Job Search

Sunday, November 15, 2015

SYS, SYSTEM and SYSMAN Users

SYS
The SYS user owns all base tables and user-accessable view of the data dictionary (Oracle configuration information). No Oracle user should ever alter (update, delete, or insert) any rows or schema objects conatained in the SYS schema, because such activity can compromise data integrety. The security administrator must keep strict control of this central account.

SYSTEM
The SYSTEM user is used to create additional tables and views that display administrative information, and internal tables and views used by various Oracle options and tools.

SYSMAN
The SYSMAN user represents the Enterprise Manager super admin account. This EM admin can create and modify other EM admin accounts as well as admin the database instance itself.

DBSNMP
The DBSNMP user is used by EM to monitor the database. EM uses this account to access performance stats about the database. The DBSNMP credentials sometimes referred to as the monitoring credentials.

SYSDBA and SYSOPER System Privileges

SYSDBA and SYSOPER are administrative privileges required to perform high-level administrative operations such as creating, starting up, shutting down, backing up, or recovering the database. The SYSDBA system privilege is for fully empowered database administrators and the SYSOPER system privilege allows a user to perform basic operational tasks, but without the ability to look at user data.

The SYSDBA and SYSOPER system privileges allow access to a database instance even when the database is not open. Control of these privileges is therefore completely outside of the database itself. This enables an administrator who is granted one of these privileges to connect to the database instance to start the database.

SYSDBA privileges

There are five operations on Oracle that require the user to have SYSDBA privileges in order to perform them:

* startup a database,
* shutdown a database,
* backup a database,
* recover a database and
* create a database

v$pwfile_users lists all users who have been granted sysdba or sysoper privileges.
The sysdba privilege can not be granted to public.

SYS:

automatically created when Oracle database is installed
automatically granted the DBA role
has a default password: CHANGE_ON_INSTALL (make sure you change it)
owns the base tables and views for the database data dictionary
the default schema when you connect as SYSDBA
Tables in the SYS schema are manipulated only by the database. They should never be modified by any user or database administrator, and no one should create any tables in the schema of user SYS. Database users should not connect to the Oracle database using the SYS account.

SYSTEM:

automatically created when Oracle database is installed
automatically granted the DBA role
has a default password: MANAGER (make sure you change it)
used to create additional tables and views that display administrative information
used to create internal tables and views used by various Oracle database options and tools
Never use the SYSTEM schema to store tables of interest to non-administrative users.

sys --> owner of data dictionary
system --> To perform routine database administration tasks.

SYS
The SYS user owns all base tables and user-accessable view of the data dictionary (Oracle configuration information). No Oracle user should ever alter (update, delete, or insert) any rows or schema objects conatained in the SYS schema, because such activity can compromise data integrety. The security administrator must keep strict control of this central account.
SYSTEM
The SYSTEM user is used to create additional tables and views that display administrative information, and internal tables and views used by various Oracle options and tools.
SYSMAN
The SYSMAN user represents the Enterprise Manager super admin account. This EM admin can create and modify other EM admin accounts as well as admin the database instance itself.
DBSNMP
The DBSNMP user is used by EM to monitor the database. EM uses this account to access performance stats about the database. The DBSNMP credentials sometimes referred to as the monitoring credentials.


The SYSAUX tablespace provides storage of non-sys-related tables and indexes that traditionally were placed in the SYSTEM tablespace. For example, the tables and indexes that were previously owned by the system user can now be specified for a SYSAUX tablespace.
select * from v$sysaux_occupants;

I hope you all have enjoyed reading this article. Comments are welcome....

No comments:

Post a Comment