Database Security Products (MOSC)

MOSC Banner

What is best practice for CDB users.

We have an infrastructure team that manages ever PDB in the CDB and only 1 CDB on the server.

Would it fall into least privilege / best practice to create a common user with CONNECT (set container, create session) to all the Pluggable Databases and in CDB have SELECT ANY DICTIONARY. They are responsible for monitoring performance and availability of the CDB and PDB's. They are responsible for maintaining the PDB's; to include but not limited monitoring tablespace sizes, auditing, PDB account management, PDB parameters and so on. They would have elevated privileges in the PDB's.

They are not responsible for patching, backup and recovery, installing oracle components, setting ROOT parameters.

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center