Skip to content

Commit a1af910

Browse files
committed
Document oracle db user priviledges required.
1 parent 96755a4 commit a1af910

File tree

2 files changed

+36
-0
lines changed

2 files changed

+36
-0
lines changed

en/identity-server/7.0.0/docs/deploy/configure/databases/carbon-database/change-to-oracle.md

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -118,6 +118,24 @@ When the database owner is not the user used to connect to the database, specify
118118
parentSchema = "<parent_schema_name>"
119119
```
120120

121+
!!! note "Database user priviledges"
122+
123+
When a custom database user is created, please note that the following privildges should be granted according to the purpose of the user.
124+
125+
- Execute the below permissions on the database to perform DDL operations.
126+
- CREATE SESSION, ALTER SESSION, UNLIMITED TABLESPACE, CREATE VIEW, CREATE SEQUENCE, CREATE TABLE, CREATE PROCEDURE, CREATE TRIGGER, CREATE PUBLIC SYNONYM
127+
- ex: `GRANT CREATE SESSION TO <db-user>;`
128+
129+
- Execute the below permissions on the database to perform DML operations.
130+
- CREATE SESSION, ALTER SESSION, UNLIMITED TABLESPACE
131+
- ex: `GRANT CREATE SESSION TO <db-user>;`
132+
133+
- When a user accessing the tables is not the owner of the tables, the following permissions should be granted on the table.
134+
- SELECT, INSERT, DELETE, UPDATE
135+
- ex: `GRANT SELECT, INSERT, DELETE, <db-user>.<table-name>;`
136+
137+
Please refer the offcial [oracle documentation](https://docs.oracle.com/en/database/oracle/oracle-database/19/sqlrf/GRANT.html#GUID-20B4E2C0-A7F8-4BC8-A5E8-BE61BDC41AC3) for further details.
138+
121139
---
122140
## Configure the connection pool behavior on return
123141

en/identity-server/next/docs/deploy/configure/databases/carbon-database/change-to-oracle.md

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -118,6 +118,24 @@ When the database owner is not the user used to connect to the database, specify
118118
parentSchema = "<parent_schema_name>"
119119
```
120120

121+
!!! note "Database user priviledges"
122+
123+
When a custom database user is created, please note that the following privildges should be granted according to the purpose of the user.
124+
125+
- Execute the below permissions on the database to perform DDL operations.
126+
- CREATE SESSION, ALTER SESSION, UNLIMITED TABLESPACE, CREATE VIEW, CREATE SEQUENCE, CREATE TABLE, CREATE PROCEDURE, CREATE TRIGGER, CREATE PUBLIC SYNONYM
127+
- ex: `GRANT CREATE SESSION TO <db-user>;`
128+
129+
- Execute the below permissions on the database to perform DML operations.
130+
- CREATE SESSION, ALTER SESSION, UNLIMITED TABLESPACE
131+
- ex: `GRANT CREATE SESSION TO <db-user>;`
132+
133+
- When a user accessing the tables is not the owner of the tables, the following permissions should be granted on the table.
134+
- SELECT, INSERT, DELETE, UPDATE
135+
- ex: `GRANT SELECT, INSERT, DELETE, <db-user>.<table-name>;`
136+
137+
Please refer the offcial [oracle documentation](https://docs.oracle.com/en/database/oracle/oracle-database/19/sqlrf/GRANT.html#GUID-20B4E2C0-A7F8-4BC8-A5E8-BE61BDC41AC3) for further details.
138+
121139
---
122140

123141
## Configure the connection pool behavior on return

0 commit comments

Comments
 (0)