opitzconsulting.ansible_oracle.oracle_grants (4.7.0) — module

Install collection

Install with ansible-galaxy collection install opitzconsulting.ansible_oracle:==4.7.0

Add to requirements.yml

  collections:
    - name: opitzconsulting.ansible_oracle
      version: 4.7.0

Description

Manage grants/privileges in an Oracle database

Handles role/sys privileges at the moment.

It is possible to add object privileges as well, but they are not considered when removing privs at the moment.

Requirements

• cx_Oracle

Inputs

    
mode:
    choices:
    - normal
    - sysdba
    default: normal
    description: 'The mode with which to connect to the database

      '
    required: true

port:
    default: 1521
    description: The listener port number on the host
    required: false

user:
    description: 'The Oracle user name to connect to the database

      '
    required: true

state:
    choices:
    - present
    - absent
    - REMOVEALL
    default: present
    description: 'The intended state of the priv (present=added to the user, absent=removed
      from the user). REMOVEALL will remove ALL role/sys privileges

      '

grants:
    default: null
    description: 'The privileges granted to the new schema. Can be a string or a list

      '
    required: false

schema:
    default: null
    description: 'The schema that should get grants added/removed

      '
    required: false

hostname:
    default: localhost
    description: 'The Oracle database host

      '
    required: false

password:
    description: 'The Oracle user password for ''user''

      '
    required: true

grants_mode:
    choices:
    - enforce
    - append
    default: enforce
    description: 'Should the list of grants be enforced, or just appended to. enforce:
      Whatever is in the list of grants will be enforced, i.e grants/privileges will be
      removed if they are not in the list append: Grants/privileges are just appended,
      nothing is removed

      '

object_privs:
    default: null
    description: 'The privileges granted to specific objects # - format: ''priv1,priv2,priv3:owner.object_name''
      #   e.g: #   - select,update,insert,delete:sys.dba_tablespaces #   - select:sys.v_$session

      '
    required: false

service_name:
    description: 'The database service name to connect to

      '
    required: true