That won't work if you're using RMAN.
The account that makes the backup needs to be able to do so as sysdba.
You can't grant that through a role.
The reason for separate accounts is accountability. But if you're not auditing,
that won't help much, as you already stated.
Jared
| "Smith, Ron L." <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED] 11/12/2003 12:04 PM
|
To: Multiple recipients of list ORACLE-L <[EMAIL PROTECTED]> cc: Subject: Stop using SYS, SYSTEM? |
We are being asked by Auditing to stop using the SYS, and SYSTEM
accounts. They would like for us to create an Oracle Role with the same
permissions a SYS and SYSTEM, then grant the role to each of the DBA's.
Don't ask me why. Nothing is being audited in 99% of the databases.
They just say it in a paper some where so they said we shouldn't use it.
This seems like it would cause lots of problems with exports, imports,
installs, etc... Has anyone had to deal with this type of request? Any
potential problems with making the change?
Thanks!
Ron Smith
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Smith, Ron L.
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
