Take the 2-minute tour ×
Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. It's 100% free, no registration required.

I want to create an Oracle user who can grant references to other users. Do I need to make him sysdba for that, or is there any other way?

share|improve this question

migrated from stackoverflow.com Feb 20 '13 at 12:26

This question came from our site for professional and enthusiast programmers.

    
docs.oracle.com/cd/E11882_01/server.112/e10592/… check it.... –  ANK Feb 20 '13 at 11:20

1 Answer 1

You don't need to grant SYSDBA privileges, and shouldn't unless really necessary. You should follow the principle of least privilege. From Oracle's security guidelines:

Do not provide database users or roles more privileges than are necessary. (If possible, grant privileges to roles, not users.) In other words, the principle of least privilege is that users be given only those privileges that are actually required to efficiently perform their jobs.

You just need to grant with admin option:

grant references on <schema>.<table> to <user> with admin option;

<user> can then grant references on to others, but can't pass on the admin option.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.