What is best practice for CDB users.
We have an infrastructure team that manages ever PDB in the CDB and only 1 CDB on the server.
Would it fall into least privilege / best practice to create a common user with CONNECT (set container, create session) to all the Pluggable Databases and in CDB have SELECT ANY DICTIONARY. They are responsible for monitoring performance and availability of the CDB and PDB's. They are responsible for maintaining the PDB's; to include but not limited monitoring tablespace sizes, auditing, PDB account management, PDB parameters and so on. They would have elevated privileges in the PDB's.
They are not responsible for patching, backup and recovery, installing oracle components, setting ROOT parameters.