General Questions about Oracle Roles/Privileges

Hi,
I have a few questions I'm hoping to get clarification on:
1 - Is there a view similar to DBA_SYS_PRIVS/DBA_TAB_PRIVS that shows which system privileges have been assigned to users/accounts ONLY, filtering out roles? If not, how would one go about obtaining this list?
2 - Is there a view similar to DBA_ROLE_PRIVS that shows also just shows which users have been assigned to which roles ONLY, again filtering out roles? If not, how would one go about obtaining this list? I assume some type of recursion has to be done here to flatten out the roles.
My end goal is this:
- List of all users and directly assigned system privileges only
- List of all users and directly assigned table/object privileges only
- List of all users and all roles (if role X contains role Y, this list should show user has role X and Y)
Many thanks!

1 - Is there a view similar to DBA_SYS_PRIVS/DBA_TAB_PRIVS that shows which system privileges have been assigned to users/accounts ONLY, filtering out roles? If not, how would one go about obtaining this list?
it's simple:
select grantee, privilege from dba_sys_privs where grantee in (select username from dba_users);
select grantee, owner, table_name, privilege from dba_tab_privs where grantee in (select username from dba_users);
2 - Is there a view similar to DBA_ROLE_PRIVS that shows also just shows which users have been assigned to which roles ONLY, again filtering out roles? If not, how would one go about obtaining this list? I assume some type of recursion has to be done here to flatten out the roles.
select grantee, granted_role from dba_role_privs where grantee in (select username from dba_users);
select grantee, granted_role from dba_role_privs where grantee in (select role from dba_roles);Hope this helps...

Similar Messages

  • General question about oracle

    Hi
    I like to learn and oracle subject and make/develop applications with it.
    I have ubuntu desktop version installed but couldn't make the XE version work with it. I gave up on ubuntu.
    Now my question is ; which linux(free) version works great with oracle? Is there an oracle linux?
    thanks

    bcm@bcm-laptop:~$ uname -a
    Linux bcm-laptop 2.6.31-19-generic #56-Ubuntu SMP Thu Jan 28 01:26:53 UTC 2010 i686 GNU/Linux
    bcm@bcm-laptop:~$ sqlplus
    SQL*Plus: Release 10.2.0.1.0 - Production on Fri Feb 19 17:11:35 2010
    Copyright (c) 1982, 2005, Oracle.  All rights reserved.
    Enter user-name: / as sysdba
    Connected to:
    Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
    With the Partitioning, OLAP and Data Mining optionsPlease NOTE what uname -a above returned.
    BTW - I have it also running in a 64-bit Ubuntu server configuration.

  • A question about Oracle 1g R2 Enterprise Edition license

    Dear all,
    I have a question about Oracle license and I would appreciate if you could kindly help me.
    I have installed an Oracle server (11g R2 Enterprise edition) on a linux virtual machine. The pc used for this purpose
    is my enterprise laptop (therefore a professional and not a personal Computer). However, I use the this Oracle Server
    only for learning purpose, that is, only for running the examples in my Oracle Press books (SQL, PL/SQL and some
    administration tasks) just for learning the stuff.
    There is absolutely no data related to my enterprise, stored or used on this server. Whenever I want to work with my
    enterprise data, I use the Oracle server of the enterprise which has of course the appropriate license. So as I said, I
    use this Enterprise server on the virtual machine only for running queries/programs in my Oracle Press books just for
    learning and I'm the sole person who uses this server (no remote connection for other users).
    The reason for which I needed to install this server on my PC was that our DBA couldn't provide a training environment
    for me with all required privileges and functionalities.
    Am I supposed to buy a license for this installed Enterprise server on my virtual machine?
    Thanks in advance,
    Dariyoosh

