This preface contains:
This section describes changes in Oracle Database Administrator's Reference for Linux and UNIX-Based Operating Systems for Oracle Database 12c Release 2 (12.2).
The following is a list of new features or enhancements provided with Oracle Database 12c Release 2 (12.2):
New Administrator Role
Oracle Database 12c Release 2 (12.2) provides support for separation of duty for Oracle Database by introducing the SYSRAC role for Oracle Real Application Clusters (Oracle RAC) management. SYSRAC, like SYSDG, SYSBACKUP, and SYSKM, enables you to enforce separation of duty and reduce reliance on the use of SYSDBA on production systems. The SYSRAC role is the default mode and is assigned only the priveleges required for connecting to the database by the clusterware agent on behalf of the Oracle RAC utilities such as srvctl.
Assigning a separate role for administering Oracle RAC (SYSRAC) improves the security of the Oracle database and reduces reliance on theSYSDBA role to administer Oracle RAC. SYSRAC adds to the roles SYSKM, SYSDG, and SYSBACKUP in release 12.1 that can administer key management, Oracle Data Guard, and RMAN backup respectively. With these administrative roles, customers can implement separation of duty in their environment according to their business needs. For example, customers can create a named administrative account and grant only the administrative roles needed such as SYSRAC and SYSDG to manage both Oracle RAC and Oracle Data Guard configurations.
See Also:
Oracle Database Administrator's Guide for more information about the OSDBA, OSOPER, OSBACKUP, OSDG, and OSKM groups, and the SYSDBA, SYSOPER, SYSBACKUP, SYSDG, SYSKM, and SYSRAC roles
Oracle Automatic Storage Management Administrator's Guide for more information about OSASM and SYSASM