RDS Master Account

Question

Hi

I have an oracle 19c RDS in AWS.

I created a DBA account and granted the DBA role to it.

Is there anymore grants that I can do to make account with similar permission to the RDS master account created with the RDS?
I dont think the "SYSDBA" role would work with RDS because SYS schema is locked by default in RDS.

Accepted Answer

Hello,

RDS Master account user has below system privileges,

`ALTER DATABASE LINK, ALTER PUBLIC DATABASE LINK, DROP ANY DIRECTORY, EXEMPT ACCESS POLICY, EXEMPT IDENTITY permission sets and roles don't have permission to create or modify, GRANT ANY OBJECT PRIVILEGE, RESTRICTED SESSION, EXEMPT REDACTION POLICY`

and below DB roles by default.

`AQ_ADMINISTRATOR_ROLE, AQ_USER_ROLE, CONNECT, CTXAPP, DBA, EXECUTE_CATALOG_ROLE, RECOVERY_CATALOG_OWNER, RESOURCE, SELECT_CATALOG_ROLE`

As you mentioned, sys is locked with RDS as it is fully managed. If you need administrative rights to the database and underlying operating system to make dependent applications available, [Amazon RDS Custom](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-custom.html) is the better choice. If you want full management responsibility and simply need a managed compute service, the best option is self-managing your commercial databases on Amazon EC2.

RDS Master Account

Relevant content