DBA rights

Hi All
i want to give the right of DBA to user but that user not able to change password of system
and sys
how it is possible.
Regards

This is named the minimum privilege princliple, i.e. just grant what the user really needs.
You should not provide the user with the ALTER USER privilege, otherwise this user will be able to change not only sys or system password, but any other property from any other user. Don't grant the DBA role, as this includes the ALTER USER privilege, you should rather make an inventory of the specific administrative tasks the user should be able to perform and compose a role of your own with partial administrative privileges, such as privileges related to space and storage administration, privileges to create special objects, etc, you should check exactly what you need.
~ Madrid

Similar Messages

User with dba rights

hi
I want to know the detail of all the users having dba rights.
their username and password .
what to do.
thanks

Please use this but u cannot see password becuaseits
usally encrypted.To be more precise: it is not usually
encrypted, it's always encrypted. And in
recent versions the dict. column is not even
populated at all.To be even more precise ;) it is hashed not encrypted
Message was edited by:
JS1

Who locked my table (don't have dba rights)

Hi Gurus,
I am facing locking issue.
A job is running since last 06 hours and i am not getting any output. This job normally takes 01 hr or Maximum 01:30 (hrs: min).
I do not have sharp DBA skills.
Can someone let me know how to know either my table is locked by some other job/user?
Please remember, i don't have DBA/sysdba rights. I can see only in my schema.
Appreciate prompt replies.
Thankyou.

How do you know that you are waiting on a lock and that the CBO has just not chosen a really bad plan for this specific execution of the query?
Ask the DBA to set up a role that has select privilege on v$session, v$process, v$lock, v$sql_text, and v$sql_plan and to grant that role to you (and probably all the developers).
Column v$session.lockwait will show if you session is waiting.
And you can view the actual plan for your session via v$sql_plan. This plan may vary from what explain plan shows if bind variable peeking or another Oracle run time tuning feature like SQL Profiles is in use.
HTH -- Mark D Powell --

Oracle 9i. DBA rights.?

In oracle 9i. How do I give all the rights to a user.I mean how do I give all privileges to a user. I have all the rights. That is system rights. Now how do I create a user with all the privileges. For practice purpose.

grant dba to <username>;
To have them get all rights available to them at login:
alter user <username> default role all;

Primavera P6 v6.2.1 apply service pack 3 without dba privilege

Hi,
I have a Primavera P6 Project Management v6.2.1 database and admuser has no dba rights. It has only the privileges like connect,resource,select any dictionary,create job only. I tried to apply service pack 3 but it failed since it has no dba rights for admuser.
Admuser don't have dba rights or create any view, create any synonym privileges also.
If anyone applied service pack 3 on primavera p6 v 6.2.1 database schema by using manually running scripts. Please update me.
Regards,
Gokulnath

You need to involve your DBA in this. The only supported method of upgrading is going to be to grant admuser the appropriate role/permissions required which you will need Sytem access to do.
It doesn't make sense to try and circumvent this when it is as simple as "GRANT DBA to admuser", run the SP3 update, and "REVOKE DBA FROM admuser". Additionally you likely need to apply the SP3 client update to all users of that database (not sure exactly what SP3 entails as I have never installed it).

One connection user with full rights for a bunch of schemas

How can I give all rights of one user to another without declaring each object privilege one by one? For my application I would like to devide the data to maintain into four different schemas to. Never the less I would like to connect to the db by one account and have full access to all of the four schemas. My client denies to give the connect user DBA rights. The connection user is not allowed to have "ANY" grants, either. But my application often creates tables, views etc. and drops it when they aren't usefull any more. So it is nearly impossible to manage the grants on each db object one by one. So, how can I give a user all rights for a bunch of others?

My program uses logical "firms" to allow separation of clients client data. Sounds like Row Level Security - or even Views - would be saving you some grief here.
The most dynamic created tables are used to optimize performance for (sub-)queries builded at runtime by the user. Do you really have benchmarks to prove that building tables through dynamic execution of DDL results in faster response times than plain queries? Are the query structures some various that temporary tables won't do?
Cheers, APC

Database rights management

Hi all,
i have six databases and all are production Databases.At present all user connect to the DB's as DBA as we have a user 'SMSA' with DBA rights. I want that there must be a single user who have DBA privilege and no other user can connect as a DBA. U will answer that just change password of SMSA , but i can'nt do that as all my user are used to user SMSA and all the applications are dependent on it (all the applications make connection with their respective databases using SMSA user).
Now my question is wat should be my approach so that i can make a single user which should connect as DBA and all other users should possess limited privileges.
My second question is can i restrict a user from dropping table in their schema.if yes then wats the way out.
plz reply soon.

