3 Replies Latest reply: Feb 14, 2012 4:24 PM by 917503 RSS

    Help with privileges

    917503
      Hello everyone,

      A client has an appliance for DB monitoring, the appliance needs a user to access the DB, and it requires the following privileges in Oracle 10g:

      CREATE SESSION
      SELECT_CATALOG_ROLE
      DELETE_CATALOG_ROLE
      AUDIT ANY
      AUDIT SYSTEM
      SELECT SYS.AUD$
      SELECT ANY TABLE

      The client has configured this so far:

      CREATE USER FORTIDB IDENTIFIED BY SAsadsad$dsfdsf;
      GRANT CREATE SESSION TO FORTIDB;
      GRANT select any table to FORTIDB;
      GRANT SELECT_CATALOG_ROLE TO FORTIDB;
      grant SELECT audit_system to FORTIDB

      Please, let me know what sentences are missing and/or wrong. I don't have knowledge of DB, and I have to somehow guide the client. I have doubts with the GRANT select audit_system sentence. Is that the right way to write it? I would be very grateful if you can help us.

      Thank you!

      Antonio
        • 1. Re: Help with privileges
          Alfonso Vicente
          grant select_catalog_role to FORTIDB;
          grant delete_catalog_role to FORTIDB;
          grant audit any to FORTIDB;
          grant audit system to FORTIDB;
          grant select on sys.aud$ to FORTIDB;
          • 2. Re: Help with privileges
            mseberg
            Antonio
            GRANT AUDIT ANY TO FORTIDB;
            
            GRANT AUDIT SYSTEM TO FORTIDB;
            
            GRANT CREATE SESSION TO FORTIDB;
            
            GRANT SELECT ANY TABLE TO FORTIDB;
            
            
            GRANT DELETE_CATALOG_ROLE TO FORTIDB;
            GRANT SELECT_CATALOG_ROLE TO FORTIDB;
            
            GRANT SELECT ON  SYS.AUD$ TO FORTIDB;
            You probably need to grant SYS.AUD$ as the SYS user.


            If you don't have the user you need to create it first.
            CREATE USER FORTIDB IDENTIFIED BY <password>
             PROFILE "DEFAULT";
            Replace the <password> with whatever you want to use for the password. Then run the GRANTS SQL as shown above.


            Best Regards

            mseberg
            • 3. Re: Help with privileges
              917503
              Thank you! very much for such a quick response and complete answer. I will forward this to the client.

              Regards,

              Antonio