Skip to content

DBA Role, How and Why

DBA Role

In Oracle database, DBA could be the most privileged role. Whenever we want to make a user to be the most dominant application in the database, we grant DBA role to it.

Grant DBA to User

To grant the role to an user who wants to take charge of all aspects of work in the database, we only need a granting like this:

SQL> grant dba to erpapp;

Grant succeeded.

The grantee can also be a role. In this case, we granted the role to the user who is the key user of ERP, the most dominant application in this database.

WITH ADMIN OPTION

Additionally, to maximize the power of usage, we may grant it WITH ADMIN OPTION which enables the user to regrant the privilege to another user or role.

SQL> grant dba to erpapp with admin option;

Grant succeeded.

Here we list privileges in DBA by the following categories.

  1. Roles
  2. System Privileges
  3. Object Privileges

Roles

We use the following SQL statement to check the roles in DBA.

SQL> set pagesize 1000;
SQL> select granted_role from dba_role_privs where grantee = 'DBA' order by 1;

There're 17 roles granted to DBA.

As we can see, DBA is an all-aspect role which bases on other important function roles.

System Privileges

We use the following SQL statement to check the system privileges in DBA.

SQL> select privilege from dba_sys_privs where grantee = 'DBA' order by 1;

There're 235 system privileges granted to DBA.

