AIX and Oracle Account Privileges

Hi Gareth,

sorry for the delay. Do you have the Oracle-Database-SolutionPack-Guide.pdf available?

This states the following for account privileges -

Configuring the Oracle Database SolutionPack with an unprivileged account:

The Watch4net collector must connect to each instance of Oracle databases and perform SQL queries. 

You can use either an administrator equivalent system account, or create a dedicated system account for the collector. If you want to use the last option, please ask the DBA administrator to run the following query against every instances/RAC cluster. This will create a "watch4net" account, which specific grant for the Watch4net collector.

create user

watch4net identified by securepassword default tablespace users temporary tablespace temp;

grant connect, resource to watch4net;

grant select on V_$SYSSTAT to watch4net;

grant select on v_$filestat to watch4net;

grant select on v_$database to watch4net;

gr

ant select on dba_data_files to watch4net;

grant select on dba_extents to watch4net;

grant select on dba_free_space to watch4net;

grant select on v_$parameter to watch4net;

grant select on v_$sgainfo to watch4net;

grant select on v_$rowcache to watch4net;

grant select on v_$librarycache to watch4net;

grant select on v_$latch to watch4net;

grant select on v_$rollstat to watch4net;

grant select on v_$dispatcher to watch4net;

grant select on v_$instance to watch4net;

grant select on v_$sesstat to watch4net;

gr

ant select on v_$statname to watch4net;

grant select on v_$session to watch4net;

grant select on v_$sess_io to watch4net;

grant select on v_$asm_disk to watch4net;

grant select on v_$asm_diskgroup to watch4net;

grant select on v_$logfile to watch4net;

gran

t select on v_$log to watch4net;

For Oracle 11g, you'll also need to run:

begin

dbms_network_acl_admin.create_acl (

acl => 'Resolve_Access.xml',

description => 'Resolve Network Access using UTL_INADDR',

principal => 'WATCH4NET',  -- MUST BE IN CAPS

is_grant => TRUE,

privilege => 'resolve',

start_date => null,

end_date => null

);

commit;

end;

begin

dbms_network_acl_admin.assign_acl (

acl => 'Resolve_Access.xml',

host => '*',

lower_port =>

null,

upper_port => null);

commit;

end;