{"id":11264,"date":"2018-05-24T10:04:33","date_gmt":"2018-05-24T08:04:33","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/"},"modified":"2018-05-24T10:04:33","modified_gmt":"2018-05-24T08:04:33","slug":"adwc-system-and-session-settings-dwcs-lockdown-profile","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/","title":{"rendered":"ADWC &#8211; System and session settings (DWCS lockdown profile)"},"content":{"rendered":"<h2>By Franck Pachot<\/h2>\n<p>.<br \/>\nThe Autonomous Data Warehouse Cloud service is a PaaS managed service where we have a PDB and an ADMIN user which has most of the system privileges. For example, we have the privilege to change initialization parameters:<\/p>\n<pre><code>SQL&gt; select * from dba_sys_privs where grantee=user and privilege like 'ALTER S%';\n&nbsp;\nGRANTEE   PRIVILEGE       ADMIN_OPTION   COMMON   INHERITED   \n-------   ---------       ------------   ------   ---------\nADMIN     ALTER SESSION   YES            NO       NO          \nADMIN     ALTER SYSTEM    YES            NO       NO  <\/code><\/pre>\n<p>Still, not everything is allowed for several reasons: ensure that we cannot break the Oracle managed CDB and force us to use only the features allowed in the &#8216;autonomous&#8217; service. This is limited with a lockdown profile:<\/p>\n<pre><code>SQL&gt; show parameter pdb_lockdown\n&nbsp;\nNAME         TYPE   VALUE \n------------ ------ ----- \npdb_lockdown string DWCS  <\/code><\/pre>\n<p>DWCS means Data Warehouse Cloud Service which was the name of the Autonomous Data Warehouse Cloud service until Larry Ellison announces this self-driven-no-human trend under the marketing umbrella of &#8216;autonomous&#8217;.<br \/>\n<!--more--><\/p>\n<p>The limitations are all <a href=\"https:\/\/docs.oracle.com\/en\/cloud\/paas\/autonomous-data-warehouse-cloud\/user\/experienced-database-users.html#GUID-7CF648C1-0822-4602-8ED1-6F5719D6779E\" target=\"_blank\" rel=\"noopener noreferrer\">documented<\/a> but I like to see them by myself and in 18c we have a mean to see the lockdown rules from the PDB itself, through V$LOCKDOWN_RULES.<\/p>\n<h3>ALTER SYSTEM<\/h3>\n<p>Basically, in this ADWC all ALTER SYSTEM statements are disallowed and then they add the few exceptions for what we are allowed to:<\/p>\n<pre><code>\nSQL&gt; select * from v$lockdown_rules where rule in ('ALTER SYSTEM') and clause_option is null;\nRULE_TYPE   RULE           CLAUSE         CLAUSE_OPTION   STATUS    USERS    CON_ID   \n---------   ----           ------         -------------   ------    -----    ------\nSTATEMENT   ALTER SYSTEM                                  DISABLE   ALL            73 \nSTATEMENT   ALTER SYSTEM   SET                            ENABLE    COMMON         73 \nSTATEMENT   ALTER SYSTEM   KILL SESSION                   ENABLE    ALL            73 \n<\/code><\/pre>\n<p>You can ignore what is enabled for COMMON users because we have no common user to connect to our PDB. We will see which ALTER SYSTEM SET clauses are allowed. But in addition to those, only the &#8216;KILL SESSION&#8217; is allowed for ALTER SYSTEM.<\/p>\n<p>Here is the detail about the parameters we can set:<\/p>\n<pre><code>\nSQL&gt; select * from v$lockdown_rules left outer join (select upper(name) clause_option,display_value,description from v$parameter) using (clause_option) where rule in ('ALTER SYSTEM') and clause_option is not null and status='ENABLE';\n&nbsp;\nCLAUSE_OPTION                     RULE_TYPE   RULE           CLAUSE   STATUS   USERS   CON_ID   DISPLAY_VALUE            DESCRIPTION                                                                                                                                   \n-------------                     ---------   ----           ------   ------   -----   ------   -------------            -----------                                                                                                         \nAPPROX_FOR_AGGREGATION            STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 FALSE                    Replace exact aggregation with approximate aggregation                                                                                        \nAPPROX_FOR_COUNT_DISTINCT         STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 FALSE                    Replace count distinct with approx_count_distinct                                                                                             \nAPPROX_FOR_PERCENTILE             STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 none                     Replace percentile_* with approx_percentile                                                                                                   \nAWR_PDB_AUTOFLUSH_ENABLED         STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 TRUE                     Enable\/Disable AWR automatic PDB flushing                                                                                                     \nNLS_LANGUAGE                      STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 AMERICAN                 NLS language name                                                                                                                             \nNLS_SORT                          STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73                          NLS linguistic definition name                                                                                                                \nNLS_TERRITORY                     STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 AMERICA                  NLS territory name                                                                                                                            \nNLS_CALENDAR                      STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73                          NLS calendar system name                                                                                                                      \nNLS_COMP                          STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 BINARY                   NLS comparison                                                                                                                                \nNLS_CURRENCY                      STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73                          NLS local currency symbol                                                                                                                     \nNLS_DATE_FORMAT                   STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 DD-MON-YYYY HH24:MI:ss   NLS Oracle date format                                                                                                                        \nNLS_DATE_LANGUAGE                 STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73                          NLS date language name                                                                                                                        \nNLS_DUAL_CURRENCY                 STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73                          Dual currency symbol                                                                                                                          \nNLS_ISO_CURRENCY                  STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73                          NLS ISO currency territory name                                                                                                               \nNLS_LENGTH_SEMANTICS              STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 BYTE                     create columns using byte or char semantics by default                                                                                        \nNLS_NCHAR_CONV_EXCP               STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 FALSE                    NLS raise an exception instead of allowing implicit conversion                                                                                \nNLS_NUMERIC_CHARACTERS            STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73                          NLS numeric characters                                                                                                                        \nNLS_TIMESTAMP_FORMAT              STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73                          time stamp format                                                                                                                             \nNLS_TIMESTAMP_TZ_FORMAT           STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73                          timestamp with timezone format                                                                                                                \nNLS_TIME_FORMAT                   STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73                          time format                                                                                                                                   \nNLS_TIME_TZ_FORMAT                STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73                          time with timezone format                                                                                                                     \nOPTIMIZER_IGNORE_HINTS            STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 TRUE                     enables the embedded hints to be ignored                                                                                                      \nOPTIMIZER_IGNORE_PARALLEL_HINTS   STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 TRUE                     enables embedded parallel hints to be ignored                                                                                                 \nPLSCOPE_SETTINGS                  STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 identifiers:all          plscope_settings controls the compile time collection, cross reference, and storage of PL\/SQL source code identifier and SQL statement data   \nPLSQL_CCFLAGS                     STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73                          PL\/SQL ccflags                                                                                                                                \nPLSQL_DEBUG                       STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 FALSE                    PL\/SQL debug                                                                                                                                  \nPLSQL_OPTIMIZE_LEVEL              STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 1                        PL\/SQL optimize level                                                                                                                         \nPLSQL_WARNINGS                    STATEMENT   ALTER SYSTEM   SET      ENABLE   ALL           73 DISABLE:ALL              PL\/SQL compiler warnings settings                                                                                                             \n<\/code><\/pre>\n<p>The APPROX_ ones, disable by default, can be used to transparently use approximations for faster results.<br \/>\nThe NLS_ ones can be used to set NLS defaults for our sessions.<br \/>\nOPTIMIZER_IGNORE_ are new in 18c and are set by default here to ignore embedded hints. However, we can set then to false.<br \/>\nPLSQL_ are the defaults for sessions and I don&#8217;t understand why warnings are not enabled by default. Fortunately, we are able to change that at PDB level.