Oracle – How to grant a user permission to create and change passwords for other users (like a security admin)

oracleSecurity

I have a user that is a security admin in the I.t. dept. I need to grant his Oracle user account privileges to be able to create new users, change passwords and change membership in other groups we created. This is basically a security admin that I do not want to give full sysdba/dba privileges to. That would be overkill. What exactly do I grant and how?

Best Answer

You just need to GRANT them the CREATE USER and ALTER USER system privileges.

E.g: GRANT ALTER USER TO UserAccountWithPermission;