  • ADMINISTER ANY SQL TUNING SET
  • ADMINISTER DATABASE TRIGGER
  • ADMINISTER RESOURCE MANAGER
  • ADMINISTER SQL MANAGEMENT OBJECT
  • ADMINISTER SQL TUNING SET
  • ADVISOR
  • ALTER ANY ANALYTIC VIEW
  • ALTER ANY ASSEMBLY
  • ALTER ANY ATTRIBUTE DIMENSION
  • ALTER ANY CLUSTER
  • ALTER ANY CUBE
  • ALTER ANY CUBE BUILD PROCESS
  • ALTER ANY CUBE DIMENSION
  • ALTER ANY DIMENSION
  • ALTER ANY EDITION
  • ALTER ANY EVALUATION CONTEXT
  • ALTER ANY HIERARCHY
  • ALTER ANY INDEX
  • ALTER ANY INDEXTYPE
  • ALTER ANY LIBRARY
  • ALTER ANY MATERIALIZED VIEW
  • ALTER ANY MEASURE FOLDER
  • ALTER ANY MINING MODEL
  • ALTER ANY OPERATOR
  • ALTER ANY OUTLINE
  • ALTER ANY PROCEDURE
  • ALTER ANY ROLE
  • ALTER ANY RULE
  • ALTER ANY RULE SET
  • ALTER ANY SEQUENCE
  • ALTER ANY SQL PROFILE
  • ALTER ANY SQL TRANSLATION PROFILE
  • ALTER ANY TABLE
  • ALTER ANY TRIGGER
  • ALTER ANY TYPE
  • ALTER DATABASE
  • ALTER LOCKDOWN PROFILE
  • ALTER PROFILE
  • ALTER RESOURCE COST
  • ALTER ROLLBACK SEGMENT
  • ALTER SESSION
  • ALTER SYSTEM
  • ALTER TABLESPACE
  • ALTER USER
  • ANALYZE ANY
  • ANALYZE ANY DICTIONARY
  • AUDIT ANY
  • AUDIT SYSTEM
  • BACKUP ANY TABLE
  • BECOME USER
  • CHANGE NOTIFICATION
  • COMMENT ANY MINING MODEL
  • COMMENT ANY TABLE
  • CREATE ANALYTIC VIEW
  • CREATE ANY ANALYTIC VIEW
  • CREATE ANY ASSEMBLY
  • CREATE ANY ATTRIBUTE DIMENSION
  • CREATE ANY CLUSTER
  • CREATE ANY CONTEXT
  • CREATE ANY CREDENTIAL
  • CREATE ANY CUBE
  • CREATE ANY CUBE BUILD PROCESS
  • CREATE ANY CUBE DIMENSION
  • CREATE ANY DIMENSION
  • CREATE ANY DIRECTORY
  • CREATE ANY EDITION
  • CREATE ANY EVALUATION CONTEXT
  • CREATE ANY HIERARCHY
  • CREATE ANY INDEX
  • CREATE ANY INDEXTYPE
  • CREATE ANY JOB
  • CREATE ANY LIBRARY
  • CREATE ANY MATERIALIZED VIEW
  • CREATE ANY MEASURE FOLDER
  • CREATE ANY MINING MODEL
  • CREATE ANY OPERATOR
  • CREATE ANY OUTLINE
  • CREATE ANY PROCEDURE
  • CREATE ANY RULE
  • CREATE ANY RULE SET
  • CREATE ANY SEQUENCE
  • CREATE ANY SQL PROFILE
  • CREATE ANY SQL TRANSLATION PROFILE
  • CREATE ANY SYNONYM
  • CREATE ANY TABLE
  • CREATE ANY TRIGGER
  • CREATE ANY TYPE
  • CREATE ANY VIEW
  • CREATE ASSEMBLY
  • CREATE ATTRIBUTE DIMENSION
  • CREATE CLUSTER
  • CREATE CREDENTIAL
  • CREATE CUBE
  • CREATE CUBE BUILD PROCESS
  • CREATE CUBE DIMENSION
  • CREATE DATABASE LINK
  • CREATE DIMENSION
  • CREATE EVALUATION CONTEXT
  • CREATE EXTERNAL JOB
  • CREATE HIERARCHY
  • CREATE INDEXTYPE
  • CREATE JOB
  • CREATE LIBRARY
  • CREATE LOCKDOWN PROFILE
  • CREATE MATERIALIZED VIEW
  • CREATE MEASURE FOLDER
  • CREATE MINING MODEL
  • CREATE OPERATOR
  • CREATE PLUGGABLE DATABASE
  • CREATE PROCEDURE
  • CREATE PROFILE
  • CREATE PUBLIC DATABASE LINK
  • CREATE PUBLIC SYNONYM
  • CREATE ROLE
  • CREATE ROLLBACK SEGMENT
