Ingesting Oracle Metadata without DBA Privileges

ingestion
1

Original Slack Thread

Hi Team,
Does Ingesting metadata from Oracle need the “DBA” privilege? It doesn’t work when we try to connect Oracle with “read-only” privilege user due to client’s strict access limitation.
Thanks a lot

2

<@U050FGBMF7X> DBA privilege required

3

Got it. Thank you:+1:

4

But I’m a little bit curious about why Datahub requires so high privilege. The client complained it as they compared Datahub to other metadata products. :joy:. For us, this is a good opportunity to introduce Datahub when this client invited us to join their POC.

5

<@U04N9PYJBEW> Is it possible to run Oracle connector without DBA privileges ?

6

I don’t think you should need the full dba privileges. However, the Oracle user you’re using will need read access to dba_users and dba_tables, as well as any tables you want to profile. Do you know if your “read-only” role provides access to those dba_ tables?

7

<@U04N9PYJBEW> Thanks. Actually our engineer is trying to test this method you mentioned. Hope we could find the way. We’re verifying some objects which are need separate authorization. For exmaple:
DBA_USERS
DBA_TABLES
DBA_VIEWS
DBA_TAB_COLUMNS
DBA_TAB_PRIVS
DBA_TABLESPACES
DBA_OBJECTS

8

<@U04N9PYJBEW> It works after granting read access to DBA_USERS, DBA_TABLES, DBA_TAB_COLUMNS. :+1:

9

<@U04N9PYJBEW> It would be good if we add this in our documentation
cc: <@U04QRNY4ZHA>

10

Thanks for the heads up!