBA privileges

Hi all.
I am interested why as a DBA I can't grant any object privilege on table which I'm not owner to another user.
Why I can't grant following :
GRANT SELECT ON USER1.TABLE TO USER2.TABLE.
If I would really want to workaround I can create procedure under USER1 (this as a DBA is possible) which will assign this select privilege, grant execute on this procedure to myself and run this procedure.
Is it any other possibility how to grant object privilege to another user as a DBA(I don't mean with grant option) or do I have to do it that way mentioned above?
And is it any reason why I can't do it directly?
Thanks a lot
Marek

You can use the below queries:
SQL> select * from dba_role_privs
where grantee='DBA';
or
SQL> select * from role_role_privs
where role='DBA';

Similar Messages

  • The user account in which the Oracle VSS Writer Service is running does not have the DBA privileges to log in to the Oracle instance.

    VSS-00011: Connection to database instance <instance_name> failed.  
    Cause : The user account in which the Oracle VSS Writer Service is running  does not have the DBA privileges to log in to the Oracle instance.  
    Action : Run the Oracle VSS Writer Service in a user account that can connect to the Oracle instance with DBA privileges.  
    I have assigned ora_dba group to the user that runs the Oracle VSS Writer Service which is the only Oracle solution but still getting
    the above error. Was advised to raise the issue here that it is an OS issue. Pls help

    The user account cannot access Oracle Database instance. And also how do you temporarily disable security software on the server.
    Have you checked what I already asked for? "Try using the user account and access the Database Instance.
    That will let you see if the problem is with the user account permissions or not."
    If this does not help then you can contact Oracle as suggested by Dave.
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Create user with DBA privileges with a restriction to access user data

    Hi
    I need to create a user with all DBA privileges with a restriction to access all user schemas
    Thanks,
    Balaji

    Use Database Vault - http://download.oracle.com/docs/cd/E11882_01/server.112/e16544/toc.htm
    HTH
    Srini

  • Create user with dba privileges

    How do I create a user with DBA privileges in Oracle? The user should be able to create, insert, delete, truncate and other functions without any limits. Do I have to issue GRANT statements?

    Hi,
    I don't believe there's any way to create a user and grant privileges in one command.
    First, create the user:
    CREATE USER  foo  IDENTIFIED BY  bar;Then grant the privileges. There's a pre-defined role called DBA that has all the privileges you mentioned.
    GRANT  dba  TO  foo;It's easy to write a script to do these two commands together, so you could say
    @CREATE_USER  foo  bar  dba

  • DBA privilege is requied to EXPDP in Oracle 10g XE export....?

    Hi...All...,
    1. I created one user and give privileges CONNECT,RESOURCE only.
    2. I ran the expdp command, it is giving following errors
    ORA-39002: The operation is invalid.
    ORA-39070: The log file cannot be opened.
    ORA-39087: Directory name DD1 is invalid.
    3. Then i gave DBA privilege and ran the same expdp command. Now it created
    dump file without any problems.
    So DBA privilege is required for a user to create dump file...is it true....?
    Thanks in advance,
    Pal

    DBA privilege is required for a user to create dump
    file...is it true....?No, most probably you didn't grant privileges to your user on the directory you specified within expdp command.

  • INS0003 OWB Repository Installation cannot continue without DBA privileges

    Hi:
    I´ve installed oracle database 10120 and today installed oracle warehouse builder 10.1, the installation haven´t problems, but when i try to execute OWB Repository Assistant i have the follow message error:
    INS0003 OWB Repository Installation cannot continue without DBA privileges
    If i connect me to OEM and check the privileges for sys or system user don't have any problem if i connect me as sysdba.
    I created a new user with all privileges and the error is the same.
    How could i fix my problem?
    Thanks for your help.
    Alex.

    This issue is normally caused because you have not setup sys to connect as sysdba per newer database setup procedures, test with connect "/ as sysdba" in sql*plus.
    If you cannot connect from SQLPlus by just the '/ as sysdba' login, then check the Note 50507.1 via Metalink as this describes the different ways you can connect to Oracle as an
    administrative user.
    Hope this helps,
    Keith
    Product Management
    Oracle Warehouse Builder

  • Expdp+Impdp: Does the user have to have DBA privilege?

