Oracle - grant non-dba user rigths to create grants on another user objects -
Is there any possibility to give regular users the Oracle database privilege to provide access to the table in any other schema? Due to security policy in our company, I can not grant DBA nor sysdba privilege only to this user, because I can get many such solutions. My goal is to create special accounts with credentials that can not only exceed DBA tasks and increase regular user privileges.
I want something like this:
- We have User1, user2 and user3
- We give some special privileges to user1
- We can now execute as user: Choose user2.table1 on user3
Any thoughts on how I can get it ?
You have the option to use the qualifier:
Specify the grant option to grant the grantee the object privilege for other users and roles.
i.e. if the user allows SELECT to USER2 and you want USER2 to be able to promote user grants, you can use the following when you are connected as USER1
With the option of grant, select user on user 2
You can do the following while connecting as USER2
Select for Grant User
Comments
Post a Comment