Connect Through a Proxy User Account

13 CommentsOracle,

If you have required privileges, it’s possible to connect as a user account without knowing or changing his password. This is called proxy connection. To authorize a user account to connect using a proxy account, use the GRANT CONNECT THROUGH clause of the ALTER USER statement.

Let’s set say we don’t know password of SCOTT user. I connect with my dba account and set “GOKHAN” user as a proxy for SCOTT:

Now we can connect using the GOKHAN proxy user:

Use the REVOKE CONNECT THROUGH clause of ALTER USER to disallow a proxy connection:

Please share
  •  
  •  
  •  
  •  
  •  
  •  

AWS Big Data Specialist. Oracle Certified Professional (OCP) for EBS R12, Oracle 10g and 11g. Co-author of "Expert Oracle Enterprise Manager 12c" book published by Apress. Awarded as Oracle ACE (in 2011) and Oracle ACE Director (in 2016) for the continuous contributions to the Oracle users community. Founding member, and vice president of Turkish Oracle User Group (TROUG). Presented at various international conferences including Oracle Open World.

13 Comments

  2. Matheus Sato

    Reply

    Hello,

    What are the dictionary tables related to proxy privileges ?
    How I find witch user have access to connect (as another user) using proxy?

    Best Regards,
    Matheus

  4. ahmed

    Reply

    Hi Gokhan,

    is there any way to audit “gokhan” user activities on the DB?

  5. Boris

    Reply

    Gokhan,

    I like your article and I like your CSS to show samples.  you know – text boxes with toggle/copy icons, etc.   I would like to use the same approach for my page  about Oracle VPD.  Can I use your CSS?

  6. Mehmet Simsek

    Reply

    to get the username you can use the following package:

    SYS_CONTEXT(‘USERENV’,’PROXY_USER’)

  8. kirillk2

    Reply

    Hello, how revoke privilege “alter user <current_schema_client>” from logged proxy user?

Leave Comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.