Previous Topic: Tablespaces and Quotas

Next Topic: Password Expiry

Privileges for Oracle Users

The Oracle primary user, search user and schema owner require appropriate privileges to manage the CMS database. For example, the primary user and schema owner need SELECT privileges on all data dictionary views; to allow this access, they must have the SELECT CATALOG role.

Automatically granted

All required privileges are granted automatically when you install a new CMS or when you run the CreateOracleUser.sql script. But you must manually grant some privileges if upgrading your CMS; see below.

Grant manually

Before upgrading your CMS, you may need to manually grant extra privileges to your Oracle primary user and, if specified, the schema owner:

If upgrading from 12.0, you must grant:

If upgrading from 6.0, you must grant:

If upgrading from 5.0, you must grant:

These privileges are granted automatically when installing a new r12.5 CMS.

 

Primary User

Schema Owner

Search User

Notes

Oracle Roles

 

 

 

 

CONNECT ROLE

 

 

X

Only needed for the search user

SELECT CATALOG ROLE

X

X

X

 

Oracle System Privileges

 

 

 

 

ALTER SESSION

X

X

 

 

CREATE CLUSTER

X

X

 

 

CREATE ANY CONTEXT

X

X

 

 

CREATE DATABASE LINK

X

X

 

 

CREATE JOB

X

X

 

Grant manually if upgrading from 6.0

CREATE MATERIALIZED VIEW

X

X

 

Grant manually if upgrading from 5.0, 6.0 or r12.0

CREATE PROCEDURE

X

X

 

 

CREATE ROLE

X

X

 

 

CREATE SEQUENCE

X

X

 

 

CREATE SESSION

X

X

 

 

CREATE SYNONYM

X

X

X

 

CREATE TABLE

X

X

 

 

CREATE TRIGGER

X

X

 

Grant manually if upgrading from 5.0

CREATE VIEW

X

X

 

 

CREATE TYPE

X

X

 

 

DROP ANY ROLE

 

X

 

Only needed for the schema owner for de-installation

DROP ANY CONTEXT

 

X

 

Only needed for the schema owner for de-installation

QUERY REWRITE

X

X

 

Needed to create function indexes.

SELECT ANY DICTIONARY

X

X

 

Grant manually if upgrading from 6.0

Oracle Object Privilege

 

 

 

 

EXECUTE ON DBMS_LOCK

X

X

 

Grant manually if upgrading to r12.5 and you intend to partition the database or you want to run Review Queue database searches.

More information:

Infrastructure-Based Purging

Database Storage and Partitioning