Base Oracle Userid applicability

[smcpoland]

Dear all;

first many thanks in advance and I used to be a techie (IBM SysProg) so please forgive my question which negates everything I used to live for.

ORACLE - AIX environment

Internal Audit have demanded that our Oracle DBA's not use the Base Oracle Userid and Password (naturally the password has been changed but...), and they assign themselves Userids with appropriate rights. No problems you would think, ha, the Oracle DBA's are very specific on this:

they state they need the Oracle account to do the following:

- starting the listener
- Modifing configuration files like tnsnames.ora, listener.ora, init file and others
- Handling of the database archive logs
- Troubleshooting backup/recovery problems and issues
- Applying Oracle patches
- Clean up of oracle UNIX allocated resources

As far as I am aware they are wrong and it is possible to assign individual Userids with the appropriate rights to do these functions;

Now I know many will think - you can't ask us to answer this, we demand access - but like I say I used to be a techie and I do understand, however the proper answer would be gratefully received.

As for the Oracle documention, ha ha ha ha - it seems to have magically disappeared...


Many thanks in advance
Kindest regards
Sean

[davey23uk]

- starting the listener

nope

- Modifing configuration files like tnsnames.ora, listener.ora, init file and others

can be done with group permissions

- Handling of the database archive logs

what kind of handling?

- Troubleshooting backup/recovery problems and issues

Dont need oracle account for that

- Applying Oracle patches

definitely need oracle access for that

- Clean up of oracle UNIX allocated resources

need oracle access or root

the docs are are http://tahiti.oracle.com or http://otn.oracle.com