OraFAQ Forum: Server Administration

Home » RDBMS Server » Server Administration » Managing DB users (Oracle DB Enterprise Edition 11.2.0.3, OEL 5.7)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Managing DB users [message #615174]

Fri, 30 May 2014 17:14

jesuisantony
Messages: 166
Registered: July 2006
Location: Chennai

Senior Member

We have setup a new environment in production. It has been few months and now start get requests for disabling DB accounts, as the users move out of the project. I understand there is no option to really disable the user. So we revoke all the privilege of the user and lock the account. One challenge I face is distinguishing the active and disabled users.

In a typical production environment, does it make sense to have the account locked? How should things work for a typical production environment?

Regards,
Antony

Report message to a moderator

Re: Managing DB users [message #615177 is a reply to message #615174]

Fri, 30 May 2014 17:42

BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal

Senior Member

> How should things work for a typical production environment?
on NONE of the production DB Servers I manage, does anyone other than me (DBA) have any active schema.
only "application" schema are active on any Production server.

Report message to a moderator

Re: Managing DB users [message #615178 is a reply to message #615174]

Fri, 30 May 2014 18:21

jesuisantony
Messages: 166
Registered: July 2006
Location: Chennai

Senior Member

Our client works on a research and development project. Hence the business data is directly accessed by the clients have read-only access. So there are people having DB account with read-only access.

Report message to a moderator

Re: Managing DB users [message #615179 is a reply to message #615178]

Fri, 30 May 2014 18:41

BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal

Senior Member

jesuisantony wrote on Fri, 30 May 2014 16:21

Our client works on a research and development project. Hence the business data is directly accessed by the clients have read-only access. So there are people having DB account with read-only access.

remove CREATE SESSION then they can no long log into the database.

Report message to a moderator

Re: Managing DB users [message #615183 is a reply to message #615174]

Sat, 31 May 2014 00:30

Michel Cadot
Messages: 68737
Registered: March 2007
Location: Saint-Maur, France, https...

Senior Member
Account Moderator

Locking an account is the way to disable it.
If it is not the case for you, define what you mean by "disable".

Report message to a moderator

Re: Managing DB users [message #615218 is a reply to message #615183]

Sun, 01 June 2014 02:01

ledo60
Messages: 63
Registered: May 2014

Member

You can lock or drop unused accounts , but keep in mind that if you decided to drop them you have to be sure that these accounts not having a special schema and data+ no need to keep their actions history

Report message to a moderator

Previous Topic:	ERROR at line 62: ORA-01652: unable to extend temp segment by 16 in tablespace
Next Topic:	LAST SQL RAN BEFORE KILLING A SESSION

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sat Feb 22 17:13:41 CST 2025