  • CREATE RULE
  • CREATE RULE SET
  • CREATE SEQUENCE
  • CREATE SESSION
  • CREATE SQL TRANSLATION PROFILE
  • CREATE SYNONYM
  • CREATE TABLE
  • CREATE TABLESPACE
  • CREATE TRIGGER
  • CREATE TYPE
  • CREATE USER
  • CREATE VIEW
  • DEBUG ANY PROCEDURE
  • DEBUG CONNECT ANY
  • DEBUG CONNECT SESSION
  • DELETE ANY CUBE DIMENSION
  • DELETE ANY MEASURE FOLDER
  • DELETE ANY TABLE
  • DEQUEUE ANY QUEUE
  • DROP ANY ANALYTIC VIEW
  • DROP ANY ASSEMBLY
  • DROP ANY ATTRIBUTE DIMENSION
  • DROP ANY CLUSTER
  • DROP ANY CONTEXT
  • DROP ANY CUBE
  • DROP ANY CUBE BUILD PROCESS
  • DROP ANY CUBE DIMENSION
  • DROP ANY DIMENSION
  • DROP ANY DIRECTORY
  • DROP ANY EDITION
  • DROP ANY EVALUATION CONTEXT
  • DROP ANY HIERARCHY
  • DROP ANY INDEX
  • DROP ANY INDEXTYPE
  • DROP ANY LIBRARY
  • DROP ANY MATERIALIZED VIEW
  • DROP ANY MEASURE FOLDER
  • DROP ANY MINING MODEL
  • DROP ANY OPERATOR
  • DROP ANY OUTLINE
  • DROP ANY PROCEDURE
  • DROP ANY ROLE
  • DROP ANY RULE
  • DROP ANY RULE SET
  • DROP ANY SEQUENCE
  • DROP ANY SQL PROFILE
  • DROP ANY SQL TRANSLATION PROFILE
  • DROP ANY SYNONYM
  • DROP ANY TABLE
  • DROP ANY TRIGGER
  • DROP ANY TYPE
  • DROP ANY VIEW
  • DROP LOCKDOWN PROFILE
  • DROP PROFILE
  • DROP PUBLIC DATABASE LINK
  • DROP PUBLIC SYNONYM
  • DROP ROLLBACK SEGMENT
  • DROP TABLESPACE
  • DROP USER
  • EM EXPRESS CONNECT
  • ENQUEUE ANY QUEUE
  • EXECUTE ANY ASSEMBLY
  • EXECUTE ANY CLASS
  • EXECUTE ANY EVALUATION CONTEXT
  • EXECUTE ANY INDEXTYPE
  • EXECUTE ANY LIBRARY
  • EXECUTE ANY OPERATOR
  • EXECUTE ANY PROCEDURE
  • EXECUTE ANY PROGRAM
  • EXECUTE ANY RULE
  • EXECUTE ANY RULE SET
  • EXECUTE ANY TYPE
  • EXECUTE ASSEMBLY
  • EXPORT FULL DATABASE
  • FLASHBACK ANY TABLE
  • FLASHBACK ARCHIVE ADMINISTER
  • FORCE ANY TRANSACTION
  • FORCE TRANSACTION
  • GLOBAL QUERY REWRITE
  • GRANT ANY OBJECT PRIVILEGE
  • GRANT ANY PRIVILEGE
  • GRANT ANY ROLE
  • IMPORT FULL DATABASE
  • INSERT ANY CUBE DIMENSION
  • INSERT ANY MEASURE FOLDER
  • INSERT ANY TABLE
  • LOCK ANY TABLE
  • LOGMINING
  • MANAGE ANY FILE GROUP
  • MANAGE ANY QUEUE
  • MANAGE FILE GROUP
  • MANAGE SCHEDULER
  • MANAGE TABLESPACE
  • MERGE ANY VIEW
  • ON COMMIT REFRESH
  • QUERY REWRITE
  • READ ANY FILE GROUP
  • READ ANY TABLE
  • REDEFINE ANY TABLE
  • RESTRICTED SESSION
  • RESUMABLE
  • SELECT ANY CUBE
  • SELECT ANY CUBE BUILD PROCESS
  • SELECT ANY CUBE DIMENSION
  • SELECT ANY DICTIONARY
  • SELECT ANY MEASURE FOLDER
  • SELECT ANY MINING MODEL
  • SELECT ANY SEQUENCE
  • SELECT ANY TABLE
  • SELECT ANY TRANSACTION
  • SET CONTAINER
  • UNDER ANY TABLE
  • UNDER ANY TYPE
  • UNDER ANY VIEW
  • UPDATE ANY CUBE
  • UPDATE ANY CUBE BUILD PROCESS
  • UPDATE ANY CUBE DIMENSION
  • UPDATE ANY TABLE
  • USE ANY JOB RESOURCE
  • USE ANY SQL TRANSLATION PROFILE

