Predefined Administrative Accounts

A default Oracle Database installation provides a set of predefined administrative accounts. These are accounts that have special privileges required to administer areas of the database, such as the CREATE ANY TABLE or ALTER SESSION privilege, or EXECUTE privileges on packages owned by the SYS schema. The default tablespace for administrative accounts is either SYSTEM or SYSAUX.

To protect these accounts from unauthorized access, the installation process expires and locks most of these accounts, except where noted in Table: Predefined Oracle Database Administrative User Accounts. As the database administrator, you are responsible for unlocking and resetting these accounts, as described in "Expiring and Locking Database Accounts".

Table: Predefined Oracle Database Administrative User Accounts lists the administrative user accounts provided by Oracle Database.

Predefined Oracle Database Administrative User Accounts

User Account	Description	Status After Installation
`ANONYMOUS`	Account that allows HTTP access to Oracle XML DB. It is used in place of the `APEX_PUBLIC_USER` account when the Embedded PL/SQL Gateway (EPG) is installed in the database. EPG is a Web server that can be used with Oracle Database. It provides the necessary infrastructure to create dynamic applications.	Expired and locked
`CTXSYS`	The account used to administer Oracle Text. Oracle Text enables you to build text query applications and document classification applications. It provides indexing, word and theme searching, and viewing capabilities for text. See Oracle Text Application Developer's Guide.	Expired and locked
`DBSNMP`	The account used by the Management Agent component of Oracle Enterprise Manager to monitor and manage the database. See Oracle Enterprise Manager Grid Control Installation and Basic Configuration.	Open Password is created at installation or database creation time.
`EXFSYS`	The account used internally to access the `EXFSYS` schema, which is associated with the Rules Manager and Expression Filter feature. This feature enables you to build complex PL/SQL rules and expressions. The `EXFSYS` schema contains the Rules Manager and Expression Filter DDL, DML, and associated metadata. See Oracle Database Rules Manager and Expression Filter Developer's Guide.	Expired and locked
`LBACSYS`	The account used to administer Oracle Label Security (OLS). It is created only when you install the Label Security custom option. See "Enforcing Row-Level Security with Oracle Label Security" and Oracle Label Security Administrator's Guide.	Expired and locked
`MDSYS`	The Oracle Spatial and Oracle Multimedia Locator administrator account. See Oracle Spatial Developer's Guide.	Expired and locked
`MGMT_VIEW`	An account used by Oracle Enterprise Manager Database Control.	Open Password is randomly generated at installation or database creation time. Users do not need to know this password.
`OLAPSYS`	The account that owns the OLAP Catalog (CWMLite). This account has been deprecated, but is retained for backward compatibility.	Expired and locked
`ORDDATA`	This account contains the Oracle Multimedia DICOM data model. See Oracle Multimedia DICOM Developer's Guide for more information.	Expired and locked
`OWBSYS`	The account for administrating the Oracle Warehouse Builder repository. Access this account during the installation process to define the base language of the repository and to define Warehouse Builder workspaces and users. A data warehouse is a relational or multidimensional database that is designed for query and analysis. See Oracle Warehouse Builder Installation and Administration Guide.	Expired and locked
`ORDPLUGINS`	The Oracle Multimedia user. Plug-ins supplied by Oracle and third-party, format plug-ins are installed in this schema. Oracle Multimedia enables Oracle Database to store, manage, and retrieve images, audio, video, DICOM format medical images and other objects, or other heterogeneous media data integrated with other enterprise information. See Oracle Multimedia User's Guide and Oracle Multimedia Reference.	Expired and locked
`ORDSYS`	The Oracle Multimedia administrator account. See Oracle Multimedia User's Guide, Oracle Multimedia Reference, and Oracle Multimedia DICOM Developer's Guide.	Expired and locked
`OUTLN`	The account that supports plan stability. Plan stability prevents certain database environment changes from affecting the performance characteristics of applications by preserving execution plans in stored outlines. `OUTLN` acts as a role to centrally manage metadata associated with stored outlines. See Oracle Database Performance Tuning Guide.	Expired and locked
`SI_INFORMTN_SCHEMA`	The account that stores the information views for the SQL/MM Still Image Standard. See Oracle Multimedia User's Guide and Oracle Multimedia Reference.	Expired and locked
`SYS`	An account used to perform database administration tasks. See SYS and SYSTEM Users.	Open Password is created at installation or database creation time.
`SYSMAN`	The account used to perform Oracle Enterprise Manager database administration tasks. The `SYS` and `SYSTEM` accounts can also perform these tasks. See Oracle Enterprise Manager Grid Control Installation and Basic Configuration.	Open Password is created at installation or database creation time.
`SYSTEM`	A default generic database administrator account for Oracle databases. For production systems, Oracle recommends creating individual database administrator accounts and not using the generic `SYSTEM` account for database administration operations. See SYS and SYSTEM Users.	Open Password is created at installation or database creation time.
`WK_TEST`	The instance administrator for the default instance, `WK_INST`. After you unlock this account and assign this user a password, then you must also update the cached schema password using the administration tool Edit Instance Page. Ultra Search provides uniform search-and-location capabilities over multiple repositories, such as Oracle databases, other ODBC compliant databases, IMAP mail servers, HTML documents managed by a Web server, files on disk, and more. See Oracle Ultra Search Administrator's Guide.	Expired and locked
`WKSYS`	An Ultra Search database super-user. `WKSYS` can grant super-user privileges to other users, such as `WK_TEST`. All Oracle Ultra Search database objects are installed in the `WKSYS` schema. See Oracle Ultra Search Administrator's Guide.	Expired and locked
`WKPROXY`	An administrative account of Oracle9i Application Server Ultra Search. See Oracle Ultra Search Administrator's Guide.	Expired and locked
`WMSYS`	The account used to store the metadata information for Oracle Workspace Manager. See Oracle Database Workspace Manager Developer's Guide.	Expired and locked
`XDB`	The account used for storing Oracle XML DB data and metadata. Oracle XML DB provides high-performance XML storage and retrieval for Oracle Database data. See Oracle XML DB Developer's Guide.	Expired and locked

Predefined Administrative Accounts

Related Topics