What is the difference between sys , sysdba and other accounts in oracle ?
Can u list out the special privilages that have and others does not have ?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
sys is a username .. which is by default a sysdba... sysdba is like a role of that user..
sys is the most powerful user in oracle.. it owns whole data dictionary.. sys credentials reside outside of oracle.. so it can connect to database instance even when instance is down.. this is useful when you need to start the database. or do some maintenance tasks while instance is down..
other accounts are normal accounts...
First, "sys" is an account (or user) but "sysdba" is a privilege. The "sys" account (user) in Oracle is something like the "root" user in UNIX/LInux (or an administrator account in Windows) and has privileges automatically that most other Oracle users do not have, at least by default. "Sysdba" is a role or privilege that the "sys" user has by default, but "sys" can give (grant) this privilege to other users. Most other accounts in Oracle are much more limited and have only the privileges that have been explicitly granted to them after they are created by "sys" or another user who has the "create user" system privilege.
SYS is an account, the most powerful user in the system and owner of the data dictionary
sysdba is a login modifier, it adds even more privileges.
If you are sys you will be sysdba and viceversa (sqlplus "/ as sysdba" will log you in as SYS)
SYS not only has all privileges but it is a "magic" user in that some rules and permissions that affect other users don't apply to SYS.
Logon triggers for instance don't apply to SYS.
Only SYS can query the x$ views.
Other accounts, even accounts with every role and privilege assigned to them will always be less powerful than SYS, but maybe not in ways that you'll notice most of the time.
That's why it's almost never necessary to log in as SYS, even for other DBA tasks, you can log in as SYSTEM or better yet a "normal" user with the DBA role granted to it.
Only use SYS when you need to because it doesn't have to obey the rules.
Only sys can shutdown and start database/instance because it has sysdba privilege by default.
aiklamha,
you said "sys credentials reside outside of oracle". Did I misunderstand you?
SYS is definitely a database user with database password and objects. So its credentials are in the definitely in the database.
R.
SYS user is database user but its authentication is not done via database... it is done by password file or OS Authentication...
You also said... SYS can start the database... how will database authenticate SYS user if database instance is down? offcourse it can't.. that's why the users whose role is set to DBA have their passwords outside of database..
read following for details
http://www.adp-gmbh.ch/ora
not all users with DBA role have passwords outside of database.
I think you might be confusing Operating System user groups with database roles.
Your group may be dba for the purposes of installing/modifying Oracle binaries and config files.
but that is completely independent of the database users with DBA role.
Business Accounts
Answer for Membership
by: angelIIIPosted on 2008-04-23 at 12:12:10ID: 21424220
please start reading here:
http://www.adp-gmbh.ch/ora