Object Privileges

We use the following SQL statement to check the object privileges in DBA.

SQL> select privilege || ' on ' || owner || '.' || table_name privilege from dba_tab_privs where grantee = 'DBA' order by owner, table_name, privilege;

There're 234 object privileges granted to DBA.

  • EXECUTE on ORDSYS.CARTRIDGE
  • EXECUTE on SYS.ADR_HOME_T
  • EXECUTE on SYS.ADR_INCIDENT_CORR_KEYS_T
  • EXECUTE on SYS.ADR_INCIDENT_FILES_T
  • EXECUTE on SYS.ADR_INCIDENT_INFO_T
  • EXECUTE on SYS.ADR_INCIDENT_T
  • EXECUTE on SYS.ADR_LOG_MSG_ARGS_T
  • EXECUTE on SYS.ADR_LOG_MSG_ARG_T
  • EXECUTE on SYS.ADR_LOG_MSG_ECID_T
  • EXECUTE on SYS.ADR_LOG_MSG_ERRID_T
  • EXECUTE on SYS.ADR_LOG_MSG_SUPPL_ATTRS_T
  • EXECUTE on SYS.ADR_LOG_MSG_SUPPL_ATTR_T
  • EXECUTE on SYS.ADR_LOG_MSG_T
  • EXECUTE on SYS.AS_REPLAY
  • SELECT on SYS.CDB_XS_ACTIVE_SESSIONS
  • SELECT on SYS.CDB_XS_SESSIONS
  • SELECT on SYS.CDB_XS_SESSION_NS_ATTRIBUTES
  • SELECT on SYS.CDB_XS_SESSION_ROLES
  • DELETE on SYS.DBA_REGISTRY_SQLPATCH
  • INSERT on SYS.DBA_REGISTRY_SQLPATCH
  • SELECT on SYS.DBA_REGISTRY_SQLPATCH
  • UPDATE on SYS.DBA_REGISTRY_SQLPATCH
  • DELETE on SYS.DBA_REGISTRY_SQLPATCH_RU_INFO
  • INSERT on SYS.DBA_REGISTRY_SQLPATCH_RU_INFO
  • SELECT on SYS.DBA_REGISTRY_SQLPATCH_RU_INFO
  • UPDATE on SYS.DBA_REGISTRY_SQLPATCH_RU_INFO
  • SELECT on SYS.DBA_XS_ACTIVE_SESSIONS
  • SELECT on SYS.DBA_XS_SESSIONS
  • SELECT on SYS.DBA_XS_SESSION_NS_ATTRIBUTES
  • SELECT on SYS.DBA_XS_SESSION_ROLES
  • EXECUTE on SYS.DBMS_ADR
  • EXECUTE on SYS.DBMS_ADR_APP
  • EXECUTE on SYS.DBMS_APP_CONT
  • EXECUTE on SYS.DBMS_APP_CONT_ADMIN
  • EXECUTE on SYS.DBMS_AUTO_INDEX
  • EXECUTE on SYS.DBMS_AUTO_SQLTUNE
  • EXECUTE on SYS.DBMS_AUTO_TASK_ADMIN
  • EXECUTE on SYS.DBMS_AUTO_TASK_IMMEDIATE
  • EXECUTE on SYS.DBMS_AWR_WAREHOUSE_SERVER
  • EXECUTE on SYS.DBMS_AWR_WAREHOUSE_SOURCE
  • EXECUTE on SYS.DBMS_CACHEUTIL
  • EXECUTE on SYS.DBMS_DNFS
  • EXECUTE on SYS.DBMS_FEATURE_USAGE_REPORT
  • EXECUTE on SYS.DBMS_FLASHBACK
  • EXECUTE on SYS.DBMS_FLASHBACK_ARCHIVE
  • EXECUTE on SYS.DBMS_FS
  • EXECUTE on SYS.DBMS_GSM_FIX
  • EXECUTE on SYS.DBMS_HANG_MANAGER
  • EXECUTE on SYS.DBMS_HM
  • EXECUTE on SYS.DBMS_ILM_ADMIN
  • EXECUTE on SYS.DBMS_INMEMORY_ADMIN
  • EXECUTE on SYS.DBMS_IR
  • EXECUTE on SYS.DBMS_LOGSTDBY
  • EXECUTE on SYS.DBMS_MANAGEMENT_BOOTSTRAP
  • EXECUTE on SYS.DBMS_MEMOPTIMIZE_ADMIN
  • EXECUTE on SYS.DBMS_MONITOR
  • EXECUTE on SYS.DBMS_NETWORK_ACL_ADMIN
  • EXECUTE on SYS.DBMS_PERF
  • EXECUTE on SYS.DBMS_RAT_MASK
  • EXECUTE on SYS.DBMS_RESULT_CACHE
  • EXECUTE on SYS.DBMS_RESUMABLE
  • EXECUTE on SYS.DBMS_ROLLING
  • EXECUTE on SYS.DBMS_SERVER_ALERT
  • EXECUTE on SYS.DBMS_SERVER_TRACE
  • EXECUTE on SYS.DBMS_SERVICE
  • EXECUTE on SYS.DBMS_SERVICE_CONST
  • EXECUTE on SYS.DBMS_SERVICE_ERR
  • EXECUTE on SYS.DBMS_SERVICE_PRVT
  • EXECUTE on SYS.DBMS_STORAGE_MAP
  • EXECUTE on SYS.DBMS_TDB
  • EXECUTE on SYS.DBMS_TNS
  • EXECUTE on SYS.DBMS_UADV_ARR
  • EXECUTE on SYS.DBMS_UMF
  • EXECUTE on SYS.DBMS_UNDO_ADV
  • EXECUTE on SYS.DBMS_WORKLOAD_CAPTURE
  • EXECUTE on SYS.DBMS_WORKLOAD_REPLAY
  • EXECUTE on SYS.DBMS_WORKLOAD_REPOSITORY
  • EXECUTE on SYS.DBMS_WRR_STATE
  • EXECUTE on SYS.DBMS_XS_PRINCIPALS
  • EXECUTE on SYS.GRANT_RDF_OWNER_DR_PRIVS
  • EXECUTE on SYS.HM_SQLTK_INTERNAL
  • EXECUTE on SYS.LOAD_UNDO_STAT
  • DELETE on SYS.MAP_OBJECT
  • INSERT on SYS.MAP_OBJECT
  • SELECT on SYS.MAP_OBJECT
  • UPDATE on SYS.MAP_OBJECT
  • EXECUTE on SYS.OJDS_CONTEXT
  • EXECUTE on SYS.ORD_ADMIN
  • EXECUTE on SYS.OUTLN_PKG
  • EXECUTE on SYS.RDF_NETWORK_CREATOR_PRIVS
  • EXECUTE on SYS.RESET_UNDO_STAT
  • SELECT on SYS.V_$DIAG_ADR_CONTROL
  • SELECT on SYS.V_$DIAG_ADR_CONTROL_AUX
  • SELECT on SYS.V_$DIAG_ADR_INVALIDATION
  • SELECT on SYS.V_$DIAG_ALERT_EXT
  • SELECT on SYS.V_$DIAG_AMS_XACTION
  • SELECT on SYS.V_$DIAG_DDE_USER_ACTION
  • SELECT on SYS.V_$DIAG_DDE_USER_ACTION_DEF
  • SELECT on SYS.V_$DIAG_DDE_USR_ACT_PARAM
  • SELECT on SYS.V_$DIAG_DDE_USR_ACT_PARAM_DEF
  • SELECT on SYS.V_$DIAG_DDE_USR_INC_ACT_MAP
  • SELECT on SYS.V_$DIAG_DDE_USR_INC_TYPE
  • SELECT on SYS.V_$DIAG_DFW_CONFIG_CAPTURE
  • SELECT on SYS.V_$DIAG_DFW_CONFIG_ITEM
  • SELECT on SYS.V_$DIAG_DFW_PATCH_CAPTURE
  • SELECT on SYS.V_$DIAG_DFW_PATCH_ITEM
  • SELECT on SYS.V_$DIAG_DFW_PURGE
  • SELECT on SYS.V_$DIAG_DFW_PURGE_ITEM
  • SELECT on SYS.V_$DIAG_DIAGV_INCIDENT
  • SELECT on SYS.V_$DIAG_DIR_EXT
  • SELECT on SYS.V_$DIAG_EM_DIAG_JOB
  • SELECT on SYS.V_$DIAG_EM_TARGET_INFO
  • SELECT on SYS.V_$DIAG_EM_USER_ACTIVITY
  • SELECT on SYS.V_$DIAG_HM_FDG_SET
