Skip to Main Content

Breadcrumb

Question and Answer

Connor McDonald

Thanks for the question, Richaldo.

Asked: June 03, 2021 - 6:20 am UTC

Last updated: June 10, 2021 - 6:05 am UTC

Version: 12C

Viewed 100+ times

You Asked

Hello, I am facing a problem and it goes like this:
I have a schema named CML that we want to put common objects (Tables, View, Procedures, Packages, etc) used by the team.

I would like to know what grants I should give to my user (eliasr) to create tables, views, procedures, packages in the schema CML. I want to also change existing packages and procedures.

and we said...

You have three options here.

1) Give 'eliasr' very broad grants. The privilege level here is "you" or "everyone", so to create an object in another schema you need the "any" privilege level, eg CREATE ANY TABLE. But this means you can create objects in EVERY schema. Not recommended except for DBAs and even then, its risky due to human error

2) Allow CML to connect and you get given the CML password. You temporarily connect as CML to create your objects etc. I don't recommend this because anything that owns objects is ideally not able to connect to the database. Helps with security

3) Give 'eliasr' proxy rights. This lets you authenticate as yourself but "connect" as if you were CML

See her for example https://asktom.oracle.com/pls/apex/asktom.search?tag=proxy-users

Rating

  (1 rating)

Comments

Users privileges

Richaldo, June 08, 2021 - 10:53 pm UTC

Thank you Connor for your inputs, I didn't know about proxy users.

I just tried and when using my user: eliasr[ODS_MDM] and my password, I get this error:
Client not found in Kerberos database

I am using AD authentication.
Is there a way around for this error?
Connor McDonald
June 10, 2021 - 6:05 am UTC

More to Explore

Administration

Need more information on Administration? Check out the Administrators guide for the Oracle Database