Privileges to non-SDE User schema in Oracle

[VishApte]

Hi all,

I created a oracle 11g user geodatabase called "ARCGIS" using ArcGIS for Desktop 10.1 "Create Enterprise Geodatabase" tool. The user ARCGIS did not exist in Oracle prior to running the tool. The tool created the user and gave some privileges to it. However, some of the privileges granted to the new user are not supported by our DBA. Typically,

GRANT DROP ANY VIEW TO ARCGIS;
GRANT DROP ANY INDEX TO ARCGIS;
GRANT ALTER ANY INDEX TO ARCGIS;
GRANT CREATE ANY VIEW TO ARCGIS;
GRANT CREATE ANY INDEX TO ARCGIS;
GRANT SELECT ANY TABLE TO ARCGIS;
GRANT CREATE ANY TRIGGER TO ARCGIS;

DBA wants to revoke these privileges. Is it OK to do so after the geodatabase is created? 10.1 document lists only following privs can be revoked after creation.


CREATE INDEX TYPE
CREATE LIBRARY
CREATE OPERATOR
CREATE PUBLIC SYNONYM
CREATE TYPE
CREATE VIEW
DROP PUBLIC SYNONYM

Thanks,
Vish

[TravisVal]

Hello Vish,

GRANT DROP ANY VIEW TO ARCGIS;
GRANT DROP ANY INDEX TO ARCGIS;
GRANT CREATE ANY VIEW TO ARCGIS;
GRANT CREATE ANY INDEX TO ARCGIS;
GRANT SELECT ANY TABLE TO ARCGIS;
GRANT CREATE ANY TRIGGER TO ARCGIS;
GRANT ALTER ANY INDEX TO ARCGIS;

These are only needed during upgrade.  You can revoke them, but upgrade will fail if your don't grant them back to SDE before you attempt to run it. 

Alter any index may also be required to allow the SDE user to perform some administrative tasks.

See this link for more information:
http://resources.arcgis.com/en/help/main/10.1/index.html#//002n0000002v000000

Travis