SDE用户权限脚本

DROP ROLE SDE_UPGRADE;
CREATE ROLE SDE_UPGRADE;

GRANT CREATE SESSION TO SDE_UPGRADE;
GRANT CREATE TABLE TO SDE_UPGRADE;
GRANT CREATE PROCEDURE TO SDE_UPGRADE;
GRANT CREATE INDEXTYPE TO SDE_UPGRADE;

GRANT CREATE LIBRARY TO SDE_UPGRADE;

GRANT CREATE OPERATOR TO SDE_UPGRADE;

GRANT CREATE PUBLIC SYNONYM TO SDE_UPGRADE;

GRANT CREATE SYNONYM TO SDE_UPGRADE;

GRANT CREATE TYPE TO SDE_UPGRADE;

GRANT CREATE VIEW TO SDE_UPGRADE;

GRANT DROP ANY INDEXTYPE TO SDE_UPGRADE;

GRANT DROP ANY LIBRARY TO SDE_UPGRADE;

GRANT DROP ANY OPERATOR TO SDE_UPGRADE;

GRANT DROP ANY TYPE TO SDE_UPGRADE;

GRANT DROP PUBLIC SYNONYM TO SDE_UPGRADE;

--These privileges can be revoked after installation if not using the Spatial Type for Oracle.
GRANT SELECT ANY TABLE TO SDE_UPGRADE;

--This privilege can be revoked after installing or upgrading ArcSDE if using quotas for space management.
GRANT ALTER ANY INDEX TO SDE_UPGRADE;

GRANT ALTER ANY TABLE TO SDE_UPGRADE;

GRANT ANALYZE ANY TO SDE_UPGRADE;

GRANT CREATE ANY INDEX TO SDE_UPGRADE;

GRANT CREATE ANY PROCEDURE TO SDE_UPGRADE;

GRANT CREATE ANY SEQUENCE TO SDE_UPGRADE;

GRANT CREATE ANY TRIGGER TO SDE_UPGRADE;

GRANT CREATE ANY VIEW TO SDE_UPGRADE;

GRANT DROP ANY INDEX TO SDE_UPGRADE;

GRANT DROP ANY PROCEDURE TO SDE_UPGRADE;

GRANT DROP ANY SEQUENCE TO SDE_UPGRADE;

GRANT DROP ANY TABLE TO SDE_UPGRADE;

GRANT DROP ANY VIEW TO SDE_UPGRADE;

GRANT EXECUTE ANY PROCEDURE TO SDE_UPGRADE;

GRANT SELECT ANY SEQUENCE TO SDE_UPGRADE;

 

GRANT SDE_UPGRADE TO SDE;
--This privilege can be revoked after installing ArcSDE if not using Oracle Spatial or if manually registering third-party layers. Would have to be granted again to perform upgrade
GRANT UNLIMITED TABLESPACE TO SDE;

--
--
--  Grant SDE Runtime Privs

DROP ROLE SDE_ADMIN;
CREATE ROLE SDE_ADMIN;
GRANT CREATE SESSION TO SDE_ADMIN;
GRANT CREATE SEQUENCE TO SDE_ADMIN;
GRANT CREATE TABLE TO SDE_ADMIN;

GRANT CREATE TRIGGER TO SDE_ADMIN;
GRANT CREATE PROCEDURE TO SDE_ADMIN;
GRANT CREATE INDEXTYPE TO SDE_ADMIN;

GRANT CREATE LIBRARY TO SDE_ADMIN;

GRANT CREATE OPERATOR TO SDE_ADMIN;

GRANT CREATE PUBLIC SYNONYM TO SDE_ADMIN;

GRANT CREATE SYNONYM TO SDE_ADMIN;

GRANT CREATE TYPE TO SDE_ADMIN;

GRANT CREATE VIEW TO SDE_ADMIN;

GRANT DROP PUBLIC SYNONYM TO SDE_ADMIN;

GRANT SDE_ADMIN TO SDE;
--
--  Grant execute on dbms_pipe and dbms_lock to public
GRANT EXECUTE ON DBMS_PIPE TO PUBLIC;
GRANT EXECUTE ON DBMS_LOCK TO PUBLIC;