This content has been marked as final. Show 3 replies
Have a look at the following MOS note:
UNIX: Do I Need To Use The "oinstall" Group? (Doc ID 463052.1)
One thing to keep in mind is the Cloud Control Agent needs to access files in Oracle Inventory and files in Oracle home/base of certain types of target; e.g., the agent needs to read the alert log file of a monitored database target. Thus, the agent software owner needs to be in the same OS group with the owner of the Oracle Inventory and the software owner(s) of the targets it monitors.
Most of the documentation that I've read, including the note you mention, says that going forward from 11.2, oinstall should always be used. I think it's a blanket statement intended to cover all bases, and I can understand that architecture in a large group, where one group might be responsible for an install, another group for managing a database, and perhaps someone else managing storage. I'm trying to undersand how oinstall vx dba groups are used, and why oinstall is so important.
In our group, there are just a few of us, and we do it all.
We have 5 clusters wiht 28 managed databases at 11.1. All of those were installed with the primary group of dba, and a secondary ground of oinstall. They've been working fine for a few years.
We are now installing EM12C grid on a new machine, starting with grid infrastructure to get ASM installed, so that our repository database can use it.
So, on this Linux box we will have ASM, database, agent and OMS. It's a standalone box, and our primary group is oinstall.
I have been having trouble getting the first step of this completed, installing GI to get ASM up and running. But, that's not part of this question.
Once I get this all configured and running, I will have to install the new agent on all of our targets. Over on those old boxes, he'll still be installed as 'dba', which can read all of the targets. So I think I'm okiay. It's just that I'm stuck with one foot in each door. But having 2 groups for the 'oracle' user will make it okay.
Using group oinstall (in addition to group dba) is basically a best practice that facilitates segregation of duties. If segregation of duties is unnecessary in your case, then you don't really need to use group oinstall in addition to group dba.