Mass Ingestion

Back Next

Oracle privileges for Amazon RDS for Oracle sources

If you have an Amazon RDS for Oracle source, you must grant certain privileges to the Mass Ingestion Databases user.

You must log in to Amazon RDS under the master username to run GRANT statements and procedures.

To grant the SELECT privilege, at minimum, on objects and system tables that are required for CDC processing, execute the following GRANT statements to the Mass Ingestion Databases user (cmid_user):

GRANT SELECT ON "PUBLIC"."V$ARCHIVED_LOG"           TO "cmid_user";
GRANT SELECT ON "PUBLIC"."V$DATABASE"               TO "cmid_user";
GRANT SELECT ON "PUBLIC"."V$LOG"                    TO "cmid_user";
GRANT SELECT ON "PUBLIC"."V$LOGFILE"                TO "cmid_user";
GRANT SELECT ON "PUBLIC"."V$TRANSPORTABLE_PLATFORM" TO "cmid_user";
GRANT SELECT ON "PUBLIC"."V$THREAD"                 TO "cmid_user";
GRANT SELECT ON "PUBLIC"."V$DATABASE_INCARNATION"   TO "cmid_user";

GRANT SELECT ON "SYS"."DBA_LOG_GROUPS"        TO "cmid_user";
GRANT SELECT ON "SYS"."DBA_LOG_GROUP_COLUMNS" TO "cmid_user";
GRANT SELECT ON "SYS"."DBA_TABLESPACES"       TO "cmid_user";

GRANT SELECT ON "SYS"."OBJ$"          TO "cmid_user";
GRANT SELECT ON "SYS"."TAB$"          TO "cmid_user";
GRANT SELECT ON "SYS"."IND$"          TO "cmid_user";
GRANT SELECT ON "SYS"."COL$"          TO "cmid_user";

GRANT SELECT ON "SYS"."PARTOBJ$"      TO "cmid_user";
GRANT SELECT ON "SYS"."TABPART$"      TO "cmid_user";
GRANT SELECT ON "SYS"."TABCOMPART$"   TO "cmid_user";
GRANT SELECT ON "SYS"."TABSUBPART$"   TO "cmid_user";
COMMIT;

To grant the SELECT privilege on some additional objects, run the following Amazon RDS procedures:

begin
rdsadmin.rdsadmin_util.grant_sys_object(
p_obj_name => 'DBA_USERS',
p_grantee => 'cmid_user',
p_privilege => 'SELECT',
p_grant_option => false);
end;
--
begin
rdsadmin.rdsadmin_util.grant_sys_object(
p_obj_name => 'ALL_TABLES',
p_grantee => 'cmid_user',
p_privilege => 'SELECT',
p_grant_option => false);
end;
--
begin
rdsadmin.rdsadmin_util.grant_sys_object(
p_obj_name => 'ALL_TAB_PARTITIONS',
p_grantee => 'cmid_user',
p_privilege => 'SELECT',
p_grant_option => false);
end;
--
begin
rdsadmin.rdsadmin_util.grant_sys_object(
p_obj_name => 'V_$PARAMETER',
p_grantee => 'cmid_user',
p_privilege => 'SELECT');
end;
--
begin
rdsadmin.rdsadmin_util.grant_sys_object(
p_obj_name => 'V_$SPPARAMETER',
p_grantee => 'cmid_user',
p_privilege => 'SELECT');
end;
--
begin
rdsadmin.rdsadmin_util.grant_sys_object(
p_obj_name => 'V_$STANDBY_LOG',
p_grantee => 'cmid_user',
p_privilege => 'SELECT');
end;
--
begin
rdsadmin.rdsadmin_util.grant_sys_object(
p_obj_name => 'V_$VERSION',
p_grantee => 'cmid_user',
p_privilege => 'SELECT');
end;
--
begin
rdsadmin.rdsadmin_util.grant_sys_object(
p_obj_name => 'INDPART$',
p_grantee => 'cmid_user',
p_privilege => 'SELECT');
end;
--
end;

To provide read access to the Amazon RDS online and archived redo logs, execute the following GRANT statements:

GRANT READ ON DIRECTORY ONLINELOG_DIR to "cmid_user";
GRANT READ ON DIRECTORY ARCHIVELOG_DIR to "cmid_user";

Rename Saved Search

Table of Contents

Mass Ingestion

Mass Ingestion

Oracle privileges for Amazon RDS for Oracle sources

Oracle privileges for Amazon RDS for Oracle sources