  • SELECT on SYS.V_$DIAG_HM_FINDING
  • SELECT on SYS.V_$DIAG_HM_INFO
  • SELECT on SYS.V_$DIAG_HM_MESSAGE
  • SELECT on SYS.V_$DIAG_HM_RECOMMENDATION
  • SELECT on SYS.V_$DIAG_HM_RUN
  • SELECT on SYS.V_$DIAG_INCCKEY
  • SELECT on SYS.V_$DIAG_INCIDENT
  • SELECT on SYS.V_$DIAG_INCIDENT_FILE
  • SELECT on SYS.V_$DIAG_INC_METER_CONFIG
  • SELECT on SYS.V_$DIAG_INC_METER_IMPT_DEF
  • SELECT on SYS.V_$DIAG_INC_METER_INFO
  • SELECT on SYS.V_$DIAG_INC_METER_PK_IMPTS
  • SELECT on SYS.V_$DIAG_INC_METER_SUMMARY
  • SELECT on SYS.V_$DIAG_IPS_CONFIGURATION
  • SELECT on SYS.V_$DIAG_IPS_FILE_COPY_LOG
  • SELECT on SYS.V_$DIAG_IPS_FILE_METADATA
  • SELECT on SYS.V_$DIAG_IPS_PACKAGE
  • SELECT on SYS.V_$DIAG_IPS_PACKAGE_FILE
  • SELECT on SYS.V_$DIAG_IPS_PACKAGE_HISTORY
  • SELECT on SYS.V_$DIAG_IPS_PACKAGE_INCIDENT
  • SELECT on SYS.V_$DIAG_IPS_PKG_UNPACK_HIST
  • SELECT on SYS.V_$DIAG_IPS_PROGRESS_LOG
  • SELECT on SYS.V_$DIAG_IPS_REMOTE_PACKAGE
  • SELECT on SYS.V_$DIAG_LOG_EXT
  • SELECT on SYS.V_$DIAG_PDB_PROBLEM
  • SELECT on SYS.V_$DIAG_PDB_SPACE_MGMT
  • SELECT on SYS.V_$DIAG_PICKLEERR
  • SELECT on SYS.V_$DIAG_PROBLEM
  • SELECT on SYS.V_$DIAG_RELMD_EXT
  • SELECT on SYS.V_$DIAG_SWEEPERR
  • SELECT on SYS.V_$DIAG_VADR_CONTROL
  • SELECT on SYS.V_$DIAG_VEM_USER_ACTLOG
  • SELECT on SYS.V_$DIAG_VEM_USER_ACTLOG1
  • SELECT on SYS.V_$DIAG_VHM_RUN
  • SELECT on SYS.V_$DIAG_VIEW
  • SELECT on SYS.V_$DIAG_VIEWCOL
  • SELECT on SYS.V_$DIAG_VINCIDENT
  • SELECT on SYS.V_$DIAG_VINCIDENT_FILE
  • SELECT on SYS.V_$DIAG_VINC_METER_INFO
  • SELECT on SYS.V_$DIAG_VIPS_FILE_COPY_LOG
  • SELECT on SYS.V_$DIAG_VIPS_FILE_METADATA
  • SELECT on SYS.V_$DIAG_VIPS_PACKAGE_FILE
  • SELECT on SYS.V_$DIAG_VIPS_PACKAGE_HISTORY
  • SELECT on SYS.V_$DIAG_VIPS_PACKAGE_MAIN_INT
  • SELECT on SYS.V_$DIAG_VIPS_PACKAGE_SIZE
  • SELECT on SYS.V_$DIAG_VIPS_PKG_FILE
  • SELECT on SYS.V_$DIAG_VIPS_PKG_INC_CAND
  • SELECT on SYS.V_$DIAG_VIPS_PKG_INC_DTL
  • SELECT on SYS.V_$DIAG_VIPS_PKG_INC_DTL1
  • SELECT on SYS.V_$DIAG_VIPS_PKG_MAIN_PROBLEM
  • SELECT on SYS.V_$DIAG_VNOT_EXIST_INCIDENT
  • SELECT on SYS.V_$DIAG_VPDB_PROBLEM
  • SELECT on SYS.V_$DIAG_VPROBLEM
  • SELECT on SYS.V_$DIAG_VPROBLEM1
  • SELECT on SYS.V_$DIAG_VPROBLEM2
  • SELECT on SYS.V_$DIAG_VPROBLEM_BUCKET
  • SELECT on SYS.V_$DIAG_VPROBLEM_BUCKET1
  • SELECT on SYS.V_$DIAG_VPROBLEM_BUCKET_COUNT
  • SELECT on SYS.V_$DIAG_VPROBLEM_INT
  • SELECT on SYS.V_$DIAG_VPROBLEM_LASTINC
  • SELECT on SYS.V_$DIAG_VSHOWCATVIEW
  • SELECT on SYS.V_$DIAG_VSHOWINCB
  • SELECT on SYS.V_$DIAG_VSHOWINCB_I
  • SELECT on SYS.V_$DIAG_VTEST_EXISTS
  • SELECT on SYS.V_$DIAG_V_ACTINC
  • SELECT on SYS.V_$DIAG_V_ACTPROB
  • SELECT on SYS.V_$DIAG_V_INCCOUNT
  • SELECT on SYS.V_$DIAG_V_INCFCOUNT
  • SELECT on SYS.V_$DIAG_V_INC_METER_INFO_PROB
  • SELECT on SYS.V_$DIAG_V_IPSPRBCNT
  • SELECT on SYS.V_$DIAG_V_IPSPRBCNT1
  • SELECT on SYS.V_$DIAG_V_NFCINC
  • SELECT on SYS.V_$DIAG_V_SWPERRCOUNT
  • INSERT on SYS.XSDB$SCHEMA_ACL
  • SELECT on SYS.XSDB$SCHEMA_ACL
  • UPDATE on SYS.XSDB$SCHEMA_ACL
  • EXECUTE on SYS.XS_MTCACHE_INT
  • EXECUTE on XDB.DBMS_CSX_ADMIN
  • EXECUTE on XDB.DBMS_XDBT
  • EXECUTE on XDB.DBMS_XDB_ADMIN
  • DELETE on XDB.X$PT46MP5MEPA004NE0KWN0SK0K1LN
  • INSERT on XDB.X$PT46MP5MEPA004NE0KWN0SK0K1LN
  • SELECT on XDB.X$PT46MP5MEPA004NE0KWN0SK0K1LN
  • UPDATE on XDB.X$PT46MP5MEPA004NE0KWN0SK0K1LN
  • DELETE on XDB.XDB$ACL
  • INSERT on XDB.XDB$ACL
  • SELECT on XDB.XDB$ACL
  • UPDATE on XDB.XDB$ACL
  • DELETE on XDB.XDB$CHECKOUTS
  • INSERT on XDB.XDB$CHECKOUTS
  • SELECT on XDB.XDB$CHECKOUTS
  • UPDATE on XDB.XDB$CHECKOUTS
  • DELETE on XDB.XDB$CONFIG
  • INSERT on XDB.XDB$CONFIG
  • SELECT on XDB.XDB$CONFIG
  • UPDATE on XDB.XDB$CONFIG
  • DELETE on XDB.XDB$D_LINK
  • INSERT on XDB.XDB$D_LINK
  • SELECT on XDB.XDB$D_LINK
  • UPDATE on XDB.XDB$D_LINK
  • DELETE on XDB.XDB$H_INDEX
  • INSERT on XDB.XDB$H_INDEX
  • SELECT on XDB.XDB$H_INDEX
  • UPDATE on XDB.XDB$H_INDEX
  • DELETE on XDB.XDB$H_LINK
  • INSERT on XDB.XDB$H_LINK
  • SELECT on XDB.XDB$H_LINK
  • UPDATE on XDB.XDB$H_LINK
  • DELETE on XDB.XDB$NLOCKS
  • INSERT on XDB.XDB$NLOCKS
  • SELECT on XDB.XDB$NLOCKS
  • UPDATE on XDB.XDB$NLOCKS
  • DELETE on XDB.XDB$RESCONFIG
  • INSERT on XDB.XDB$RESCONFIG
  • SELECT on XDB.XDB$RESCONFIG
  • UPDATE on XDB.XDB$RESCONFIG
  • DELETE on XDB.XDB$RESOURCE
  • INSERT on XDB.XDB$RESOURCE
  • SELECT on XDB.XDB$RESOURCE
  • UPDATE on XDB.XDB$RESOURCE

Since DBA role is very powerful, please think twice before granting it to an user.

Leave a Reply

Your email address will not be published. Required fields are marked *