| Compute servers |
Operating system users: root/welcome1
oracle/We1come$
raadmin/welcome1 See note 1.
dbmadmin See note 1.
dbmmonitor See note 2.
raext/(locked and blocked from SSH access)
railm/(locked and blocked from SSH access)
rasys/(locked and blocked from SSH access)
rasec/(locked and blocked from SSH access)
Password for the GRUB boot loader: sos1Exadata Note 1: raadmin is created by default at the time of installation. Installation step 7 locks root access after completing the raadmin setup. Users are prompted for a password at that time, and all access to the Recovery Appliance is required to be performed as the raadmin user. All admin users created are part of the raadmin group, which includes the raadmin user. Note 2: dbmadmin, dbmmonitor, celladmin, cellmonitor do not have a default password with Exadata 19.3.2.0.0. The password is set to a random string, and the passwords must be changed before it can be used. Accounts: RA_AUTO is an internal automation/service account used by Recovery Appliance components for background operations (job execution, maintenance tasks, monitoring/housekeeping workflows, etc.). This account is typically referenced by Oracle-supplied scripts and/or scheduled processes. It's not intended for day-to-day human administration.
Do not drop, rename, or repurpose RA_AUTO. Avoid interactive use except under Oracle Support direction. If you need to assess its scope: review its roles/system privileges and any scheduled jobs owned by it. RA$ADMIN is a core administration account for Recovery Appliance management. This is commonly the primary database user used by RA management tooling to perform administrative functions. It is used for appliance-level administration tasks and to own/manage Recovery Appliance-specific metadata and operations.
Treat RA$ADMIN as high privilege; restrict login and credential distribution. Prefer using approved administrative pathways (Recovery Appliance tooling/roles) rather than using RA$ADMIN directly for routine tasks. Do not alter grants/roles unless guided by Oracle Support. Profiles: RA_SYS is an Oracle-supplied database profile used forRecovery Appliance-related accounts and/or internal administrative users. This is used to apply a known, Oracle-controlled baseline of password and resource limits that support Recovery Appliance operations.
Do not modify RA_SYS limits unless directed by Oracle Support. If you need a different policy for local/admin users, create a separate custom profile rather than changing Oracle-delivered ones. RA_STIG is an Oracle-supplied profile intended to help align the appliance database with STIG-style security hardening expectations (Security Technical Implementation Guide). This profile provides a more restrictive password policy and related account controls commonly required under hardened/compliance baselines (e.g., stricter password aging, complexity/verification, lockout controls).
Do not modify RA_STIG unless directed by Oracle Support. Database users: Note: Only local connections are allowed for externally authenticated users. SYS/We1come$
SYSTEM/We1come$
raext/(externally authenticated)
ralim/(externally authenticated)
rasec/(externally authenticated)
rasys/change^Me2
OSB tape backup application users: |
| Storage servers |
Note: dbmadmin, dbmmonitor, celladmin, cellmonitor do not have a default password with Exadata 19.3.2.0.0. The password is set to a random string, and the passwords must be changed before it can be used. root/welcome1
celladmin See note.
cellmonitor See note.
CELLDIAG
CELLDIAG is an Exadata storage software user, not an operating system user.
The password of the CELLDIAG user is reset to a random password during the "Apply Security Fixes" step of Oracle Exadata Deployment Assistant. If this step is not run, then the default password is Welcome12345. Password for the GRUB boot loader: sos1Exadata |
| RoCE Network Fabric |
|
| InfiniBand Network Fabric switches |
|
| Ethernet switches |
admin/welcome1
Note: Secure the enable mode password and secret values for the admin user. |
| Power distribution units (PDUs) |
|
| Compute server ILOMs |
root/welcome1
MSUser
Management Server (MS) uses this account to manage ILOM and reset it if it detects a hang. Do not modify this account. This account is to be used by MS only. Each time MS starts up, it deletes the previous MSUser account and re-creates the account with a randomly generated password. The MSUser password is not persisted anywhere. If you need to change account passwords regularly, you can restart MS to change the password of the MSUser account. |
| Storage server ILOMs |
|
| InfiniBand Network Fabric ILOMs |
|