Oracle-L: Re: Stop using SYS, SYSTEM?

From: <Jared.Still_at_radisys.com>
Date: Wed, 12 Nov 2003 12:29:34 -0800
Message-ID: <F001.005D672C.20031112122934@fatcity.com>

That won't work if you're using RMAN.

The account that makes the backup needs to be able to do so as sysdba.

You can't grant that through a role.

The reason for separate accounts is accountability. But if you're not auditing,
that won't help much, as you already stated.

Jared

"Smith, Ron L." <rlsmith_at_kmg.com>
Sent by: ml-errors_at_fatcity.com
11/12/2003 12:04 PM
Please respond to ORACLE-L

        To:     Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
        cc: 
        Subject:        Stop using SYS, SYSTEM?

We are being asked by Auditing to stop using the SYS, and SYSTEM accounts. They would like for us to create an Oracle Role with the same permissions a SYS and SYSTEM, then grant the role to each of the DBA's. Don't ask me why. Nothing is being audited in 99% of the databases. They just say it in a paper some where so they said we shouldn't use it. This seems like it would cause lots of problems with exports, imports, installs, etc... Has anyone had to deal with this type of request? Any potential problems with making the change?

Thanks!
Ron Smith
--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author: Smith, Ron L.
INET: rlsmith_at_kmg.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).

--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author:
INET: Jared.Still_at_radisys.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------