Skip to Main Content

Breadcrumb

Question and Answer

Connor McDonald

Thanks for the question, Richaldo.

Asked: June 03, 2021 - 6:20 am UTC

Last updated: June 10, 2021 - 6:05 am UTC

Version: 12C

Viewed 1000+ times

You Asked

Hello, I am facing a problem and it goes like this:
I have a schema named CML that we want to put common objects (Tables, View, Procedures, Packages, etc) used by the team.

I would like to know what grants I should give to my user (eliasr) to create tables, views, procedures, packages in the schema CML. I want to also change existing packages and procedures.

and Connor said...

You have three options here.

1) Give 'eliasr' very broad grants. The privilege level here is "you" or "everyone", so to create an object in another schema you need the "any" privilege level, eg CREATE ANY TABLE. But this means you can create objects in EVERY schema. Not recommended except for DBAs and even then, its risky due to human error

2) Allow CML to connect and you get given the CML password. You temporarily connect as CML to create your objects etc. I don't recommend this because anything that owns objects is ideally not able to connect to the database. Helps with security

3) Give 'eliasr' proxy rights. This lets you authenticate as yourself but "connect" as if you were CML

See her for example https://asktom.oracle.com/pls/apex/asktom.search?tag=proxy-users

Rating

  (1 rating)

Is this answer out of date? If it is, please let us know via a Comment

Comments

Users privileges

Richaldo, June 08, 2021 - 10:53 pm UTC

Thank you Connor for your inputs, I didn't know about proxy users.

I just tried and when using my user: eliasr[ODS_MDM] and my password, I get this error:
Client not found in Kerberos database

I am using AD authentication.
Is there a way around for this error?
Connor McDonald
June 10, 2021 - 6:05 am UTC

Luca Canali has a nice post on this

https://externaltable.blogspot.com/2012/06/kerberos-authentication-and-proxy-users.html
more

Connor and Chris don't just spend all day on AskTOM. You can also catch regular content via Connor's blog and Chris's blog. Or if video is more your thing, check out Connor's latest video and Chris's latest video from their Youtube channels. And of course, keep up to date with AskTOM via the official twitter account.

More to Explore

Administration

Need more information on Administration? Check out the Administrators guide for the Oracle Database