[ACCEPTED]-What's the difference between the Oracle SYS and SYSTEM accounts?-database-administration

Accepted answer
Score: 24

SYS owns the oracle data dictionary. Every 18 object in the database (tables, views, packages, procedures, etc. ) all 17 have a single owner. For the database dictionary, and 16 a whole lot of special tables (performance 15 views and the like) are all owned by the 14 SYS user.

The SYSTEM user is supposed to 13 be the master DBA user, with access to all 12 of these object. This reflects an early, and 11 long time, Oracle security design philosophy. You 10 build the application using one user, then 9 create a second with access (select, update, delete) but 8 not drop privileges. This gives you a "super-user" access 7 to your schema without being able to destroy 6 it accidentally. Over the years, thing have 5 been added to the SYSTEM account that may 4 have needed to be in the SYS account. But 3 very few people want to give out access 2 to their SYS account if they don't have 1 to.

Score: 16

SYS can connect AS SYSDBA, SYSTEM cannot.

SYSDBA privilege is required to 4 perform certain administrative tasks, like 3 CREATE DATABASEand DROP DATABASE, and query any tables despite GRANT'ed permissions 2 on them.

In fact, whenever you connect as 1 SYSDBA, you become a SYS.

More Related questions