Removing sidadm from Unix DBA group

[Former Member]

We are using NW2004s with Oracle 10gR2. Due to SOD, we have a team of BASIS guys and a team of DBAs. We are planning to remove the sidADM from the Unix DBA group as we don't want anyone other than the member of the DBA group to be able to start and stop the database or be able to do any DBA activity.

We found a note on the SAP website where it says that it can be done and the only place where it might fail is the BRTools, which is not a big deal.

Has anyone tried this before? Please help..

[former_member618758]

Hello Anup,

Removing <SID>adm user from dba group is not permitted and supported in the SAP environment. As documented in the NW2004s installation guide "Users and Their Primary Groups" section, <sid>adm user is an important user within the SAP environment. It is required by SAP that this user belongs to the

group 'dba' to stop and start the sap and db processes. Let along you can not do database backup/recovery with the br* tools. I would suggest that you limit the amount of users with access to this account.

Thanks,

George