Pega DB Admin privileges?
The Pega 7.3 install doc states to give the Pega DB Admin, "ANY" privileges, which gives this user system level privileges as well (outside of Pega schemas). Page 21 in the below link.
https://pdn.pega.com/documents/pega-731-platform-installation-guide-apache-tomcat-and-oracle
Are there any valid reasons this user has to be given system level privileges?
Is there a way to give just enough privileges to this DB user, such that Pega can run without issues and this user not have system level privileges?
***Edited by Moderator Marissa to add SR Details***
I did what you suggested and now Pega wont start.
The context file's
prconfig/database/databases/PegaRULES/dataSourceAdmin and
prconfig/database/databases/PegaDATA/dataSourceAdmin
are pointing to that DB Admin user.
What user should they be pointing to? The Base user (Pega_Data)?
This is DUAL schema setup.
Bump!
On Oracle setup, the run time base user has to be the same as data schema user. The database objects privilege will be automatically granted from rule schema to data schema.
Hi Yash,
Pega Admin user is not used during run time and base user is used generally.
As mentioned in the document Admin user is only used for administrative task.
After you are done with your installation process you may relinquish the grants that you dont want and Pega should work fine at runtime.
Thanks,
Ujjwal