We have this user which has the Oracle Queues and also 3 more users for Oracle Message Gateway .
Can anyone please explain why they need the DBA privillage? What would happen if we revoke the DBA from them?
Thanks in advance!
in principle, you need the following DB schemas:
1) MGW_ADMIN + MGW_AGENT (for Oracle Message Gateway)
2) an application schema user (for Oracle AQs)
All necessary admin tasks concerning Message Gateway will be done using the first two schemas.
The GRANTs will be set based on the standard MGW installation scripts. Here no DBA privileges will be granted.
Concerning your application schema user no DBA privileges are needed to create and modify AQs.
For such a schema the following basic GRANTs are needed:
GRANT EXECUTE ON dbms_aqadm TO <user>;
GRANT EXECUTE ON dbms_aq TO <user>;
GRANT AQ_ADMINISTRATOR_ROLE TO <user>;
>What would happen if we revoke the DBA from them?
In general, nothing would happen if you revoke the role DBA from a "normal" AQ owner.