User Permission for RMAN Backups

Oracle 10g Database Enterprise Edition R 10.2
I have created a user admin and i want to run backups from admin user. Kindly let me know what user permissions i have to grant for rman successful backups?
Thanks!

The rman "client" executable must connect to the Database AS SYSDBA.
Therefore, technically it doesn't require a separate user account in the target database, although you could setup a user, grant SYSDBA to the user and have remote_login_passwordfile configured to allow connections.
Hemant K Chitale
http://hemantoracledba.blogspot.com

Similar Messages

  • Choice a remote drive for RMAN backup

    I want to use my AIX (OS 5.3L) as a remote server for RMAN backup, under the 10g R2. The two most likely drives that still has lots space are hdisk1 and hdisk3. However, the hdisk1 is in rootvg with my test Oracle 10g appl on. Although the hdisk3 is in appvg and but it is the data storage for oracle of local machine. Both drives are quite busy based on the memory monitor and iostat. so How to make a choice for which drive is more proper as a remote drive?

    As i play more with the NFS on AIX, i noticed more about the user/group attributes of the files and directory. Mainly, they are different on either side, even more strangely that the new file created on the server side has different user/group attribute , not as oracle/oinstall of original (client side) It worries me whether there will be problem when RMAN does the recovery later.
    Secondly, the NFS only allows to write into one level of the directory, which is assigned NSF. As I know, the whole RMAN backup creates backupset files at several levels down from my flash_recovery_area.
    Message was edited by:
    user508054

  • WHAT IS BEST STRATEGY FOR RMAN BACKUP CONFIGURATION

    Hi all,
    my database size is 50GB I want TAKe WEEKLY FULL BACKUP AND INCREMENTAL BACKUP
    WITHOUT RECOVERY CATALOG.by follwing commands
    weekly full database backup
    run
    backup as compressed backupset
    incremental level=0
    device type disk
    tag "weekly_database"
    format '/sw/weekly_database_%d_t%t_c%c_s%s_p%p'
    database;
    I want do CONFIGURE RMAN BY FOLLWING stragtegy
    CONFIGURE RETENTION POLICY TO REDUNDANCY window of 14 days.
    CONFIGURE BACKUP OPTIMIZATION OFF;
    CONFIGURE CONTROLFILE AUTOBACKUP ON;
    CONFIGURE CONTROLFILE AUTOBACKUP FORMAT FOR DEVICE TYPE DISK TO
    '\SW\AUTOCFILE_'%F';
    and other is by default
    sql>alter system set control_file_record_keep_time=15 days;
    os--aix6 and for two database 10g2 and 11g2
    what is best configuration strategy for rman backup.AND BACKUP WITH RECOVERY CATALOG OR WITHOUT RECOVERY CATALOG
    PLEASE TELL ME
    Edited by: afzal on Feb 26, 2011 1:45 AM

    For simply two databases, there really wouldn't be a need for a recovery catalog. You can still restore/recover without a controlfile and without a recovery catalog.
    From this:
    afzal wrote:
    CONFIGURE RETENTION POLICY TO REDUNDANCY window of 14 days.I am assuming you want to keep two weeks worth of backups, therefore these:
    alter system set control_file_record_keep_time=15 days;
    CONFIGURE RETENTION POLICY TO REDUNDANCY window of 14 daysShould be:
    RMAN> sql 'alter system set control_file_record_keep_time=22';
    RMAN> CONFIGURE RETENTION POLICY TO RECOVERY WINDOW OF 14;22 would give you that extra layer of protection for instances when a problem occurs with a backup and you want to ensure that data doesn't get aged out.

  • Best pratices for RMAN backup management for many databases

    Dear all,
    We have many 10g databases (>40) hosted on multiple Windows servers which are backup up using RMAN.
    A year ago, all backup's were implemented through Windows Scheduled Tasks using some batch files.
    We have been busy (re)implementing / migrating such backup in Grid Control.
    I personally prefer to maintain the backup management in Grid Control, but a colleague wants now to go back to the batch files.
    What i am looking for here, are advices in the management of RMAN backup for multiple databases: do you guys use Grid Control or any third-party backup management tool or even got your home-made solution?
    One of the discussion topic is the work involved in case that the central backup location changes.
    Well... any real-life advices on best practices / strategies for RMAN backup management for many databases will be appreciated!
    Thanks,
    Thierry

