Re: sysadmin access

scott wrote:

> Our IS director is insisting that he needs sysadmin access to our
> Oracle Applications instance, I however disagree. Is there a good
> rule of thumb for who does and does not need sysadmin privs to the
> DB/Apps? I need some ammo.

Some base variants I can think of:

1. Fight the boss and risk your job. If he's serious about getting access, he'll hire someone who'll give it to him;
2. Give him access, and start a CYA log of all you activity. My experience is this kind of request at that level means there will be some background data manipulation OR background security investigation;
3. Give him psuedo access through a specially tailored userid;
4. There may be a legitimate reason for this. Have a frank discussion with him and ask for justification. Simply put, you have a position of responsibility and you are now asking whether that responsibility is being changed.