3 Establishing Oracle GoldenGate Credentials

CREATE SESSION

X

X

X

Connect to the database

CONNECT

X

X

X

For Replicat, required only if Replicat owns target objects. Alternatively, use CREATE object.

RESOURCE

X

X

X

Create objects

If RESOURCE cannot be granted to Replicat, use:

ALTER USER user QUOTA {size | UNLIMITED} ON tablespace;

ALTER ANY TABLE

X

X

Required for Oracle 12.1.0.1 only to issue the ADD TRANDATA command.

ALTER SYSTEM

X

X

Perform administrative changes, such as enabling logging

ALTER USER <GGADMIN> set container_data=all container=current;

X

X

Required for multitenant architecture and <GGADMIN> should be a valid Oracle GoldenGate administrator schema.

Privileges granted through dbms_goldengate_auth.grant_admin_privilege

X

X

X

(Extract) Grants privileges for both classic and integrated Extract, including the logmining server.(Replicat) Grants privileges for both nonintegrated and integrated replicat, including the database inbound server (Oracle 11.2.0.4 or later).

Any or all of optional privileges of dbms_goldengate_auth.grant_admin_privilege

X

X

X

• Capture from Data Vault

• Capture from Virtual Private Database

• Capture redacted data

See About the dbms_goldengate_auth.grant_admin_privilege Package for more information.

INSERT, UPDATE, DELETE on target tables

X

Apply replicated DML to target objects

CREATE TABLE

X

Create a checkpoint table in target database

DDL privileges on target objects (if using DDL support)

X

Issue replicated DDL on target objects

DBA

X

X

DDL and sequence support

LOCK ANY TABLE

X

Lock target tables. Only required for initial load using direct bulk load to SQL*Loader.

SELECT ANY TRANSACTION

X

Use a newer Oracle ASM API. See Mining ASM-stored Logs in Classic Capture Mode.

CREATE SESSION

and

ALTER SESSION

X

X

X

Connect to the database

ALTER SYSTEM

X

X

Perform administrative changes, such as enabling logging

RESOURCE

X

X

X

Create objects

If RESOURCE cannot be granted to Replicat, use:

ALTER USER user QUOTA {size | UNLIMITED} ON tablespace;

CONNECT

X

X

X

For Replicat, required only if Replicat owns target objects. Alternatively, use CREATE object.

SELECT ANY DICTIONARY

X

X

X

Query data dictionary objects in the SYS schema

FLASHBACK ANY TABLE

or

FLASHBACK ON schema.table

X

X

Make flashback queries

SELECT ANY TABLE

or

SELECT on a schema.table

X

X

X

Perform queries on any table

SELECT on dba_clusters

X

X

INSERT, UPDATE, DELETE on target tables

X

Apply replicated DML to target objects

CREATE TABLE

X

Create a checkpoint table in target database

EXECUTE on DBMS_FLASHBACK package

X

X

Call DBMS_FLASHBACK.GET_SYSTEM_CHANGE_NUMBER

DDL privileges on target objects (if using DDL support)

X

Issue replicated DDL on target objects

GGS_GGSUSER_ROLE (if using DDL support)

X

X

DML privileges on Oracle GoldenGate DDL objects. Role is created by user with SYSDBA privilege during installation of DDL objects.

DELETE on Oracle GoldenGate DDL objects

X

Use parameters that maintain Oracle GoldenGate DDL objects

LOCK ANY TABLE

X

Lock target tables. Only required for initial load using direct bulk load to SQL*Loader.

SELECT ANY TRANSACTION

X

Use a newer Oracle ASM API. See Mining ASM-stored Logs in Classic Capture Mode.

Privileges granted through dbms_streams_auth.grant_admin_privilege

X

Interact with database logmining server

EXECUTE on dbms_logmnr_d package

X

Issue the REGISTER EXTRACT command

Required for Oracle version >= 11.1.0.5 and <= 11.2.0.1.

SELECT FROM sys.logmnr_buildlog

X

Issue the REGISTER EXTRACT command

Required for Oracle version >= 11.1.0.5 and <= 11.2.0.1.