    drop.any wrote:
    From OTN license agreement:
    >
    LICENSE RIGHTS
    We grant you a nonexclusive, nontransferable limited license to use the programs only for the purpose of developing, testing, prototyping and demonstrating your application, and not for any other purpose. If you use the application you develop under this license for any internal data processing or for any commercial or production purposes, or you want to use the programs for any purpose other than as permitted under this agreement, you must obtain a production release version of the program by contacting us or an Oracle reseller to obtain the appropriate license. You acknowledge that we may not produce a production release version of the program and any development efforts undertaken by you are at your own risk. We may audit your use of the programs. Program documentation, if available, may accessed online at http://otn.oracle.com/docs.
    Ownership and Restrictions We retain all ownership and intellectual property rights in the programs. The programs may be installed on one computer only, and used by one person in the operating environment identified by us. You may make one copy of the programs for backup purposes.
    You may not:
    - use the programs for your own internal data processing or for any commercial or production purposes, or use the programs for any purpose except the development of your application;
    - use the application you develop with the programs for any internal data processing or commercial or production purposes without securing an appropriate license from us;
    - continue to develop your application after you have used it for any internal data processing, commercial or production purpose without securing an appropriate license from us, or an Oracle reseller;
    - remove or modify any program markings or any notice of our proprietary rights;
    - make the programs available in any manner to any third party;
    - use the programs to provide third party training;
    - assign this agreement or give or transfer the programs or an interest in them to another individual or entity; - cause or permit reverse engineering (unless required by law for interoperability), disassembly or decompilation of the programs;
    - disclose results of any program benchmark tests without our prior consent.
    >Hello again,
    Thank you both of you for your help. As it seems to me
    >
    We grant you a nonexclusive, nontransferable limited license to use the programs only for the purpose of developing, testing, prototyping and demonstrating your application, and not for any other purpose.
    >
    I think self training can be considered in this category, therefore I think there is no need to buy a license for that.
    Kind regards,
    Dariyoosh

  • General question about iTunes Match and multiple libraries

    Hello to everyone,
    I have a general question about the iTunes Match service, which is available since yesterday in my country (Italy). Currently my library situation is the following:
    Computer A (desktop, Windows 7): "big" iTunes library (about 20 GB), at the moment not associated with my Apple ID
    Computer B (MacBook Air 2011): "small" iTunes library (about 5 GB), associated with my Apple ID
    At the moment, both my iOS devices (iPhone 4 and iPad 2) are synchronized with the smaller library on the MacBook Air.
    Question is as follows: should I subscribe to iTunes Match, would it be possible to upload the "big" library (provided I associate it with my Apple ID) to iCloud while keeping my devices synchronized with the "small" one?
    Ideally, at the end of the day, the situation should be the following: both iOS devices with music from the small library + possibility of downloading songs from iCloud (coming from the big one). Is this possible?
    Maybe the question sounds stupid, but I want to be sure about this before paying for the service.
    Thanks a lot.

    Yes, you could also associate your larger library with iTunes match if you associated your Apple ID with it. However any purchases in the library made from another Apple ID will not be matched with iTunes much.
    If both libraries are part of iTunes match, then all your devices will see all of the content from both libraries, which content you choose to have on those devices and which you have accessible via iTunes match is entirely up to you.

  • Newbie question - general question about e-mail sync

    Hi,
    I have a general question about email sync and BlackBerry smartphones.  Are there any devices that allow email syncing with a Microsoft Exchange 2007 system that do not require the BlackBerry Enterprise server?
    Thanks; sorry if this has been asked before but I was unable to find it in the forums, documentation, etc.  Everything I found assumes that for this kind of environment you will be using a BlackBerry Enterprise solution, but I can't assume.
    Thanks again.
    Solved!
    Go to Solution.

    Hi and Welcome to the Forums!
    If the Exchange server has anything that faces the internet (OWA, POP, IMAP), then BIS can be used to handle email (only email...calendar and contacts require BES to sync OTA).
    Or, a PC, inside the network (but with an internet path) and logged into the email server (using Outlook), can be left running, using the RIM Desktop Software's Desktop Redirector capability to forward  messages to the BB.
    Those are basically the options.
    Hope that helps! Let us know!
    Occam's Razor nearly always applies when troubleshooting technology issues!
    If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
    Join our BBM Channels
    BSCF General Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • General Question about SAP Documentation. Where to find?

    Hello,
    I am relatively new in the SAP business and so I have some general questions about the SAP Documentation.
    Often internet-links like
    http://help.sap.com/printdocu/core/Print46c/en/data/pdf/FIBP/FI-AP-AP-PT.pdf
    are posted here by group members.
    But where do these group members find these documents?
    All I can see at help.sap.com is IDES (the model company created by SAP)and the WWW-version of the SAP-Bibliothek.
    Were can I find these PDF-Files?
    I would appreciate any hint and tip!
    Thank you!
    Kakue

    thats true! i dont know how to find either. Everytime i need something i ask on the forum.
    Here's a good link
    http://www.easymarketplace.de/online-pdfs.php
    Plz reward points if helpfull

  • Several questions about oracle ASM in 11gR2.

