Granting unlimited tablespace is redundant. You can always lock the account for a time period before you pull the trigger on dropping it, or audit logons. I don't recognize the account by the name LIB, but the script sure looks like something a vendor would produce. The only surprise is that it didn't grant DBA to LIB. Is it Oracle 9 or 10? Not that it matters, but 10 pulled some privileges from CONNECT. Otherwise, LIB can pretty much create all his tables/objects/code anyplace it wants and see the data dictionary as well as any other table owned by anyone else. Pretty powerful account Joel Patterson Database Administrator 904 727-2546 -----Original Message----- From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Ingrid Voigt Sent: Thursday, October 15, 2009 10:52 AM To: oracle-l@xxxxxxxxxxxxx Subject: Database User LIB Hi, we've found a user named LIB in one of our production systems (9.2.0.7 EE on Windows) and have no idea where he came from (created after the database and the application schemas) or what he is used for. The customer and application developer do not know this user either. Nobody connected as LIB in the last few weeks, but there are things that run only rarely. The schema holds no objects, the create script is CREATE USER LIB IDENTIFIED BY PASSWORD MEDIA DEFAULT TABLESPACE USERS TEMPORARY TABLESPACE TEMP2 PROFILE DEFAULT ACCOUNT UNLOCK; -- 3 Roles for LIB GRANT CONNECT TO LIB; GRANT RESOURCE TO LIB; GRANT SELECT_CATALOG_ROLE TO LIB; ALTER USER LIB DEFAULT ROLE ALL; -- 2 System Privileges for LIB GRANT SELECT ANY TABLE TO LIB; GRANT UNLIMITED TABLESPACE TO LIB; Does anybody know if this is an Oracle default schema for some special purpose? Any other idea how to identify its purpose other than waiting for a year or so? We would like to drop this user if it can be done without any damage. Thank you Ingrid -- GRATIS für alle GMX-Mitglieder: Die maxdome Movie-FLAT! Jetzt freischalten unter http://portal.gmx.net/de/go/maxdome01 -- //www.freelists.org/webpage/oracle-l -- //www.freelists.org/webpage/oracle-l