Return
-
Title
Permissions for AWS RDS Oracle Instance monitoring -
Description
AWS RDS Oracle Instance monitoring was added with the 5.7.5.30 and higher releases of the Oracle cartridge.
What are the available user credential options for monitoring Amazon Oracle RDS instances?
The grant privileges script does not work for monitoring an Amazon RDS for Oracle instance.
-
Cause
When trying to monitor an Amazon RDS database, the installation process fails. The permissions script which grants privileges on the database does not work properly and the installation fails due to missing privileges on the database views. -
Resolution
There are two options for monitoring user credential options for monitoring Amazon Oracle RDS instances?- “Master” predefined user that comes as part of Amazon Oracle RDS instance
or - Separate user must have:
- SELECT_CATALOG_ROLE
- Either one of the following system privileges
SELECT ANY TABLE
or
SELECT ANY DICTIONARY - Grant additional permissions by manually execution the following commands from the master user, replace TEST with the Foglight login userid
- EXEC RDSADMIN.RDSADMIN_UTIL.GRANT_SYS_OBJECT(p_obj_name=>'FET$',p_grantee =>'TEST', p_privilege => 'SELECT');
- EXEC RDSADMIN.RDSADMIN_UTIL.GRANT_SYS_OBJECT(p_obj_name=>'UET$',p_grantee =>'TEST', p_privilege => 'SELECT');
- EXEC RDSADMIN.RDSADMIN_UTIL.GRANT_SYS_OBJECT(p_obj_name=>'FILE$',p_grantee =>'TEST', p_privilege => 'SELECT');
- EXEC RDSADMIN.RDSADMIN_UTIL.GRANT_SYS_OBJECT(p_obj_name=>'OBJ$',p_grantee =>'TEST', p_privilege => 'SELECT');
- EXEC RDSADMIN.RDSADMIN_UTIL.GRANT_SYS_OBJECT(p_obj_name=>'TS$',p_grantee =>'TEST', p_privilege => 'SELECT');
- EXEC RDSADMIN.RDSADMIN_UTIL.GRANT_SYS_OBJECT(p_obj_name=>'USER$',p_grantee =>'TEST', p_privilege => 'SELECT');
- EXEC RDSADMIN.RDSADMIN_UTIL.GRANT_SYS_OBJECT(p_obj_name=>'RECYCLEBIN$',p_grantee =>'TEST', p_privilege => 'SELECT');
NOTE: As with all Oracle monitoring the CREATE SESSION privilege (or the CONNECT role which includes the CREATE SESSION privilege) is also necessary for the user to connect. - “Master” predefined user that comes as part of Amazon Oracle RDS instance
-
Additional Information
RAC and Exadata are not supported in Amazon and ASM is irrelevant in Amazon RDS.