During a database security audit, a question arose regarding permissions that are actually needed for the ongoing operation.
Is it possible to remove these permissions after the installation?
The permissions are described in the documentation.
Database Rights for the Automation Engine
CREATE SESSION
If there are any security considerations regarding any of these permissions, they can be removed after the Automation Engine (AE) installation has successfully finished. However, permissions on all the above-listed objects will be required prior to performing a hotfix or update since changes are made to the DB schema of the AE during the upgrade process.
Therefore if any of these privileges are revoked, ensure that the privileges are enabled again prior to any update done with the DB load (hotfix/update release).