opitzconsulting / opitzconsulting.ansible_oracle / 4.7.0 / module / oracle_grants Manage users/schemas in an Oracle database | "added in version" 1.9.1 of opitzconsulting.ansible_oracle" Authors: Mikael Sandström, oravirt@gmail.com, @oravirtopitzconsulting.ansible_oracle.oracle_grants (4.7.0) — module
Install with ansible-galaxy collection install opitzconsulting.ansible_oracle:==4.7.0
collections: - name: opitzconsulting.ansible_oracle version: 4.7.0
Manage grants/privileges in an Oracle database
Handles role/sys privileges at the moment.
It is possible to add object privileges as well, but they are not considered when removing privs at the moment.
mode: choices: - normal - sysdba default: normal description: 'The mode with which to connect to the database ' required: true port: default: 1521 description: The listener port number on the host required: false user: description: 'The Oracle user name to connect to the database ' required: true state: choices: - present - absent - REMOVEALL default: present description: 'The intended state of the priv (present=added to the user, absent=removed from the user). REMOVEALL will remove ALL role/sys privileges ' grants: default: null description: 'The privileges granted to the new schema. Can be a string or a list ' required: false schema: default: null description: 'The schema that should get grants added/removed ' required: false hostname: default: localhost description: 'The Oracle database host ' required: false password: description: 'The Oracle user password for ''user'' ' required: true grants_mode: choices: - enforce - append default: enforce description: 'Should the list of grants be enforced, or just appended to. enforce: Whatever is in the list of grants will be enforced, i.e grants/privileges will be removed if they are not in the list append: Grants/privileges are just appended, nothing is removed ' object_privs: default: null description: 'The privileges granted to specific objects # - format: ''priv1,priv2,priv3:owner.object_name'' # e.g: # - select,update,insert,delete:sys.dba_tablespaces # - select:sys.v_$session ' required: false service_name: description: 'The database service name to connect to ' required: true