The master hsi database account is the owner of all database tables that are accessed by the application. Additionally, the following roles needed to be assigned to the hsi user account under the Legacy Security model:
-
CONNECT(with admin option)
-
CLIENTGP(with admin option)
-
CREATE SESSION(with admin option)
-
CREATE USER
-
ALTER USER
-
SELECT_CATALOG_ROLE
-
CREATE TABLE
-
CREATE ROLE
-
CREATE TABLESPACE
-
SELECT ANY TABLE
For initial database creation and software upgrades in OnBase version 6.2 and earlier, the DBUtils application required that the HSI account be assigned to the DBA role. Hyland has developed a packaged SQL script to revoke the Oracle DBA role from the HSI account (and other users/roles) and assign the minimum permissions necessary after the database is created. This script, named ora_revoke_DBA.sql, can be obtained from Hyland Technical Support.