If a user has an account on the database, they can use whatever application they would like to log in. The rule of thumb is that if you are concerned about users logging in with a GUI, that means that you have granted them too many privileges and need to restrict the privileges you've granted them.
You can create login triggers that use various attributes in v$session to attempt to deny users the ability to log in with different applications, but those are rather easily circumvented since all of those attributes are being passed in by the client machine.
You can limit the set of machines that are able to log on to the production database via SQL*Net, but that is generally not acceptable in the real world because of legacy client/ server applications and/or business users that need to run reports.
Justin

Assigning DBA previleges to a user

Hi to all DB experts..
Can any tell me how to assign DBA privileges to a user so that he can shutdown,
startup database..
he should have previleges as sysdba..
Thank you
kiran kumar

your suggestion was useful ammey..
it is a good website.
however i have done is
i created a normal user say abc and granted him the dba rights...
while i am logging in as abc user i am just typing
conn abc as sysdba
now the user is able to shutdown the DB..
Note : i must tell when i am doing this..though i login as abc user , using the
pharse 'as sysdba' when i type show user it would show "sys" as current user..
that mean the user is redirected to 'sys'.
any suggestions from you.
thank you.
kiran kumar

Report Job was cancelled upon user request???

Hi,
My reports take more than 10 minutes to complete, most times I get
"Report Job was cancelled upon user request".
error, how to fix this problem? Is there any time limit inside the report I can set.
Thanks

hi ,
There is no limit on the report run time. The most probable reason why you are getting the 'Report cancelled upon user request' message is the users might have hit the "cancel Report" button which is displayed when it is running in 'SYNCHRONOUS MODE'. do not hit that button as it will terminate the report. to increase the speed of returning the results by the report, try improving the sql that you use in the report, or if you have DBA rights try adding in INDEXES on the columns of the tables used by the report.
Hope this helps
Manoj

Creation of Database link and access the same plus Snapshot creation

i want talk between two oracle server. i decided to go for snapshot creation with periodical refresh. For which i am having two oracle server's with different ip address located inside our office setup.
I have created a database link between two servers.
first server name global
userid scott
password tiger
second server name asil
userid scott
password tiger
both the user have been given dba rights.
in both the server the services and listners are all started. i gave the following command to create database link.
from asil server
create public database link global connect by scott identified by tiger using 'global'
the command was successful and the link was created. Now i tried to access a table of the scott user of the global server.
select * from emp@global;
now it is giving error. I want to know how the link can be created and how it can be accessed. i refered the 8i online documentation and done the things based on that. i expect valuble solution from all possible persons
null

A reason for this problem could be that your database is configured that a database link has to have exactly the same name like the global name of the database instance it should connect to.
Can you please provide the oracle error code / message ? With this information there might be more hints I can give you.

Upgrading Application Express on Oracle XE (installed on Ubuntu 8.04)

I'd installed on my laptop (OP is Ubuntu 8.04) Oracle XE and is wotking quite fine.
But I really like to upgrade apex to last version (3.1.2). I read documentation but are not many information about how to upgrade.
Daniel

Thanks Arie,
On whatever version of Windows I've updated without problems Application Express.
I'm talking here about Ubuntu (a debian distribution of Linux).
My problem is where to unzip apex, where to use sqlplus command prompt etc., because is different than Windows.
If you don't have DBA rights on the account (user account other than root) you have errors in installation process and more.
For example they say in doc...:0
"To run the apxconf.sql configuration script:
1. Change your working directory to ORACLE_BASE\ORACLE_HOME\apex or whatever convention used to indicate the Oracle home.
2. Start SQL*Plus and connect to the database where Oracle Application Express is installed as SYS. For example:
* On Windows:
SYSTEM_DRIVE:\ sqlplus /nolog
SQL> CONNECT SYS as SYSDBA
Enter password: SYS_password
* On UNIX and Linux:
$ sqlplus /nolog
SQL> CONNECT SYS as SYSDBA
Enter password: SYS_password".....
When you install Oracle what version you need, OP (Linux) create a different user account for Oracle. Usually if you want to use your account like dba for oracle, you need to give to that account the proper rights.
So, I need a installation rutine (for upgrading) for apex on Linux.

Oracle Reports Server CGI - Report Job was cancelled upon user request.

