5.2 Standard Administration and Job Role Separation User Groups
Oracle Grid Infrastructure uses various operating system groups.
These operating system groups are designated with the logical role of granting operating system group authentication for administration system privilege for Oracle Clusterware and Oracle ASM.
- About Job Role Separation Operating System Privileges Groups and Users
Job role separation requires that you create different operating system groups for each set of system privileges that you grant through operating system authorization. - Oracle Software Owner for Each Oracle Software Product
Oracle recommends that you use appropriate operating system groups and users for all installations where you specify separate Oracle Home Users: - Standard Oracle Database Groups for Database Administrators
The Oracle Database supports multiple operating system groups to provide operating system authentication for database administration system privileges. - Oracle ASM Groups for Job Role Separation
The SYSASM, SYSOPER for ASM, and SYSDBA for ASM system privileges enables the separation of the Oracle ASM storage administration privileges from SYSDBA. - Extended Oracle Database Administration Groups for Job Role Separation
Oracle Database 12c Release 1 (12.1) and later releases provide an extended set of database groups to grant task-specific system privileges for database administration. - Operating System Groups Created During Installation
When you install either Oracle Grid Infrastructure or Oracle RAC, the user groups listed in the following table are created, if they do not already exist. - Example of Using Role-Allocated Groups and Users
You can use role-allocated groups and users that is compliant with an Optimal Flexible Architecture (OFA) deployment.