OraFAQ Forum: Security » sys system sysdba sysoper

Home » RDBMS Server » Security » sys system sysdba sysoper

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

sys system sysdba sysoper [message #57036]

Thu, 15 May 2003 18:35

Chris
Messages: 128
Registered: November 1998

Senior Member

I'm learning oracle and am very puzzled/confused with these -- sys system sysdba sysoper.

While I understand only sys and system are user accounts (not sysdba or sysoper), I don't understand why when you log in as sys, you have to choose "as sysdba" or "as sysoper".

When you login as a user, in the case as sys, that user has the roles/privileges that go with it. Like login as root on a unix machine, you have super user privilege. Or as administrator on NT box, you are super user (roles and privileges already assigned)

Could you shred some light on this?

Chris

Report message to a moderator

Re: sys system sysdba sysoper [message #57073 is a reply to message #57036]

Mon, 19 May 2003 09:24

Sanjay
Messages: 236
Registered: July 2000

Senior Member

SYS and SYSTEM are both created during a DB creation.

In plain English (just a few):

1. SYS is more powerful than SYSTEM. All dictionary objects and views are owned by SYS (things needed to run the DB).
2. You log in 'SYS as SYSDBA' when you have to recycle the database.
3, For normal DBA task, most of the time you log in as SYSTEM (which has DBA role). DBA role has access to all the dictionary, views ....
4. It is NOT a good idea to give 'DBA role' to normal users. Unless you are lazy to set up a user and just give DBA role to quickly resolve permissions.

Hope this clarifies your doubts...

Report message to a moderator

Re: sys system sysdba sysoper [message #57097 is a reply to message #57036]

Tue, 20 May 2003 12:47

Chris
Messages: 128
Registered: November 1998

Senior Member

Thanks to Sanjay for the knowledge.

I still have some questions.

1. When do you login as "sys as sysoper" Vs "sys as sysdba"?

2. Since sys and system both have "DBA role", what is what?

3. By saying "DBA role", do you mean that the role is comprised of multiple administrative privileges, such as, as a minimun, to login the database.

4. Could you also create a user similar as system or sys -- I mean this new user, say oraroot, have the same power/privilege as sys or system?

Cheers

Report message to a moderator

Re: sys system sysdba sysoper [message #489273 is a reply to message #57097]

Fri, 14 January 2011 03:54

vishal0soni
Messages: 1
Registered: January 2011
Location: udaipur

Junior Member

The SYSDBA and SYSOPER privileges can also be thought of as types of connections that enable Oracle DBA to perform certain database operations for which privileges cannot be granted in any other fashion. For example, Oracle DBA if Oracle DBA have the SYSDBA privilege, Oracle DBA can connect to the database by specifying CONNECT AS SYSDBA.

Report message to a moderator