6.3 Creating Operating System Privileges Groups

The following sections describe how to create operating system groups for Oracle Grid Infrastructure and Oracle Database:

  • Creating the OSASM Group
    You must designate a group as the OSASM group (asmadmin) during installation. Members of this group are granted the SYSASM system privileges to administer storage.
  • Creating the OSDBA for ASM Group
    You must designate a group as the OSDBA for ASM (asmdba) group during installation. Members of this group are granted access privileges to Oracle Automatic Storage Management.
  • Creating the OSOPER for ASM Group
    You can choose to designate a group as the OSOPER for ASM group (asmoper) during installation. Members of this group are granted startup and shutdown privileges to Oracle Automatic Storage Management.
  • Creating the OSDBA Group for Database Installations
    Each Oracle Database requires an operating system group to be designated as the OSDBA group. Members of this group are granted the SYSDBA system privileges to administer the database.
  • Creating an OSOPER Group for Database Installations
    Create an OSOPER group only if you want to identify a group of operating system users with a limited set of database administrative privileges (SYSOPER operator privileges).
  • Creating the OSBACKUPDBA Group for Database Installations
    You must designate a group as the OSBACKUPDBA group during installation. Members of this group are granted the SYSBACKUP privileges to perform backup and recovery operations using RMAN or SQL*Plus.
  • Creating the OSDGDBA Group for Database Installations
    You must designate a group as the OSDGDBA group during installation. Members of this group are granted the SYSDG privileges to perform Data Guard operations.
  • Creating the OSKMDBA Group for Database Installations
    You must designate a group as the OSKMDBA group during installation. Members of this group are granted the SYSKM privileges to perform Transparent Data Encryption keystore operations.
  • Creating the OSRACDBA Group for Database Installations
    You must designate a group as the OSRACDBA group during database installation. Members of this group are granted the SYSRAC privileges to perform day–to–day administration of Oracle databases on an Oracle RAC cluster.