Granting SYS_RUN_REPLICATION_ROLE

The SYS_RUN_REPLICATION_ROLE system role is active only for users connecting through the dbremote or dbmlsync utilities.

The SYS_RUN_REPLICATION_ROLE system role is a member of the SYS_AUTH_DBA_ROLE compatibility role with full administrative rights.

The SYS_RUN_REPLICATION_ROLE system role can be granted to other roles with no administrative rights only (WITH NO ADMIN OPTION clause). The WITH ADMIN OPTION and WITH ADMIN ONLY OPTION clauses are not valid for this role.

By default, when granting SYS_RUN_REPLICATION_ROLE, the underlying system privileges were inherited by members of the receiving group. To prevent inheritance, the WITH NO SYSTEM PRIVILEGE INHERITANCE clause can be included for this system role only.

This default set of system privileges cannot be revoked from the system role. Additional system privileges and roles can be granted and revoked from this system role.

The minimum number of role administrators (MIN_ROLE_ADMINS) database option ensures that a designated number of users always exist in the database who can grant and revoke the MANAGE REPLICATION system privilege to other users.

The SYS_AUTH_DBA_ROLE compatibility role is granted by default to the SYS_RUN_REPLICATION_ROLE system role to address any possible requirements for additional system privileges to perform other replication related authorized tasks over and above the above-noted explicitly granted system privileges. It is recommended, however, that the SYS_AUTH_DBA_ROLE compatibility role be revoked from SYS_RUN_REPLICATION_ROLE system role and those specific additional system privileges or roles identified be explicitly granted to the SYS_RUN_REPLICATION_ROLE system role.