Oracle Database: Administrative Accounts — SYS, SYSTEM, DBA
About Roles
Roles are groupings of privileges that you can use to create different levels of database access.
About Administrative Accounts
By default, when Oracle Database is installed, the following administrative accounts are automatically created:
- SYS (Granted the DBA role)
Under the schema of SYS user, all base tables and views for the database data dictionary are stored, which are critical for the operation of Oracle database.
Ensure that most database users are never able to connect to Oracle Database with the SYS account.
- SYSTEM (Granted the DBA role)
The SYSTEM user can create additional tables and views that display administrative information as well as internal tables and views.
DBA Role
If you have got a database, we need to have someone who knows how to run it. This is where Oracle Database Administrators (DBA) come in.
This role contains most database system privileges so it should be only granted to actual database administrators.
The DBA, however, does not include the SYSDBA or SYSOPER system privileges. The SYSDBA and SYSOPER are administrative privileges required to perform basic database operations such as creating the database and instance startup and shutdown.