    Is a "normal" user (=Without DBA privilege) allowed to export and import (with new expdp/impdp) his own schema?
    Is a "normal" user (=Without DBA privilege) allowed to export and import (with new expdp/impdp) other (=not his own) schemas ?
    If he is not allowed: Which GRANT is necessary to be able to perform such expdp/impdp operations?
    Peter
    Edited by: user559463 on Feb 28, 2010 7:49 AM

    Hello,
    Is a "normal" user (=Without DBA privilege) allowed to export and import (with new expdp/impdp) his own schema?Yes, a User can always export its own objects.
    Is a "normal" user (=Without DBA privilege) allowed to export and import (with new expdp/impdp) other (=not his own) schemas ?Yes, if this User has EXP_FULL_DATABASE and IMP_FUL_DATABASE Roles.
    So, you can create a User and GRANT it EXP_FULL_DATABASE and IMP_FULL_DATABASE Roles and, being connected
    to this User, you could export/import any Object from / to any Schemas.
    On databases, on which there're a lot of export/import operations, I always create a special User with these Roles.
    NB: In DataPump you should GRANT also READ, WRITE Privileges on the DIRECTORY (if you use "dump") to the User.
    Else, be accurate on the choice of your words, as previously posted, DBA is a Role not a Privilege which has another meaning.
    Hope this help.
    Best regards,
    Jean-Valentin

  • DBA privileges for BOMM.

    Hi Experts!
    Currently customer want to know the reason why user account with DBA privilege must be needed for BOMM.
    I've read "xir2_mm_users_guide.pdf"
    "Ensure that the new user has permission to create, modify, and delete  tables so that Metadata Manager can modify the database as required.
    For Oracle, the user must have DBA privileges.  "
    Could you please give me a piece of advice or explain?
    Thanks in advance
    Tony (Customer Assurance)

    Hi Dan and All folks,
    I am having challenges collecting all metadata (specially procedures) on a given Oracle Schema.in Production due to DB user Privileges. 
    We have created a DB Account/User having the following Privilege 1. Unlimited Tablespace, Create Session and ANY dictionary" . We are using native connections for our integrator's.
    However, in development region when I change the Privilege to the following: --
    1. SELECT ANY TABLE and
      2. EXECUTE ANY PROCEDURE
    I get metadata for all objects and the counts of objects via SQL matches with the count of distinct objects collected by the BOMM tool for that schema (i.e. Table, Views, Procedures and Synonyms).
    Now the issue is that, the DBA's will obviously NOT allow the db user to have "EXECUTE ANY PROCEDURE" Privilege in Production.
    While we are looking at other alternatives, like writing scripts etc, I am reaching out to you all for any thoughts/help I can get towards this issue. Does anyone have any suggestions on it?
    Thanks
    Prabhash Dubey.

  • OWB DBA Privileges Required

    I have OWB and Oracle 10g Installed on the same computer.
    When I go to create the Repository, logging in as user sys
    I get the following message.
    INS0003: OWB Repository Installation cannot continue
    without DBA privileges. Connect as DBA and use
    option Create a new Warehouse Builder Repository to
    continue the process.
    I can however connect to other databases in our environment and
    the repository installation seems to continue without this error.
    Any Body have any Idea about this error message?

    Good morning Melvin,
    What do you mean, "logging in as user sys"?
    Creating a runtime repository is done using the Runtime Assistant, you don't log on there, you only provide user credentials, for instance for a user with SYSDBA prviliges.
    I assume you've read chapter 2.3 in the Oracle Warehouse Builder Installation and Configuration Guide?
    What are the exact versions of database and OWB and are they certified with each other? Did you apply patches?
    Certain versions don't work well together, check Metalink Note:332371.1
    BTW, there was already a thread regarding a similar issue in this forum, did you check that?
    See oracle datawarehouse builder INS0003, INS0009 .
    Good luck, Patrick

  • Enterprise Manger with Remote DBA Privileges

    Has anyone been able to set up there database, management server, and management console to allow for remote DBA privileges?
    I successfully set up the enterprise manager and repository etc. but I can't get sysdba privelages through the console. I followed the steps in the manual for creating a new password file and restarting my local instance but it didn't work.
    Any advice would be appreciated.
    Running Oracle 8.1.6
    OS Windows 2000 Advanced Server
    thanks
    steve

    Make sure you have granted SYSDBA/SYSOPER to whatever account it is that you are logging in as. Also, make sure that you chg the init param REMOTE_LOGIN_PASSWORDFILE = exclusive. The default is "none" which negates the password file you created and also will not allow you to grant the SYSDBA/SYSOPER roles to any account.

  • Using an NT user with DBA privileges does not permit to create schema : why ?