    Hi Thierry,
    Thierry H. wrote:
    Thanks for your reaction.
    So, i understand that Grid Control is for you not used to manage the backups, and as a consequence, you also have no 'direct' overview of the job schedules.
    One of my concern is also to avoid that too many backups are started at the same time to avoid network / storage overload. Such overview is availble in Grid Control's Jobs screen.
    And, based on your strategy, do you recreate a 'one-time' Oracle scheduled job for every backup, or do your scripts create an Oracle job with multiple schedule?
    You're very welcome!
    Well, Grid Control is not an option for us, since each customer is in a separate infrastructure, and with their own licensing. I have no real way (in difference to your situation) to have a centralized point of control, but that on the other hand mean that I don't have to consider network/storage congestion, like you have to.
    The script is run from a "permanent" job within the dba-scheduler, created like this:
    dbms_scheduler.create_job(
            job_name        => 'BACKUP',
            job_type        => 'EXECUTABLE',
            job_action      => '/home/oracle/scripts/rman_backup.sh',
            start_date      => trunc(sysdate)+1+7/48,
            repeat_interval => 'trunc(sysdate)+1+7/48',
            enabled         => true,
            auto_drop       => false,
            comments        => 'execute backup script at 03:30');and then the "master-script", determines which level to use, based on weekday from the OS. The actual job schedule (start date, run interval etc) is set together with the customer IT/IS dept, to avoid congestion on the backup resources.
    I have no overview of the backup status, run times etc, but have made monitoring scripts that will alert me if/when a backup either fails, or runs for too long. This, in addition with scheduled disaster/recovery tests makes me sleep rather well at night.. ;-)
    I realize that there (might be) better ways of doing backup scheduling in your environment, since my requirements are so completely different than yours, but I guess that we all face the same challenges in unifying the environments as much as possible, to minimize the amount of actual work we have to do. :-)
    Good luck!
    //Johan

  • How to provide an exchange user permission for Mailbox Archieve ??

    i want to grant a IT guy access to archive mailboxes. How to provide an exchange user permission for Mailbox Archive ??.
    Regards, h9ck3r.

    Hi,
    Per my known, if you want to access other user's personal archive mailbox, you need to assign full access permissions to primary mailbox first.
    There is no way to grant full access permissions to archive mailbox only.
    Best regards,
    Belinda Ma
    TechNet Community Support

  • Volume Duplication Policy for RMAN Backups

    Hi,
    I wish to configure a volume duplication policy for RMAN backups. Both the source media family and duplicate media family are 'content managed' as per the documentation. However, the duplication policy 'trigger' is defined as if the media family is 'time managed', which does not seem to make sense in 'content-managed' media families used by RMAN.
    Does anyone have any guidelines on how RMAN volume duplication can be set up so that my duplicates are valid?
    Thanks

    Yes. I understand. The reason I used time-managed volumes in the tutorial is that with time-managed volumes a duplicate may have different retention and rotation than the original. The procedure for time or content managed duplicates are the same.
    A content managed tape may be duplicated to the same or different media family. If to a different media family, the retention would be same...since content managed but it could have a different rotation policy...if desired. For example, if you wanted original tapes left onsite but the duplicates to go offsite for "x" time, then create a new content managed media family and a desired rotation policy...associate that rotation policy to new media family and duplicate tapes to that media family with desired rotation policy. In that scenario, your original media family would have a duplication policy and possible a rotation policy. The new media family would just have a rotation policy.
    Donna

  • Shell script for RMAN backup

    Hi,
    on 10G R2 in AIX 6.1
    I'm looking for Shell script for RMAN backup.
    Moreover , if we should connect like this :
    rman nocatalog target sys/password@myDB << EOF
    backup as compressed backupset format '$savdir/ctl_%d_%T_%s_%p' current controlfile;
    exit
    EOFHow to avoid writting password in shell script ?
    Thank you.

    user522961 wrote:
    Can you please tell me in case of having a catalog , how to connect to catalog without writting password in script ? I mean , how to write the following in a way without password :
    #!/usr/bin/ksh
    export ORACLE_SID=myDB
    ORACLE_ENV_ASK=NO
    . /usr/local/bin/oraenv
    export savedir=/backups/myDB
    rman target /  << EOF
    connect catalog rman/password@myrepository
    backup as compressed backupset
        format '$savdir/ctl_%d_%T_%s_%p'
        include current controlfile;
    exit
    EOF:p

  • How to setup a user account for brtools backup

    Dear Sir,
    We have SAP running on Unix (AIX) and ORACLE Database . For the backup , we take the backup using brtools . At present , I am able to take the backup from the  dba user account .
    DBA user account (at os level) is oradv and group name is sapsys .
    For taking the routine backup using brtools , I want to create a seperate user account . For this I created a user , named bkup . For this user , I have defined primery group as sapsys .
    During execution of brtools command , I am getting following error :
    BR0252E Function stat() failed for '/usr/sap/DEV/SYS/exe/run/brarchive' at location BrFileStatGet-1
    BR0253E errno 13: Permission denied
    BR0273E Determination of file status for /usr/sap/DEV/SYS/exe/run/brarchive failed
    Kindly guide us , as what parameters / authorization etc need to be changed for user account bkup , so that brtools command can work without any error .
    With Thanks and Rgds
    Sonia Agarwal

    do lsuser oradv, check it's authorizations and give same auths to new user bkup

  • How can I access user permission for specific items in Sharepoint 2013 via REST API?

