Oracle Privileges for DDL Replication

Lists the Oracle 10g and 11g privileges that a user must have to perform DDL replication.

Note: Issuing GRANT ALL PRIVILEGES TO DDLUSER turns the DDL user to a super user similar to SYS and SYSTEM.
Different versions of Oracle have different permission requirements. For Oracle 10g and 11g, grant the DDL user permission to execute these commands:
  • ALTER ANY INDEX
  • ALTER ANY INDEXTYPE
  • ALTER ANY PROCEDURE
  • ALTER ANY TABLE
  • ALTER ANY TRIGGER
  • ALTER ANY TYPE
  • ALTER SESSION
  • BECOME USER
  • CREATE ANY INDEX
  • CREATE ANY INDEXTYPE
  • CREATE ANY PROCEDURE
  • CREATE ANY SYNONYM
  • CREATE ANY TABLE
  • CREATE ANY TRIGGER
  • CREATE ANY TYPE
  • CREATE ANY VIEW
  • CREATE INDEXTYPE
  • CREATE MATERIALIZED VIEW
  • CREATE PROCEDURE
  • CREATE PUBLIC SYNONYM
  • CREATE SYNONYM
  • CREATE TABLE
  • CREATE TRIGGER
  • CREATE TYPE
  • CREATE VIEW
  • DELETE ANY TABLE
  • DROP ANY INDEX
  • DROP ANY INDEXTYPE
  • DROP ANY MATERIALIZED VIEW
  • DROP ANY PROCEDURE
  • DROP ANY SYNONYM
  • DROP ANY TABLE
  • DROP ANY TRIGGER
  • DROP ANY TYPE
  • DROP ANY VIEW
  • DROP PUBLIC SYNONYM
  • INSERT ANY TABLE
  • SELECT ANY TABLE
  • UPDATE ANY TABLE

Revoke the DDL user's permission to execute:
  • ALTER DATABASE
  • ALTER ROLLBACK SEGMENT
  • ALTER SYSTEM
  • ALTER TABLESPACE
  • ANALYZE ANY
  • AUDIT ANY
  • AUDIT SYSTEM
  • CREATE DATABASE LINK
  • CREATE ROLLBACK SEGMENT
  • CREATE TABLESPACE
  • DROP PUBLIC DATABASE LINK
  • DROP ROLLBACK SEGMENT
  • DROP TABLESPACE
  • LOCK ANY TABLE