Andreas_Sprosec_7439

Can any of the required Oracle Database permissions be revoked after successfully installing the AE?

Discussion created by Andreas_Sprosec_7439 on May 24, 2017
You Asked

Is it possible to remove these permissions after the installation?

Database Rights for the Automation Engine
  • CREATE SESSION
  • CREATE TABLE
  • CREATE SEQUENCE
  • CREATE PROCEDURE
  • EXECUTE ANY PROCEDURE
  • CREATE VIEW
  • CREATE PUBLIC SYNONYM
  • DROP PUBLIC SYNONYM
  • ALTER SESSION
  • Either the system privilege UNLIMITED TABLESPACE or the tablespace quotas for all tablespaces
  • The right EXECUTE for the DBMS package (command so set this right: GRANT execute ON dbms_lock TO <schema_name>). This right can only be set by a user who has the SYSDBA privilege.
and we said …

If there are any security considerations regarding any of these permissions, they can be removed after the Automation Engine (AE) installation has successfully finished.  However, permissions on all the above-listed objects will be required prior to performing a hotfix or update since changes are made to the DB schema of the AE during the upgrade process.

Therefore if any of these privileges are revoked, ensure that the privileges are enabled again prior to any update done with the DB load (hotfix/update release).

Outcomes