    Hi,
    I use an Oracle 8 on an Windows NT server.
    I have two NT users with DBA privileges.
    But, when I use the migration workbench to create the oracle schema, my users are not granted.
    Why ?
    Regards.
    Pascal

    Please clarify your problem.
    The workbench creates users (which are visible in the oracle model within the tool) with the password oracle .
    I am not sure if you are asking about accessing the database using your OS user identity, or have you found that the users exist but do not have dba privileges.
    Turloch
    Oracle Migration Workbench Team
    null

  • DBA privileges in SCOM

    I am DBA and new to SCOM. My question is what kinds of privileges that DBAs need to add DB servers, new instances, new DBs and configure alert, dashboard in SCOM?
    Thanks in advanse,
    Sky

    Hi Sky River,
    For the Operations Associated with User Role Profiles please look here:
    http://technet.microsoft.com/en-ca/library/hh872885.aspx
    Here you can find the Security Account Matrix:
    http://blogs.technet.com/b/manageabilityguys/archive/2013/05/03/scom-2012-sp1-security-accounts-matrix.aspx
    SCOM accounts:
    http://technet.microsoft.com/en-ca/library/hh298609.aspx
    Natalya
    ### If my post helped you, please take a moment to Vote as Helpful and\or Mark as an Answer

  • Primavera P6 v6.2.1 apply service pack 3 without dba privilege

    Hi,
    I have a Primavera P6 Project Management v6.2.1 database and admuser has no dba rights. It has only the privileges like connect,resource,select any dictionary,create job only. I tried to apply service pack 3 but it failed since it has no dba rights for admuser.
    Admuser don't have dba rights or create any view, create any synonym privileges also.
    If anyone applied service pack 3 on primavera p6 v 6.2.1 database schema by using manually running scripts. Please update me.
    Regards,
    Gokulnath

    You need to involve your DBA in this. The only supported method of upgrading is going to be to grant admuser the appropriate role/permissions required which you will need Sytem access to do.
    It doesn't make sense to try and circumvent this when it is as simple as "GRANT DBA to admuser", run the SP3 update, and "REVOKE DBA FROM admuser". Additionally you likely need to apply the SP3 client update to all users of that database (not sure exactly what SP3 entails as I have never installed it).

  • Limit Database DBA Privileges in Toad for developers

    Hi,
    I am using Toad 9.7.5 version. I have multiple databases in oracle 9i/10g. Each schema has several users.
    I want to apply security for users at TOAD Menu level.
    What i want is for users other than DBA i want to restrict DBA options which u find in menu(Database). Only user with DBA role can use that menu.
    I have done the same thing by restricting several privileges by creating TOAD user. But it involves a lot of manual work.
    For each user i have to select the privileges that i want to restrict.
    Is there any way that i can implement security at menu level. Please let me know how can i acheive this.
    Thanks in Advance.
    Vamsi Krishna
    Edited by: vamsikrishnagorantla on Jul 14, 2010 9:41 AM

    I want to apply security for users at TOAD Menu levelThen what happens when they use another tool?
    Implement the security in the proper place - the database - and it can be reused consistently, securely & properly.

  • DBA Privileges on Windows Server

    I know this may sound a bit weird to everyone here. I am a Jr. Oracle DBA. At my company both myself and the Sr. DBA DO NOT have administrative access to our One Windows Server that has Oracle 10g running on it.
    The company expects to maintain this database and support it's users.
    My question is........... Is there a way to provide us with the windows services we need access to without granting us Administrative Privledges on this Windows Server?
    Our experience is with UNIX, and on both of our Unix machines we have root access.
    Thank you all for your time.
    Kirk

    This is a political problem. Obviously I can appreciate that as you don't have much (any) Windows expertise then it's perfectly possibl for Windows sysadmins to get hoity-toity. But on a daily basis most DBAs need relatively liitle knowledge of a specific operating system - with performance monitoring at the os level being the obvious exception and even then I would argue about whether that's a daily thing. Ultimately it's largely a question of, "I know how to do this in Unix, how do I do this in Windows?" Frequently the answer is "you can't" or else it requires lots of dialogue boxes to be clicked :(
    Mostly there's not much that can't be solved by the judicious purchase of a Windows DBA book (no testimonial implied)...
    So what is the issue here really? Is the database server being used for other apps also? Is the security set up so poorly that giving you Admin rights on this server would allow to to access other servers? Or is the Windows sysdamin just an awkward SOB?
    Cheers, APC

Maybe you are looking for