    Hi, all.
    The db is 11.2.0.3 on a linux machine.
    I have several questions about oracle ASM functionality.
    1. V$ASM_DISKGROUP.ALLOCATION_UNIT_SIZE is the stripe size in bytes??
    2. V$ASM_DISK.DISK_NUMBER is unique to a physical disk??
    3. if the second question is the case,
    disk_number=0 (a physical disk) has 14 partition on it.
    And each partition belongs to several diskgroups.
    Is ths right??
    with q1 as (
         select /*+ use_hash(b,a) */
              disk_number,b.group_number,b.name,a.path,sum(os_mb) tot_size ,count(*) cnt
         from v$asm_disk a, v$asm_diskgroup b
         where a.group_number=b.group_number
         group by disk_number,b.group_number,b.name,a.path
         order by disk_number,b.group_number,b.name
    select disk_number,group_number,name,path,tot_size,
           sum(tot_size) over (partition by disk_number) disk_size,
           sum(cnt) over (partition by disk_number) parition_cnt_per_disk
      from q1
      order by q1.disk_number,group_number
    DISK_NUMBER     GROUP_NUMBER     NAME     PATH     TOT_SIZE     DISK_SIZE     PARITION_CNT_PER_DISK
    0     1     ARCH     /dev/raw/raw100     53256     454460     14
    0     2     AAAREDO1     /dev/raw/raw111     10240     454460     14
    0     3     AAAREDO2     /dev/raw/raw113     10240     454460     14
    0     4     CRS     /dev/raw/raw83     3000     454460     14
    0     5     BBBDATA1     /dev/raw/raw10     50232     454460     14
    0     6     BBBDATA2     /dev/raw/raw41     50232     454460     14
    0     7     BBBREDO1     /dev/raw/raw1     10240     454460     14
    0     8     BBBREDO2     /dev/raw/raw3     10240     454460     14
    0     9     CCCDATA1     /dev/raw/raw75     76400     454460     14
    0     10     CCCDATA2     /dev/raw/raw165     51300     454460     14
    0     11     CCCREDO1     /dev/raw/raw118     10240     454460     14
    0     12     CCCREDO2     /dev/raw/raw120     10240     454460     14
    0     13     CCCDATA1     /dev/raw/raw125     51300     454460     14
    0     14     BBBDDATA     /dev/raw/raw71     57300     454460     14
    .Thanks in advance..
    Best Regards.
    Edited by: 869578 on 2012. 12. 23 오후 10:05

    1. No. The stripe size always equals 128 KB in any configuration.
    (http://docs.oracle.com/cd/E11882_01/server.112/e18951/asmcon.htm#BABCGDBF)That is not a true statement. Please read the document, the stripe size depends upon what method of striping we using (fine-grained or coarse-grained)
    --from the same oracle document:
    To stripe data, Oracle ASM separates files into stripes and spreads data evenly across all of the disks in a disk group. The fine-grained stripe size always equals 128 KB in any configuration; this provides lower I/O latency for small I/O operations. The coarse-grained stripe size is always equal to the AU size (not the data extent size).
    --are we using fine grained or coarse-grained ? and how to change the striping method (using TEMPLATES)
    http://docs.oracle.com/cd/E11882_01/server.112/e16102/asmfiles.htm#g2223792
    also see following:
    http://oracletechlovers.blogspot.com/2012/06/asm-differences-between-corse-and-fine.html

  • Few questions about Oracle Times ten

    Moved to Few questions about Oracle Timesten
    Edited by: ankurk on Nov 4, 2010 6:50 PM
    Moved to right place... timesten

    Hi,
    it is better to ask in the [url http://forums.oracle.com/forums/forum.jspa?forumID=244] Times Ten Forum.
    Herald ten Dam
    http://htendam.wordpress.com

  • General questions about using webservices and xml as opposed to an oracle driver

    Dear Experts; I have a general question which I have yet to test. Is it faster to use an ODBC driver to connect and retrieve data from an Oracle database than creating a .net webservices and using an XML to get the data for your web application. THank you

    At some point in the architecture stack some component will need to access the database in order to get the information from the database. That component will need to use an Oracle client driver.

  • A question about CA Role Seperation

    Hello
    Can someone please help me with the following question regarding CA Role Separation (thanks in advance)
    I understand by default the 'Local Administrator' or 'Local Administrators Group' have certain high privileges on the CA itself.
    I understand enabling 'Role Separation' stops a security principle (e.g. user) being a member of more than one of the pre-defined CA Role Based Administration roles. For example if Role Separation is enabled you cannot have both Audit
    and Backup rights.
    If the above is correct, when you enable Role Separation does this also take away the default privileges the Local Administrator (and members of the Local Administrators Group) have on the CA?
    Or
    Does Role Separation simple stop the Local Administrator (or members of the Local Administrators Group) being assigned more than one of the CA Role Based roles (as above) but thereby still allow high privileges to the CA in any event.
    The reason I ask is by default I believe Domain Admins group is automatically made a members of the Local Administrators Group on Domain Joined computers (and thereby the CA Server).
    I do not want Domain Admins or Enterprise Admins having Rights to the CA (e.g. be able to perform CA tasks).
    Therefore do I need to perform 'extra' tasks over and about enabling Role Separation (e.g. restricting membership of the local administrators group) to achieve the security I want?
    Thanks All
    AAnotherUser__
    AAnotherUser__

