0

In reviewing some configuration information for an ORACLE 12C server, I see that the only user assigned the DBA role appears to be SYS account. Also, the only user shown with SYSDBA and SYSOPER privileges appears to be SYS account. My understanding is that these are built in accounts that can perform all administrative functions. Absent other user accounts, it seems to indicate that the SYS account is used to perform day to days admin functions. Shouldn't there be a "named" user with appropriately assigned privileges,versus using the SYS account?

0

Yes, there should be. Even the documentation mentions that:

Administrative User Accounts

Create at least one additional administrative user and grant to that user an appropriate administrative role to use when performing daily administrative tasks. Do not use SYS and SYSTEM for these purposes.

But the database can not force you to do this. It is a discipline that some companies follow, while other companies ignore.

  • Thanks. As a follow up to above, If there are two named OS user accounts assigned to the ORA_DBA group who are designated DB administrators, Should their "named" user accounts show up as users with SYSDBA privileges, along with the SYS user (same query)? – Roger B. Jan 2 at 21:53
-1

named OS users assigned to the ORA_DBA (windows) or DBA (*nix) groups are not accounts that are in the database and would not show up in any data dictionary view. from a persistence basis, they are unknown to the database. They are authenticated when they connect, using 'os authentication'. If a given OS user is a member of the requisite and os-specific'dba' group, they can connect with any username/password. As long as they specify 'as sysdba' their OS account will be checked against the members of the DBA group and they will be connected to the database as 'sys'. Try it for yourself.

SQL> connect fubar/snafu as sysdba SQL> show user

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.