Tag Archives: sysrac

Orapw command and new privileges in Oracle

Understand 12c released ORAPW command and new privileges

In 11g, administrative privileges mostly depend on one role Sysdba.
In the 12c release, Oracle creates new roles related to tasks or reduced privileges for specific tasks.

SYSBACKUP: privileges is for rman backup and restore operation
SYSDG : Privileges is used for Data Guard Operations
SYSKM : Privileges is used for transparent data encryptions
SYSRAC : Managed RAC services (released in 12.1.0.2 )

Note: SYSRAC is not available in password files or network authentication methods

Check SYSRAC privileges with the example:

grant sysrac to c##test;

Error
ORA-28190: SYSRAC administrative privileges cannot be granted to other users

Migration of Old 12c release 1 password file to 12c release 2

--first rename old file and migrate old password file to new format 12.2
orapw file=orapwcdb1 inputfile=orapwcdb12.1 format=12.2

— Old password file in 12.1
orapw file=orapwcdb1 entries=5 format=12

Check the password file format

orapwd describe file=orapwcdb1
Password file description format=12.2 -- it is 12.2 released format

Note: default format is 12 as released in 12.1

Change and define the name of OS group in lib file

In Linux
1. Go to oracle home

$ORACLE_HOME/rdbms/lib/config.[cs]

2. Define the name and group

#define SS_DBA_GRP "dba"
#define SS_OPER_GRP "oper"
#define SS_ASM_GRP ""
#define SS_BKP_GRP "backupdba"
#define SS_DGD_GRP "dgdba"
#define SS_KMT_GRP "kmdba"
#define SS_RAC_GRP "rac"

3. rename the file and link in Linux

mv config.o config.o.orig
make -f ins_rdbms.mk ioracle

In Windows:
Windows User Group is ORA_%HOSTNAME%_SYSRAC