    I want to access user permissions for specific items like lists, documents, folders etc. via the REST API.
    Currently I am hitting the following endpoint:
    http://win-5a8pp4v402g/sharepoint_test/site_1/_api/web/getUserEffectivePermissions('win-5a8pp4v402g\\Sharepoint User 2')
    However the response looks like this:
       "d":
           "GetUserEffectivePermissions":
               "__metadata":
                   "type": "SP.BasePermissions"
               "High": "0",
               "Low": "0"
    I cant understand why high and low are both 0? I have added the user to a specific group. Also this is the same result for each of the users. Another thing to note is that I havent added the "Guest" user in the sharepoint server. So when I hit the endpoint for the Guest user, it still shows the same response. So I know there is something I am doing wrong.I want to access permission of a user for a specific item, say a document using the REST API. Can someone tell me how? What would be the endpoint?

    Thanks for the reply. Although this works for Lists, I need to get permissions of documents too. Here is what I have tried:
    http://win-5a8pp4v402g/sharepoint_test/site_1/_api/web/GetFileByServerRelativeUrl('/sharepoint_test/site_1/Documents/file1.txt')/GetUserEffectivePermissions(@user)?@user='i%3A0%23%2Ew%7Cwin-5a8pp4v402g%5Csharepoint%20user%201'
    And the response is:
       "error":
           "code": "-1, Microsoft.SharePoint.Client.ResourceNotFoundException",
           "message":
               "lang": "en-US",
               "value": "Cannot find resource for the request GetUserEffectivePermissions."
    Clearly this doesnt work for a file. Whats wrong?

  • Write a ms dos script for rman backup

    Hi all,
    i wanna write a dos batch file to take the rman backup..
    i have written one...actually there are 2 files. one is for login purpose...other one is for sql commands
    rman.bat-->
    rman target sys/sysadmin@hnbhrm @'c:\rm.sql'
    ==============================
    rm.sql-->
    configure retention policy to recovery window of 7 days;
    configure controlfile autobackup on;
    run {
    alter system switch logfile;
    crosscheck archivelog all;
    crosscheck backupset;
    backup database plus archivelog;
    DELETE NOPROMPT ARCHIVELOG ALL COMPLETED BEFORE 'sysdate -1';
    DELETE NOPROMPT OBSOLETE REDUNDANCY = 1;
    ========================================
    but i have problem in first file rman.bat. it doesnt run at all. but if i write sqlplus / as sysdba instead of rman thing.. then it works fine.
    can anybody tell me whats happening over there please..? Have i done this correctly? or u have some other simple way to do this...
    both files are located in C drive.. and oracle is installed to E drive... oracle path has set already.
    can anybody please give me a hand to solve this issue please...
    Thanks in Advance,
    Max

    write a ms dos script for rman backupImpossible. rman does not support MS-DOS. It is not a 16bit real mode application that can be run inside the MS-DOS operating system.
    So get your terminology straight - the Windows console is a character based 32bit virtual machine. It is not MS-DOS. It never was MS-DOS. Do not confuse the two simply because of superficial similarities. A stick-it note can be yellow - but because it is yellow does not mean it is a banana.

  • Script for RMAN backup

    kindly send the script for RMAN bacup

    Hi,
    About RMAN backup
    http://dbataj.blogspot.com/2007/01/about-rman-backups.html
    About RMAN architechture
    http://dbataj.blogspot.com/2007/01/recovery-manager-architecture.html
    About RECOVERY CATALOG
    http://dbataj.blogspot.com/2006/12/recovery-catalog.html
    RMAN backup script
    http://dbataj.blogspot.com/2007/01/hotfullrmanbkpscirpt.html
    above is my own work on RMAN you have to edit according you needs.
    regards
    Taj

  • DBID for RMAN backup with format '%u'

    Hi all:
    (I've post this at c.d.o.s. too, but no answers...)
    This is Oracle 10.2.0.3 on Enterprise Linux 5.
    I've been given two backups from an Oracle Database: one 'cold' and
    one 'hot'. They both come from a lost server.
    The fact is that they have been made with the format '%u' (eight
    alphanumerics) and I must recover the database on a new server. I
    cannot get the DBID from the backup files name because of this format
    '%u'.
    The backups have been made with CONTROLFILE AUTOBACKUP ON (or so I'm told).
    How can I get the DBID to recover the DB on a new server?
    Thanks in advance.
    Cheers.
    Carlos.

