Can any of the required Oracle Database permissions be revoked after successfully installing the Automation Engine?
Document ID :
Last Modified Date :
Show Technical Document Details
CA Automic Workload Automation
CA Automic Workload Automation:Release:10.0
CA Automic Workload Automation:Release:11.0
CA Automic Workload Automation:Release:12.0
Error Message :
During a database security audit, a question arose regarding permissions that are actually needed for the ongoing operation. The permissions are described in the documentation.
Database Rights for the Automation Engine
EXECUTE ANY PROCEDURE
CREATE PUBLIC SYNONYM
DROP PUBLIC SYNONYM
Either the system privilege UNLIMITED TABLESPACE or the tablespace quotas for all tablespaces
The right EXECUTE for the DBMS package (command so set this right: GRANT execute ON dbms_lock TO <schema_name>). This right can only be set by a user who has the SYSDBA privilege.
Is it possible to remove these permissions after the installation?
If there are any security considerations regarding any of these permissions, they can be removed after the Automation Engine (AE) installation has successfully finished. However, permissions on all the above-listed objects will be required prior to performing a hotfix or update since changes are made to the DB schema of the AE during the upgrade process.
Therefore if any of these privileges are revoked, ensure that the privileges are enabled again prior to any update done with the DB load (hotfix/update release).
OS Version: N/A
Root Cause: N/A
Was this information helpful?