Expand my Community achievements bar.

Minimum required Oracle privileges for short lived processes

Avatar

Level 1

My customer's DBA has additional concerns about the CREATE privileges in the RESOURCE role.  They have completed the bootstrap using an ID with the recommended privileges, and now they are looking to reduce these privileges.  The customer will only ever be using short lived processes, so I believe they can remove the CREATE TABLE privilege, but what about the others?

CREATE SEQUENCE
CREATE CLUSTER
CREATE INDEXTYPE

Can these also be dropped if they are using SL processes only?

See original thread from techCommunity: http://tm.corp.adobe.com/techCommunity/viewtopic.php?f=59&t=5115&p=15133&hilit=oracle+privileges#p15...

Thanks,

1 Reply

Avatar

Former Community Member

We previously had a request to support 8.2.1 with the removal of the CREATE privileges so no creates were possible.  This was validated for short lived processes.  After the installation took place then CREATE could be removed as long as all processes were short or the box was used for API calls only (calling individual services).

I don't have any validation of this for ES2 at this time.