    Hi,
    Based on your description, you don’t want Domain Admins or Enterprise Admins having rights to the CA, which cannot be achieved.
    That’s because members of local administrators group on a CA can disable role separation. Even if we remove the Domain Admins group from the local administrators group, Domain Admins still can add them back through Restricted Groups group policy.
    Here are some references below for you:
    Role Separation
    http://technet.microsoft.com/en-us/library/cc773161(v=WS.10).aspx
    Restricted Groups Policy Settings
    http://technet.microsoft.com/en-us/library/cc756802(v=WS.10).aspx
    Best Regards,
    Amy

  • Basic Questions about Oracle E-Business Suite

    I am just now starting to learn about Oracle E-Business Suite.
    I am an Oracle DBA, and I want to become an "Oracle Apps DBA".
    The following questions pertain to the DATABASE side of E-Business:
    *(1)* Is "Oracle E-Business Suite", and "Oracle Applications 11i" the
    same product?
    *(2)* Is Release 12, the current version of E-Business Suite?
    *(3)* What is the Release of E-Business Suite that most Businesses are
    currently using?
    *(4)* I want to use 1GB of RAM, for the Laptop, that I want to install
    E-Business Suite on, and it will be running under Oracle
    Enterprise Linux -- Will this type of setup be OK for building a
    personal training and learning environment (especially RAM size)?
    *(5)* How much disk space do I need, just to do a basic install (no
    demo databases)?

    Hi,
    *(1)* Is "Oracle E-Business Suite", and "Oracle Applications 11i" the
    same product?Yes, it even includes R12.
    *(2)* Is Release 12, the current version of E-Business Suite?Yes, the most recent versions of R12 are (12.1.1 and 12.1.2).
    *(3)* What is the Release of E-Business Suite that most Businesses are
    currently using?Depends, some customer still on 11i while other customer managed to upgrade to R12 (or did a fresh installation/implementation of R12).
    *(4)* I want to use 1GB of RAM, for the Laptop, that I want to install
    E-Business Suite on, and it will be running under Oracle
    Enterprise Linux -- Will this type of setup be OK for building a
    personal training and learning environment (especially RAM size)?1 GB RAM is not enough, I would suggest you have 4 GB RAM (or more if possible).
    *(5)* How much disk space do I need, just to do a basic install (no
    demo databases)?This is documented in the installation manual, please refer to it to get the hardware requirements.
    Oracle Applications Installation Guide: Using Rapid Install
    http://download.oracle.com/docs/cd/B53825_03/current/acrobat/121oaig.pdf
    Regards,
    Hussein

  • General Questions about BI

    Hello,
    I want to get into SAP BI and have some questions about it.
    Is there a big downside in installing only the BI components without the Java BI components, or is it even possible if you want to work with BI. What are the general differences between BI and Java BI?
    I think the main aspects i will work with will be data warehousing and some basic reporting.
    The reason why i'm asking is that i want to run the BI components in the same system as the ECC Server (its just a test system). I read that the Java BI component needs EPC and EP and that would probably be too much for a single system (6 GB RAM).
    Thanks a lot in advance,
    Martin

    Thanks for your hints, they were really helpful.
    As i mentioned i mainly want to work with the general Data Warehouse and Reporting capabilities, so i think it should be okay.
    Actually i'm planing to write about BI and SAP within my master thesis.
    Another question, what will be with SAP BI in the future regarding the Business Object acquisition? Is there still any point in learning SAP BI or will SAP BI disapear in the future? I heard that the basic BI functionality (e.g. Datawarehouse ) will still be used but the reporting capabilities  would be disappear. I'm not sure if that is right and i'm really new to this topic. So any comments are welcome.
    Thanks,
    Martin

  • Asking general questions about 'computing' matters.

