Granting SYS_RUN_REPLICATION_ROLE

The SYS_RUN_REPLICATION_ROLE system role is active only for users connecting through the dbremote or dbmlsync utilities.

By default, when granting SYS_RUN_REPLICATION_ROLE, the underlying system privileges were inherited by members of the receiving group. To prevent inheritance, the WITH NO SYSTEM PRIVILEGE INHERITANCE clause can be included for this system role only.

This default set of system privileges cannot be revoked from the system role. Additional system privileges and roles can be granted and revoked from this system role.

The minimum number of role administrators (MIN_ROLE_ADMINS) database option ensures that a designated number of users always exist in the database who can grant and revoke the MANAGE REPLICATION system privilege to other users.

The SYS_AUTH_DBA_ROLE compatibility role is granted by default to the SYS_RUN_REPLICATION_ROLE system role to address any possible requirements for additional system privileges to perform other replication related authorized tasks over and above the above-noted explicitly granted system privileges. It is recommended, however, that the SYS_AUTH_DBA_ROLE compatibility role be revoked from SYS_RUN_REPLICATION_ROLE system role and those specific additional system privileges or roles identified be explicitly granted to the SYS_RUN_REPLICATION_ROLE system role.

The WITH ADMIN OPTION or WITH ADMIN ONLY OPTION clauses are not valid when granting the SYS_RUN_REPLICATION_ROLE system role.