Step 1: Create a Security Administrator Account

For greater security, you should apply separation of duty concepts when you assign responsibilities to the system administrators on your staff. For the tutorials used in this guide, you will create and use a security administrator account called sec_admin.

To create the sec_admin security administrator account:  

1. Start Database Control.

   See Accessing the Database Home Page for instructions about how to start Database Control.

2. Enter an administrator user name (for example, SYSTEM) and password, and then click Login.

   For the SYSTEM user, connect as Normal.

   The Database Home page appears.

3. Click Server to display the Server subpage.

4. Under Security, select Users.

   The Users page appears.

5. Click Create.

   The Create User page appears.

6. Enter the following information:

   • Name: sec_admin

   • Profile: Default

   • Authentication: Password

   • Enter Password and Confirm Password: Enter a password that meets the requirements in "Requirements for Creating Passwords".

   • Default Tablespace: SYSTEM

   • Temporary Tablespace: TEMP

   • Status: UNLOCKED

7. Click Roles to display the Edit User: SEC_ADMIN page.

8. Click Edit List.

   The Modify Roles page appears.

9. In the Available Roles list, select the SELECT_CATALOG_ROLE role and then then click Move to move it to the Selected Roles list. Then click OK to return to the Edit User page.

10. Click System Privileges to display the System Privileges subpage.

11. Click Edit List.

    The Modify System Privileges page appears.

12. In the Available System Privileges list, select the following privileges and then click Move to move each one to the Selected System Privileges list. (Hold down the Control key to select multiple privileges.)

    • CREATE PROCEDURE

    • CREATE ROLE

    • CREATE SESSION

    • SELECT ANY DICTIONARY

13. Click OK.

    The Create User page appears.

14. Under Admin Option, do not select the boxes.

15. Click OK.

    The Users page appears. User sec_admin is listed in the UserName list.