Minimum Required Privileges for Goldengate Setup


Classic Mode

Extract Integrated Mode Replicat
All Modes
CREATE SESSION X X X Connect to the database
CONNECT X X X For Replicat, required only if Replicat owns target objects. Alternatively, use CREATE object.
RESOURCE X X X Create objects
If RESOURCE cannot be granted to Replicat, use:
ALTER USER user QUOTA {size | UNLIMITED} ON tablespace;
ALTER ANY TABLE X X   Required for Oracle only to issue the ADD TRANDATA command.
ALTER SYSTEM X X   Perform administrative changes, such as enabling logging
Privileges granted through dbms_goldengate_auth.grant_admin_privilege X X X (Extract) Grants privileges for both classic and integrated Extract, including the logmining server.(Replicat) Grants privileges for both nonintegrated and integrated replicat, including the database inbound server (Oracle or later).
Any or all of optional privileges of dbms_goldengate_auth.grant_admin_privilege X X X Capture from Data Vault
Capture from Virtual Private Database
Capture redacted data
See Section, "Optional Grants for dbms_goldengate_auth.grant_admin_privilege" for more information.
INSERT, UPDATE, DELETE on target tables     X Apply replicated DML to target objects
CREATE TABLE     X Create a checkpoint table in target database
DDL privileges on target objects (if using DDL support)     X Issue replicated DDL on target objects
DBA X X X DDL and sequence support
LOCK ANY TABLE     X Lock target tables. Only required for initial load using direct bulk load to SQL*Loader.
sys.dbms_internal_clkm X     Replicate Oracle Transparent Data Encryption (TDE)
SELECT ANY TRANSACTION X     Use a newer Oracle ASM API. See Section 11.3, "Mining ASM-stored Logs in Classic Capture Mode".