<\/p>\n<p>There are also some rules to disable some ALTER SYSTEM SET. They are there for the common users only (which have ALTER SYSTEM SET enabled) but they are interesting to see what Oracle choose to set in the ADWC service which cannot be changed in the PDB even by their common users:<\/p>\n<pre><code>\nSQL&gt; select * from v$lockdown_rules left outer join (select upper(name) clause_option,display_value,description from v$parameter) using (clause_option) where rule in ('ALTER SYSTEM') and clause_option is not null and status='DISABLE';\nCLAUSE_OPTION                            RULE_TYPE   RULE           CLAUSE   STATUS    USERS   CON_ID   DISPLAY_VALUE     DESCRIPTION                                                                                                                                                                   \n-------------                            ---------   ----           ------   ------    -----   ------   -------------     -----------                                                                                                        \nDB_FILES                                 STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 25                max allowable # db files                                                                                                                                                      \n\"_PDB_INHERIT_CFD\"                       STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73                                                                                                                                                                                                 \n\"_PDB_MAX_AUDIT_SIZE\"                    STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73                                                                                                                                                                                                 \n\"_PDB_MAX_DIAG_SIZE\"                     STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73                                                                                                                                                                                                 \nMAX_IDLE_TIME                            STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 60                maximum session idle time in minutes                                                                                                                                          \nPARALLEL_DEGREE_POLICY                   STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 AUTO              policy used to compute the degree of parallelism (MANUAL\/LIMITED\/AUTO\/ADAPTIVE)                                                                                               \n_PARALLEL_CLUSTER_CACHE_POLICY           STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 ADAPTIVE          policy used for parallel execution on cluster(ADAPTIVE\/CACHED)                                                                                                                \n_ENABLE_PARALLEL_DML                     STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 TRUE              enables or disables parallel dml                                                                                                                                              \nRESULT_CACHE_MODE                        STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 FORCE             result cache operator usage mode                                                                                                                                              \nRESULT_CACHE_MAX_RESULT                  STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 1                 maximum result size as percent of cache size                                                                                                                                  \nRESOURCE_MANAGER_PLAN                    STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 FORCE:DWCS_PLAN   resource mgr top plan                                                                                                                                                         \n_CELL_OFFLOAD_VECTOR_GROUPBY             STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 FALSE             enable SQL processing offload of vector group by                                                                                                                              \nPARALLEL_MIN_DEGREE                      STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 CPU               controls the minimum DOP computed by Auto DOP                                                                                                                                 \n_MAX_IO_SIZE                             STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 33554432          Maximum I\/O size in bytes for sequential file accesses                                                                                                                        \n_LDR_IO_SIZE                             STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 33554432          size of write IOs used during a load operation                                                                                                                                \n_LDR_IO_SIZE2                            STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 33554432          size of write IOs used during a load operation of EHCC with HWMB                                                                                                              \n_OPTIMIZER_GATHER_STATS_ON_LOAD_ALL      STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 TRUE              enable\/disable online statistics gathering for nonempty segments                                                                                                              \n_OPTIMIZER_GATHER_STATS_ON_LOAD_HIST     STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 TRUE              enable\/disable online histogram gathering for loads                                                                                                                           \n_DATAPUMP_GATHER_STATS_ON_LOAD           STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 TRUE              Gather table statistics during Data Pump load rather thanimporting statistics from the dump file. This should be set to TRUE in the lockdown profile in a DWCS environment.   \n_OPTIMIZER_ANSWERING_QUERY_USING_STATS   STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 TRUE              enable statistics-based query transformation                                                                                                                                  \n_PX_XTGRANULE_SIZE                       STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 128000            default size of a external table granule (in KB)                                                                                                                              \n_OPTIMIZER_ALLOW_ALL_ACCESS_PATHS        STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 FALSE             allow all access paths                                                                                                                                                        \n_DATAPUMP_INHERIT_SVCNAME                STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 TRUE              Inherit and propagate service name throughout job                                                                                                                             \n_DEFAULT_PCT_FREE                        STATEMENT   ALTER SYSTEM   SET      DISABLE   ALL           73 1                 Default value of PCT_FREE enforced by DWCS lockdown                                                                                                                           \n<\/code><\/pre>\n<p>So, among the interesting ones, Result Cache is forced for all results (RESULT_CACHE_MODE=FORCE), Parallel DML is enabled for all sessions (but we will see that we can disable it at session level), PCTFREE will always be 1 (_DEFAULT_PCT_FREE=1), statistics are gathered during load (this is a 18c feature). And we cannot change that.<\/p>\n<p>There are only few additional ALTER SYSTEM SET which are allowed at session level:<\/p>\n<pre><code>\nSQL&gt; select * from v$lockdown_rules where rule in ('ALTER SESSION') and clause is not null and clause_option is not null\n     and (clause_option,status,users) not in (select clause_option,status,users from v$lockdown_rules where rule in ('ALTER SYSTEM') and clause is not null and clause_option is not null)\n     ;\nRULE_TYPE   RULE            CLAUSE   CLAUSE_OPTION                          STATUS   USERS   CON_ID   \n---------   ----            ------   -------------                          ------   -----   ------\nSTATEMENT   ALTER SESSION   SET      CONTAINER                              ENABLE   ALL           73 \nSTATEMENT   ALTER SESSION   SET      CURRENT_SCHEMA                         ENABLE   ALL           73 \nSTATEMENT   ALTER SESSION   SET      EDITION                                ENABLE   ALL           73 \nSTATEMENT   ALTER SESSION   SET      OPTIMIZER_CAPTURE_SQL_PLAN_BASELINES   ENABLE   ALL           73 \nSTATEMENT   ALTER SESSION   SET      DEFAULT_COLLATION                      ENABLE   ALL           73 \nSTATEMENT   ALTER SESSION   SET      ROW ARCHIVAL VISIBILITY = ACTIVE       ENABLE   ALL           73 \nSTATEMENT   ALTER SESSION   SET      ROW ARCHIVAL VISIBILITY = ALL          ENABLE   ALL           73 \nSTATEMENT   ALTER SESSION   SET      TIME_ZONE                              ENABLE   ALL           73 \n<\/code><\/pre>\n<p>Besides the parameters here are what we can do with ALTER SESSION:<\/p>\n<pre><code>\nSQL&gt; select * from v$lockdown_rules where rule='ALTER SESSION' and clause_option is null;\n&nbsp;\nRULE_TYPE   RULE            CLAUSE                        CLAUSE_OPTION   STATUS    USERS    CON_ID  \n---------   ----            ------                        -------------   ------    -----    ------ \nSTATEMENT   ALTER SESSION                                                 DISABLE   ALL            73 \nSTATEMENT   ALTER SESSION   SET                                           ENABLE    COMMON         73 \nSTATEMENT   ALTER SESSION   ADVISE COMMIT                                 ENABLE    ALL            73 \nSTATEMENT   ALTER SESSION   CLOSE DATABASE LINK                           ENABLE    ALL            73 \nSTATEMENT   ALTER SESSION   DISABLE COMMIT IN PROCEDURE                   ENABLE    ALL            73 \nSTATEMENT   ALTER SESSION   DISABLE PARALLEL DDL                          ENABLE    ALL            73 \nSTATEMENT   ALTER SESSION   DISABLE PARALLEL DML                          ENABLE    ALL            73 \nSTATEMENT   ALTER SESSION   DISABLE PARALLEL QUERY                        ENABLE    ALL            73 \nSTATEMENT   ALTER SESSION   DISABLE RESUMABLE                             ENABLE    ALL            73 \nSTATEMENT   ALTER SESSION   ENABLE COMMIT IN PROCEDURE                    ENABLE    ALL            73 \nSTATEMENT   ALTER SESSION   ENABLE PARALLEL DDL                           ENABLE    ALL            73 \nSTATEMENT   ALTER SESSION   ENABLE PARALLEL DML                           ENABLE    ALL            73 \nSTATEMENT   ALTER SESSION   ENABLE PARALLEL QUERY                         ENABLE    ALL            73 \nSTATEMENT   ALTER SESSION   ENABLE RESUMABLE                              ENABLE    ALL            73 \nSTATEMENT   ALTER SESSION   FORCE PARALLEL DDL                            ENABLE    ALL            73 \nSTATEMENT   ALTER SESSION   FORCE PARALLEL DML                            ENABLE    ALL            73 \nSTATEMENT   ALTER SESSION   FORCE PARALLEL QUERY                          ENABLE    ALL            73 \n<\/code><\/pre>\n<p>I&#8217;ll show other rules (other than ALTER SYSTEM and ALTER SESSION statements) in a future post. Lockdown profiles is a great feature because they have very fine granularity and makes it easy to document what is allowed or not. Oracle introduced them for their own usage in the public cloud. You can use the same on-premises for your private cloud. This requires multitenant architecture, but the option is not mandatory.