User permissions needed for scans

Prev Next

SharePoint and databases such as Oracle and SQL require specific permissions to run Discover scans.

User type

Permissions needed

Commands

Description

SQL user

dbo permission set

Oracle user (sysdb)

CREATE VIEW

GRANT CREATE VIEW TO "username";

Permissions to define a view.

SELECT ANY TABLE

GRANT SELECT ANY TABLE TO "username";

Permissions to query tables or views

CONNECT

GRANT CONNECT TO "username";

Permissions to open a database session.

SELECT_CATALOG_ROLE

GRANT SELECT_CATALOG_ROLE TO "username";

Privileges on all data dictionary views.

READ

GRANT READ ON DIRECTORY EXT_TAB_DATA TO "username";

Read-only permissions to external tables.

WRITE

GRANT WRITE ON DIRECTORY EXT_TAB_DATA TO "username";

Write permissions to work with external tables.

EXECUTE ANY TYPE

GRANT EXECUTE ANY TYPE TO "username";

Permissions to execute any type of object used. This is mandatory for nested tables.

SharePoint user

  • For inventory and classification scans: Read-only permissions

  • For remediation scans: Full permissions