    "I don't know where you read this, it's wrong. "Oracle® Database Backup and Recovery Advanced User's Guide
    10g Release 2 (10.2)
    2 RMAN Backups Concepts
    Control File and Server Parameter File Autobackups
    How RMAN Performs Control File Autobackups
    "The RMAN behavior when the BACKUP command includes datafile 1 depends on the CONFIGURE CONTROLFILE AUTOBACKUP setting. If control file autobackups are ON and the backup includes datafile 1, RMAN writes the control file and SPFILE to a separate autobackup backup set. If control file autobackups are OFF and the backup includes datafile 1, then RMAN includes the current control file and SPFILE in the same backup set as the datafiles."
    Cheers.
    Carlos.

  • Reduce Time for Rman Backup

    Dear Experts;
    rman for 0 level backup is taking about 5:26 hours, backup size is now 312gb I have enabled block track checking & it reduces time for incremental level 1 from 2hour to almost 3 minutes.
    database shows biggest tablespace is "users"
    I want valuable suggestions for reducing its time or is there any way to break 0 level backup. I can allocate channels but ultimately it will take time when taking "users" tablepace backup
    Right now I am taking backup at usb drive & its version is 2.0
    Regards

    As you are taking backup to a usb drive there is not much that can be done to improve the speed. If you are concerned about the backup being slow.. then you could think of taking the backup on local disk( which would be faster and more efficient) and then move the backups from the disk to usb drive.
    This can be done in a single backup script as 2 part operation.
    1) take backup to disk.
    2) copy the backup to usb drive and delete the backups from the disk.
    There are many additional features that u can add to enhance it thoe.
    Regards,
    V

  • Email notification for rman backup log results

    Hi,
    Good Day!
    is this possible to send email notification about the rman database backup results (succesfull or failed) without using local O/S utilities/services like cron jobs or/and sendmail services?
    pl. note: Instead of local O/S' sendmail services, we would like to utilize the organizational - email server's address and email - account which is already running for other email correspondance.
    Plateform details
    +++++++++++++
    Database: 10.2.0.3
    O/S: HP-UX 11.31
    An urgent response will be highly obliged.
    Thanks
    Regards,
    X

    You can use dbms_scheduler to check for teh configured job and it's status and then using the utl_mail package,can send an email. This would require the smtp srever address of yours .
    Please refrain from using urgent word in the subseuent posts of yours. All the threads and the members of this and any other forum are alike and so are their issues/questions. For urgent request, please raise a sev 1 SR with support.
    HTH
    Aman....

  • Guest User permission for Federated portal setup

    Hello SDNers,
    I am trying to setup Federation between two portals. Both the portals are in the same domain and use the same LDAP user data source.
    Both the portals are on NW 7.0 EHP1 SP 05.
    I am following the online help and few other links. I have followed all the steps explained.
    SSO and trust between portals is properly setup and is validated.
    The point where I am stuck at is with the permissions on the producer portal for the "Guest" user.
    If I assign Super Admin role to the Guest user in the producer portal, every thing works fine. I can see the roles in Consumer portal for Remote Role Assignment and also I am able to do Remote Delta Links.
    However, this is not anticipated. (We cannot assign super admin to Guest user)
    If I remove the Super Admin role to the Guest user in the producer portal, every thing breaks - I cannot see the remote roles from Consumer portal, I cannot see any content under Netweaver Content Producers for the given producer.
    I have given "Everyone" group - read access to everything below "Portal Content" folder both on producer and consumer portals.
    PCD_Service user is assigned the actions Remote_Producer_Write_Access and Remote_Producer_Read_Access in both portals.
    Log says:
    Call failed
    EXCEPTION
    SOAP Fault Exception (Actor SAPEPP) com.sapportals.portal.prt.service.soap.exception.SoapFaultHandler] : The User Authentification is not correct to access to the Portal Service com.sap.portal.prt.soap.Bridge or the service was not found.
    My Questions are:
    1. What does Guest user have to do in the whole process - Where it is exactly used ?
    2. How can I give Guest user the required permissions (especially to portal service com.sap.portal.prt.soap.Bridge) ?
    Please suggest.
    Thank You ,
    Raj Kumar

    No cross posting.
    Read the "Rules of Engagement"
    Regards
    Juan

Maybe you are looking for