    Hello
    I'm new to the Mac world - I posted my first question on the forums today!
    I have reviewed the discussions site - everything seems very specific to apple products. Where, if anywhere, could I post a general question - like this one:-
    I have a notion that when one connects to a server directly (Usenet newsgroups for example) one makes a deliberate 'hole' in one's firewall, be it software or simply because one is using a NAT router. Sending messages to and receiving posts from Usenet is far quicker than using email, so I'm fairly confident that this is so.
    I am well aware that any URL one visits can instantly determine much information about the connecting machine. (see http://www.browserreport.com/ as an example).
    Anti-malware programs can only detect known viruses and spyware - I see no reason at all why, once one has granted a direct connection facility, between a group on a private server to
    one's own machine, malware could not relatively simply be injected onto one's computer.
    If the malware was currently unknown, how would one ever know?
    Thanks in anticipation of a helpful response
    David B

    HunterBD wrote:
    I'm new to the Mac world - I posted my first question on the forums today!
    Excellent!
    I have reviewed the discussions site - everything seems very specific to apple products. Where, if anywhere, could I post a general question - like this one:-
    Unfortunately, not in this forum. This forum is specifically about the discussion forum itself. It is kind of like a meta-forum. Hopefully, the moderators will just move your post somewhere more appropriate. (As indeed they just did!)
    I have a notion that when one connects to a server directly (Usenet newsgroups for example) one makes a deliberate 'hole' in one's firewall, be it software or simply because one is using a NAT router.
    Kind of and kind of not. Firewalls are greatly misunderstood. But essentially, yes, any internet connection you establish has some risk involved. However, the risk of making an outgoing connection is infinitesimally smaller than setting up a server to let hackers bang on 24x7.
    Sending messages to and receiving posts from Usenet is far quicker than using email, so I'm fairly confident that this is so.
    Really? I don't think so.
    I am well aware that any URL one visits can instantly determine much information about the connecting machine. (see http://www.browserreport.com/ as an example).
    Not really. It depends on what you are doing. You always give away your IP address, unless you are behind a proxy. In that case, you give away the proxy's IP address. But the proxy still knows who you really are.
    If the protocol in question supports such information, then it can be determined. A web browser does send some information about you, but you can easily change it and masquerade as some other browser. With other protocols, it isn't so easy to tell what kind of OS or software is being used.
    Anti-malware programs can only detect known viruses and spyware - I see no reason at all why, once one has granted a direct connection facility, between a group on a private server to
    one's own machine, malware could not relatively simply be injected onto one's computer.
    If the malware was currently unknown, how would one ever know?
    You wouldn't
    Don't grant anyone direct connection to your machine.

  • General question about Mountain Lion

    I've kept clear of Lion on both my MACS because of all the "bad press" it got, I'm still running Snow Leopard on my MACS and I've never had a day of problems with either. Also I run Logic Studios on both my MACS and didn't want to chance having issues with interface compatability, lack of drivers and such. My question is kind of simple and for better or worse comes down to opinion, what is the general feeling about Mountain Lion? Is it a big improvement over Lion? Is it more stable with less bugs? Any issues running Logic? I'm "playing with the idea" of upgrading but I want to do my research first. If Mountain Lion is not a big improvement over Lion or if people are having issues with running Logic I'm going to stick with SL.
    Thanks for your opinions in advance.

    Be cautious about listening too much to replies you're likely to get. These sort of questions in a place like this are like magnets to people who are having problems and want to complain about it. You're likely to hear some horror stories that don't represent the majority of cases.
    ML has been excellent so far for me, faster than Lion and no serious bugs I've discovered so far. But if you upgrade, be sure to do your homework: backup, check compatibility of all your software (including things like printer drivers) and repair the hard drive with Disk Utility before installing.

  • Where to direct a general questions about foreign films subtitles?

    I recently purchased a foreign film "Break Ke Badd" from the iTunes store. Although, it didn't specify that it had English subtitles, I assumed it did. After the full download, I tried to watch it and there weren't any English subs. I contacted iTunes and they more than happy to refund the money back to my account. Now after a few weeks, the iTunes store DOES list Eng subs for this film. I don't want to purchase it again and have to contact iTunes for another refund...Therefore my question is, is there a general question contact one could use to find an answer to my question. Basically, to verify that this movie, indeed has English subs before I re-purchase. 
    Any info is appreciated!

    Yes I know as the [https://support.mozilla.org/en-US/questions/ Questions] section is more for desktop Firefox support and the place I linked to is for "Firefox OS" support in English where some who are involved with it do post in it occasionally.
    I would have moved that [https://support.mozilla.org/en-US/questions/962783 thread] to the "Firefox OS" English section, however I cannot as the [https://support.mozilla.org//questions/ Questions] and [https://support.mozilla.org/forums Contributor Forums] are not the same.

Maybe you are looking for