You could write a script that always check permissions and put them back or barks if there is an issue before running the dm scripts. A hack if that is the main issue not too hard to automate and implement. I have had to play with DM in 11.2.0.2 lately and it is far from intuitive or impressive. There is a business opportunity here for a decent software developer I am sure. On Wed, Dec 31, 2014 at 3:10 AM, Niall Litchfield < niall.litchfield@xxxxxxxxx> wrote: > In EM 12.1.0.4 (not sure about 12.1.0.3 but its trivial to check) there's > a generate_masking_script verb for emcli. That would seem to fit the bill. > > On Tue, Dec 30, 2014 at 11:35 PM, Jeff C <backseatdba@xxxxxxxxx> wrote: > >> Is there a way to schedule generating a masking script? Or better yet, >> scheduling a script generation and executing the script. In EM 11 and 12 >> it seems that you have to pre-create the script. This has caused some >> problems because the script finds all the table permissions and revokes and >> re-grants permissions. But if I remove a permission but forgot to >> regenerate a script the whole masking script fails with something like: >> can't revoke permission not granted. >> I want to automate the whole thing. I currently have a script on a >> schedule to use rman duplicate to create a clone of my database. Then I >> want to schedule the masking to happen right after that is done. I don't >> have a license for the Provisioning pack, but if that is the only way this >> is possible then I will have to try to get that approved but that wont be >> easy. >> >> EE 11.2.0.2 w/ Masking Pack >> Windows Server 2008R2 >> Enterprise Manager 11g is currently where my Masking definitions are but >> I am working on converting them to my 12.1.0.3 setup of EM. >> >> Thanks, >> Jeff >> > > > > -- > Niall Litchfield > Oracle DBA > http://www.orawin.info >