How to create an Oracle account and verify the permissions assigned for the Backup Exec Agent for Oracle

Article:TECH7563  |  Created: 2010-01-05  |  Updated: 2011-11-14  |  Article URL http://www.symantec.com/docs/TECH7563
Article Type
Technical Solution

Product(s)

Issue



How to create an Oracle account and verify the permissions assigned for the Backup Exec Agent for Oracle


Solution



To create the account and assign the appropriate roles in Oracle Server Manager or SQLPlus, execute the following commands:
 
1. CREATE USER BACKUP IDENTIFIED BY ORACLE;  
   (BACKUP is the account name and ORACLE is the password in this example.)
2. GRANT UNLIMITED TABLESPACE TO BACKUP;
3. GRANT AQ_ADMINISTRATOR_ROLE TO BACKUP;
4. GRANT SYSDBA TO BACKUP;
5. GRANT CONNECT TO BACKUP;
6. ALTER USER BACKUP DEFAULT ROLE ALL;
7. ALTER USER BACKUP DEFAULT TABLESPACE SYSTEM;
 
To connect to the Oracle "Server Manager" (for the BACKUP account), execute the following command:
 
 connect BACKUP/ORACLE   (where BACKUP is the account name and ORACLE is the password as in the above example)
 
To verify the roles and privileges associated with this account, execute the following command:
select * from session_privs;

At this point, 125 rows should be selected. If less than 125 rows are selected,  execute the grant commands again (in the first session) to establish these privileges.

- Or -

select grantee, privilege from DBA_SYS_PRIVS where grantee = 'BACKUP' Union select grantee, GRANTED_ROLE from DBA_ROLE_PRIVS where grantee = 'BACKUP';

At this point, three privileges should be displayed: AQ_ADMINISTRATOR_ROLE, DBA, UNLIMITED TABLESPACE. If not, execute the grant commands again (in the first section) to establish these privileges.

This will create a system equivalent account that could be used for the Backup Exec agent for the Oracle server.

For example: Figure 1:

Figure 1
 
 



Legacy ID



230036


Article URL http://www.symantec.com/docs/TECH7563


Terms of use for this information are found in Legal Notices