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>By Franck Pachot . The Autonomous Data Warehouse Cloud service is a PaaS managed service where we have a PDB and an ADMIN user which has most of the system privileges. For example, we have the privilege to change initialization parameters: SQL&gt; select * from dba_sys_privs where grantee=user and privilege like &#8216;ALTER S%&#8217;; &nbsp; GRANTEE [&hellip;]<\/p>\n","protected":false},"author":27,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[59],"tags":[1347,1191,220,1354,64,96,1184,66,223],"type_dbi":[],"class_list":["post-11264","post","type-post","status-publish","format-standard","hentry","category-oracle","tag-adwc","tag-autonomous","tag-cdb","tag-lockdown","tag-multitenant","tag-oracle","tag-oracle-18c","tag-pdb","tag-pluggable-databases"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.2 (Yoast SEO v27.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>ADWC - System and session settings (DWCS lockdown profile) - dbi Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ADWC - System and session settings (DWCS lockdown profile)\" \/>\n<meta property=\"og:description\" content=\"By Franck Pachot . The Autonomous Data Warehouse Cloud service is a PaaS managed service where we have a PDB and an ADMIN user which has most of the system privileges. For example, we have the privilege to change initialization parameters: SQL&gt; select * from dba_sys_privs where grantee=user and privilege like &#039;ALTER S%&#039;; &nbsp; GRANTEE [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2018-05-24T08:04:33+00:00\" \/>\n<meta name=\"author\" content=\"Oracle Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Oracle Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/\"},\"author\":{\"name\":\"Oracle Team\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\"},\"headline\":\"ADWC &#8211; System and session settings (DWCS lockdown profile)\",\"datePublished\":\"2018-05-24T08:04:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/\"},\"wordCount\":514,\"commentCount\":0,\"keywords\":[\"ADWC\",\"Autonomous\",\"CDB\",\"lockdown\",\"multitenant\",\"Oracle\",\"Oracle 18c\",\"PDB\",\"Pluggable Databases\"],\"articleSection\":[\"Oracle\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/\",\"name\":\"ADWC - System and session settings (DWCS lockdown profile) - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\"},\"datePublished\":\"2018-05-24T08:04:33+00:00\",\"author\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.dbi-services.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ADWC &#8211; System and session settings (DWCS lockdown profile)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\",\"name\":\"Oracle Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"caption\":\"Oracle Team\"},\"url\":\"https:\/\/www.dbi-services.com\/blog\/author\/oracle-team\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"ADWC - System and session settings (DWCS lockdown profile) - dbi Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/","og_locale":"en_US","og_type":"article","og_title":"ADWC - System and session settings (DWCS lockdown profile)","og_description":"By Franck Pachot . The Autonomous Data Warehouse Cloud service is a PaaS managed service where we have a PDB and an ADMIN user which has most of the system privileges. For example, we have the privilege to change initialization parameters: SQL&gt; select * from dba_sys_privs where grantee=user and privilege like 'ALTER S%'; &nbsp; GRANTEE [&hellip;]","og_url":"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/","og_site_name":"dbi Blog","article_published_time":"2018-05-24T08:04:33+00:00","author":"Oracle Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Oracle Team","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/"},"author":{"name":"Oracle Team","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee"},"headline":"ADWC &#8211; System and session settings (DWCS lockdown profile)","datePublished":"2018-05-24T08:04:33+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/"},"wordCount":514,"commentCount":0,"keywords":["ADWC","Autonomous","CDB","lockdown","multitenant","Oracle","Oracle 18c","PDB","Pluggable Databases"],"articleSection":["Oracle"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/","url":"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/","name":"ADWC - System and session settings (DWCS lockdown profile) - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"datePublished":"2018-05-24T08:04:33+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee"},"breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/adwc-system-and-session-settings-dwcs-lockdown-profile\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"ADWC &#8211; System and session settings (DWCS lockdown profile)"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee","name":"Oracle Team","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","caption":"Oracle Team"},"url":"https:\/\/www.dbi-services.com\/blog\/author\/oracle-team\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/11264","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=11264"}],"version-history":[{"count":0,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/11264\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=11264"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=11264"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=11264"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=11264"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}