I am running reports on the web through Forms using Run_Report_Object built in. I am using Oracle 9iAS Enterprise Edition Release 1(1.2.2.2.2), Forms 6i Patch 9 (6.0.8.18.3) and Reports 6i Patch 9 (6.0.8.18) using CGI implementation. Most reports are running fine, but I have one that produces 125 pages and we are getting the following messages in the browser:
Error: The requested URL was not found, or cannot be served at this time.
Oracle Reports Server CGI - Report Job was cancelled upon user request.
However if you look at the Reports Server Queue Status thru the browser it shows that the report did finish, but it took 16 minutes. But the user gets the above message in their browser window.
Is there a way to get the first page of the report to display, while the rest of the report finishes, so the browser window doesn't timeout and display the above error?
Any help would be greatly appreciated.

hi ,
There is no limit on the report run time. The most probable reason why you are getting the 'Report cancelled upon user request' message is the users might have hit the "cancel Report" button which is displayed when it is running in 'SYNCHRONOUS MODE'. do not hit that button as it will terminate the report. to increase the speed of returning the results by the report, try improving the sql that you use in the report, or if you have DBA rights try adding in INDEXES on the columns of the tables used by the report.
Hope this helps
Manoj

Database Link Creation and Acessing

i want to talk between two oracle server. i decided to go for snapshot creation with periodical refresh. For which i am having two oracle server's with different ip address located inside our office setup.
I have created a database link between two servers.
first server name global
userid scott
password tiger
second server name asil
userid scott
password tiger
both the user have been given dba rights.
in both the server the services and listners are all started. i gave the following command to create database link.
from asil server
create public database link global connect by scott identified by tiger using 'global'
the command was successful and the link was created. Now i tried to access a table of the scott user of the global server.
select * from emp@global;
now it is giving error. I want to know how the link can be created and how it can be accessed. i refered the 8i online documentation and done the things based on that. i expect valuble solution from all possible persons
null

See link http://kr.forums.oracle.com/forums/thread.jspa?threadID=221081
Hope this helps solve your issue.
thanks
http://swervedba.wordpress.com/

SAP ECC 6.0 on Oracle 10G

Hi,
My company is using SAP ECC6.0 installed with a Oracle 10G database. On the Oracle database, there are SYS and SYSTEM default system user IDs which have privileged access rights on the database. However, I am not sure if the user IDs are able to perform direct database level changes (e.g. change a value in a SAP table containing employee payroll information) on the oracle database as I was posted this question by the auditor. They have asked me to secure the IDs properly but to my knowledge, these IDs can only perform administrative database level configurations and not direct data level changes.
Can someone shed some light on this?
Thanks!

Hello,
The SYS and SYSTEM users exist in all Oracle databases and both have full DBA rights. This means they will be able to change anything in the database, including data in tables in the SAP schema. These users must be properly protected by passwords, and access to tools allowing anyone to log on with these IDs (e.g. terminal server access to the database server, which would enable users to access SQLPLUS) must be restricted. You should refrain however from lowering the privileges of either user. As far as I can see this might perhaps be feasible for the SYSTEM user, alhough I have never seen a database where this is done, but it is certainly not allowed for SYS.
Regards,
Mark

Snapshot creation

i want talk between two oracle server. i decided to go for snapshot creation with periodical refresh. For which i am having two oracle server's with different ip address located inside our office setup.
I have created a database link between two servers.
first server name global
userid scott
password tiger
second server name asil
userid scott
password tiger
both the user have been given dba rights.
in both the server the services and listners are all started. i gave the following command to create database link.
from asil server
create public database link global connect by scott identified by tiger using 'global'
the command was successful and the link was created. Now i tried to access a table of the scott user of the global server.
select * from emp@global;
now it is giving error. I want to know how the link can be created and how it can be accessed. i refered the 8i online documentation and done the things based on that. i expect valuble solution from all possible persons
null

CREATE SNAPSHOT [schema.]snapshot
[ [PCTFREE integer] [PCTUSED integer]
[INITRANS integer] [MAXTRANS integer]
[TABLESPACE tablespace]
[STORAGE storage_clause]
[ USING INDEX [ PCTFREE integer | TABLESPACE tablespace
| INITTRANS integer | MAXTRANS integer
| STORAGE storage_clause ] ...
| [CLUSTER cluster (column [, column]...)] ]
[ REFRESH [FAST | COMPLETE | FORCE] [START WITH date] [NEXT date]]
AS subquery
According to documentation create should look like this
CREATE SNAPSHOT test.check tablespace tablespace_name REFRESH FAST START WITH SYSDATE NEXT trunc(SYSDATE + 1) + 2.5/24 WITH ROWID AS SELECT * FROM wpol.test.check@PROD;

DBA rights

Similar Messages

Maybe you are looking for