Register Login

Difference between SYSDBA Privileges and SYSOPER Privileges

Updated May 18, 2018

Sysdba Privileges vs. Sysoper Privileges

Hello everyone,

Why SYSOPER has limited session privilege?

SQL> show user;
USER is "SYS"

SQL> select count(*) from session_privs;
COUNT(*)
----------
166

SQL> conn /as sysoper
Connected.

SQL> select count(*) from session_privs;
COUNT(*)
--------
  3

SQL> show user;
USER is "PUBLIC"

SQL> select * from session_privs;
PRIVILEGE
----------------------------------------
CREATE SESSION
RESTRICTED SESSION
SYSOPER
SQL> conn /as sysdba
Connected.

SQL> grant dba to rs;
Grant succeeded.

SQL> conn rose/rs
Connected.

SQL> select count(*) From session_privs;
  COUNT(*)
----------
       161

    SYSDBA PRIVILEGE having session privilege: 166
    SYSOPER PRIVILEGE having session privilege: 03
    rs (normal dba ROLE) having session privilege: 161

Please clarify - where I am unable to understand about privileges?

Thanks.


Comments

  • 29 May 2017 1:50 pm Romil Tripathi Helpful Answer

    SYSOPER

    SYSOPER privileges allows user to perform basic tasks without looking inside user data.

    Operations allowed by SYSOPER privilege:

    • Instance startup, mount & database open ,
    • Instance shutdown, dismount & database close ,
    • Alter database BACKUP, ARCHIVE LOG, and RECOVER.

    SYSDBA:-

    SYSDBA privileges has lot more functionality then sysoper privileges.

    Operations allowed by SYSDBA privilege:

    • SYSDBA privilege includes all SYSOPER privileges plus full system privileges (with the ADMIN option), plus 'CREATE DATABASE' etc       
    • This is effectively the same set of privileges available when previously connected INTERNAL. 

×