The following is a list of new features or enhancements provided with Oracle Database 12c Release 2 (12.2):

• New Administrator Role

  Oracle Database 12c Release 2 (12.2) provides support for separation of duty for Oracle Database by introducing the SYSRAC role for Oracle Real Application Clusters (Oracle RAC) management. SYSRAC, like SYSDG, SYSBACKUP, and SYSKM, enables you to enforce separation of duty and reduce reliance on the use of SYSDBA on production systems. The SYSRAC role is the default mode and is assigned only the priveleges required for connecting to the database by the clusterware agent on behalf of the Oracle RAC utilities such as srvctl.

  Assigning a separate role for administering Oracle RAC (SYSRAC) improves the security of the Oracle database and reduces reliance on theSYSDBA role to administer Oracle RAC. SYSRAC adds to the roles SYSKM, SYSDG, and SYSBACKUP in release 12.1 that can administer key management, Oracle Data Guard, and RMAN backup respectively. With these administrative roles, customers can implement separation of duty in their environment according to their business needs. For example, customers can create a named administrative account and grant only the administrative roles needed such as SYSRAC and SYSDG to manage both Oracle RAC and Oracle Data Guard configurations.

  See Also:

  • Oracle Database Administrator's Guide for more information about the OSDBA, OSOPER, OSBACKUP, OSDG, and OSKM groups, and the SYSDBA, SYSOPER, SYSBACKUP, SYSDG, SYSKM, and SYSRAC roles

  • Oracle Automatic Storage Management Administrator's Guide for more information about OSASM and SYSASM

  • Oracle Database Security Guide

  • Oracle Database Installation Guide for Linux