Re: use of generic oracle accounts

  • From: "Niall Litchfield" <niall.litchfield@xxxxxxxxx>
  • To: joseph.armstrong-champ@xxxxxxxxx
  • Date: Wed, 24 Oct 2007 15:19:16 +0100

The only immediate drawback that I can see is that SYSDBA == SYS always.
You'd be better off auditing sysdba actions by osuser (which IIRC 10g does
anyway). Granting dba to individual accounts seems reasonable enough to me.

On 10/23/07, Joe Armstrong-Champ <joseph.armstrong-champ@xxxxxxxxx> wrote:
> Our auditors are concerned with the fact that we share the sys and
> system accounts among the dba group. Has anyone ever created equivalent
> accounts for each dba member? If so, what are the problems with doing
> this?
> Thanks.
> Joe
> --

Niall Litchfield
Oracle DBA

Other related posts: