Configuring User Accounts for the Oracle Application and Database Access

The Oracle Agent requires an operating system account and an Oracle user account. Configure both accounts to allow access to the Oracle application and Oracle target database.

  • An operating system account with administrator privileges for the Oracle application.

    The following table defines the user account requirements for each operating system:

Operating System

User Account


  • The Local Administrator of the computer on which the Oracle database resides.

  • The user must be part of the ora_dba group with read and write permissions on the Commvault folder.


when using Oracle 12c, grant full control permission for the Oracle home user for the Commvault folder.

For more information, see Database Group and Folder Permissions for Windows Configurations.


Member of the user group assigned during the Agent installation. The operating system user account can also be used.

  • An Oracle user account with the SYSDBA or SYSBACKUP (in Oracle version 12 or higher) privilege can access the Oracle target database. Provide the account information as a connect string with the following connection details:

    • The database user ID and password

    • The Oracle Service Name (as defined in the tnsnames.ora file)

    Use separate accounts to access the target database and the recovery catalog database. The recovery catalog database user account must have RECOVERY_CATALOG_OWNER privileges, which are not required for the target database user.

    By default, the user account for the target database has administration privileges and must be established so the Oracle database administrator can configure additional accounts (except Impersonate User).

Initially, the user account credentials are provided during the instance configuration after the installation of the Agent. You can subsequently change the user account information to access the Oracle database and application at the Instance level whenever the credentials are updated.


  1. From the CommCell Browser, expand Client Computers > client > Oracle.

  2. Right-click the instance and then click Properties.

    The Instance Properties dialog box is displayed.

  3. On the General tab, provide access to the Oracle application:

    For Windows clients:

    Click Change and then enter the user account to access the Oracle application in the Impersonate NT User dialog box.

    For UNIX clients:

    In the User Account box, enter the user account to access the Oracle application.

  4. On the Details tab, enter the Oracle connection information:

    • To use the Oracle Wallet feature (Secure External Password Store), select the Oracle Wallet Auto Login check box and just provide the TNS service name in the third Connect String box.

      Note: If you provide the user name and password, the software ignores the Oracle Wallet feature.

    • To use the Oracle Connect String, select the Use Connect String check box and in the Connect String box provide the user name, the user password and the TNS service name.

      Note: If you want to use an account that is other than 'sys', you must grant the SYSDBA or SYSBACKUP (in Oracle version 12 or higher) privilege to the user account.

      Enter the Connect String to connect to the Oracle database as follows:

      1. In the first box enter the database user ID.

      2. In the second box enter the Password.

      3. In the Confirm Password dialog box, re-enter the password, and click OK.

      4. In the third box enter the Oracle Service name.

      For example, in the following:


      sysdba is the Database User ID

      <password> is the Database User ID password

      orcl is the Oracle service name

  5. Click OK to close the Instance Properties dialog box.