For oracle unlock account, what is the minimum permissions? I want to make a general account specifically do unlock account, in addition to understand the lock accounts, other can't do it, look up some information on the Internet, are simply give the dba privileges, but such authorization does not conform to the principle of least privilege,

CodePudding user response:

 - should be this 

Grant the alter user to username; 

CodePudding user response:

reference 1st floor wmxcn2000 response:

 - should be this 

Grant the alter user to username; 

Authorized after the alter user, in addition to understand the lock account, can modify the account password, especially the password of sys, this also is very dangerous
Permissions are a bit big