Can any of the required Oracle Database permissions be revoked after successfully installing the Automation Engine?
search cancel

Can any of the required Oracle Database permissions be revoked after successfully installing the Automation Engine?

book

Article ID: 88103

calendar_today

Updated On:

Products

CA Automic Workload Automation - Automation Engine

Issue/Introduction

During a database security audit, a question arose regarding permissions that are actually needed for the ongoing operation.

Is it possible to remove these permissions after the installation?

The permissions are described in the documentation.

Database Rights for the Automation Engine

CREATE SESSION

  • CREATE TABLE
  • CREATE SEQUENCE
  • CREATE PROCEDURE
  • EXECUTE ANY PROCEDURE
  • CREATE VIEW
  • CREATE PUBLIC SYNONYM
  • DROP PUBLIC SYNONYM
  • ALTER SESSION
  • Either the system privilege UNLIMITED TABLESPACE or the tablespace quotas for all tablespaces
  • The right EXECUTE for the DBMS package (command so set this right: GRANT execute ON dbms_lock TO <schema_name>). This right can only be set by a user who has the SYSDBA privilege.

 

Resolution

If there are any security considerations regarding any of these permissions, they can be removed after the Automation Engine (AE) installation has successfully finished.  However, permissions on all the above-listed objects will be required prior to performing a hotfix or update since changes are made to the DB schema of the AE during the upgrade process.

Therefore if any of these privileges are revoked, ensure that the privileges are enabled again prior to any update done with the DB load (hotfix/update release).