Oracle 'SYS' account alternative when building the MDB.

Document ID : KB000024940
Last Modified Date : 14/02/2018
Show Technical Document Details

Problem:

I am not a SYS Admin; can I use another account to install or patch?

Environment:

Oracle

Resolution:

As an alternative to using the Oracle 'SYS' account to build the UAPM mdb, an Oracle non-SYS, MDB installer user account can be created on the Oracle database.

The following command will create a non-SYS, MDB installer user called 'mdbinstaller' and will grant proper permissions to this user account so that this account can be used to build and patch the MDB.

This user is granted the minimum permissions required to install the UAPM MDB with the RO02252 patch.

Note: RO02252 includes MDB patches --17261861, 17379886, 17400435.

CREATE USER mdbinstaller PROFILE DEFAULT IDENTIFIED BY "mdbinstaller" ACCOUNT UNLOCK;
         grant CREATE USER                     to mdbinstaller;
         grant DROP TABLESPACE                 to mdbinstaller;
         grant CREATE TABLESPACE               to mdbinstaller;
         grant DROP ANY ROLE                   to mdbinstaller;
         grant CREATE ROLE                     to mdbinstaller;
         grant SELECT ON SYS.COL$              to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.DBA_CONSTRAINTS   to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.DBA_CONS_COLUMNS  to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.DBA_INDEXES       to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.DBA_IND_COLUMNS   to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.DBA_OBJECTS       to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.DBA_OBJECT_TABLES to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.DBA_REGISTRY      to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.DBA_TABLES        to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.DBA_TABLESPACES   to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.DBA_TAB_COLUMNS   to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.DBA_TAB_PRIVS     to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.DBA_VIEWS         to mdbinstaller  with GRANT OPTION;
         grant EXECUTE ON SYS.DBMS_REGISTRY    to mdbinstaller  with GRANT OPTION;
         grant DELETE ON SYS.EXPDEPACT$        to mdbinstaller  with GRANT OPTION;
         grant INSERT ON SYS.EXPDEPACT$        to mdbinstaller  with GRANT OPTION;
         grant DELETE ON SYS.EXPDEPOBJ$        to mdbinstaller  with GRANT OPTION;
         grant INSERT ON SYS.EXPDEPOBJ$        to mdbinstaller  with GRANT OPTION;
         grant DELETE ON SYS.EXPPKGACT$        to mdbinstaller  with GRANT OPTION;
         grant INSERT ON SYS.EXPPKGACT$        to mdbinstaller  with GRANT OPTION;
         grant DELETE ON SYS.EXPPKGOBJ$        to mdbinstaller  with GRANT OPTION;
         grant INSERT ON SYS.EXPPKGOBJ$        to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.KOPM$             to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.OBJ$              to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.TS$               to mdbinstaller  with GRANT OPTION;
         grant SELECT ON SYS.USER$             to mdbinstaller  with GRANT OPTION;
         grant CONNECT                         to mdbinstaller  with ADMIN OPTION;
         grant RESOURCE                        to mdbinstaller  with ADMIN OPTION;
         grant CREATE SESSION                  to mdbinstaller  with ADMIN OPTION;
         grant SELECT_CATALOG_ROLE             to mdbinstaller  with ADMIN OPTION;
         grant EXECUTE_CATALOG_ROLE            to mdbinstaller  with ADMIN OPTION;
         grant UNLIMITED TABLESPACE            to mdbinstaller  with ADMIN OPTION;
         grant CREATE INDEXTYPE                to mdbinstaller  with ADMIN OPTION;
         grant CREATE LIBRARY                  to mdbinstaller  with ADMIN OPTION;
         grant CREATE OPERATOR                 to mdbinstaller  with ADMIN OPTION;
         grant CREATE PROCEDURE                to mdbinstaller  with ADMIN OPTION;
         grant CREATE SEQUENCE                 to mdbinstaller  with ADMIN OPTION;
         grant DELETE ANY TABLE                to mdbinstaller  with ADMIN OPTION;
         grant CREATE TABLE                    to mdbinstaller  with ADMIN OPTION;
         grant INSERT ANY TABLE                to mdbinstaller  with ADMIN OPTION;
         grant CREATE TYPE                     to mdbinstaller  with ADMIN OPTION;
         grant CREATE VIEW                     to mdbinstaller  with ADMIN OPTION;
         grant CREATE SYNONYM                  to mdbinstaller  with ADMIN OPTION;
         grant DROP PUBLIC SYNONYM             to mdbinstaller  with ADMIN OPTION;
         grant CREATE PUBLIC SYNONYM           to mdbinstaller  with ADMIN OPTION;
         grant ALTER SESSION                   to mdbinstaller  with ADMIN OPTION;
         grant ANALYZE ANY                     to mdbinstaller  with ADMIN OPTION;
         grant QUERY REWRITE                   to mdbinstaller  with ADMIN OPTION;
         commit;