Starting the SAP Utility Programs (SAP Library - SAP Database Guide: Oracle (BC-DB-ORA-DBA))

Starting the SAP Utility Programs

To avoid authorization problems when starting the SAP utility programs SAPDBA and BRBACKUP, bear in mind the following notes:

On the database server create local groups ORA_<DBSID>_DBA and ORA_<DBSID>_OPER (or ORA_DBA and ORA_OPER). Include the SAP users <SID>ADM and SAPSERVICE<SID> in this group, if this has not been done during the installation.

When you log on to the database using connect internal via SQLPLUS you no longer have to enter a password. The user is authorized to start and stop the database.

You can now call SAPDBA, BRBACKUP and BRARCHIVE as usual:
sapdba -u system/<password>

SAPDBA

If you call SAPDBA at operating system level, the following alternative to the procedure described in 1. is available. Use the password mechanism to start SAPDBA. The command line option is as follows:

sapdba -U internal/<password>

If you call SAPDBA without the option -U, the password is requested interactively. If the database logon is as super user internal, the database user is sys, not system.

BRBACKUP

If you call BRBACKUP at operating system level, the following alternatives (A;B) to the procedure described in 1. are available:

Start BRBACKUP not with the standard ORACLE user system, but with the user internal.

Example: brbackup -u internal/<password>

If the database logon is as super user internal, the standard user is sys, not system.

Activate the full authorization check in ORACLE. Perform the following steps:

In the profile init<SID>.ora, enter the parameter remote_login_passwortfile = exclusive.

Create an Oracle password file (if it does not already exist):
orapwd80 file=%ORACLE_HOME%\DATABASE\PWD<SID>.ORA password=<internal_password> entries=100

Restart the database.

Call SQLPLUS as the user internal. Give the following authorizations to the user system:

grant sysdba to system;

grant sysoper to system;

Give a new password to the user system (optional):
alter user system identified by <password>;

Now you can call BRBACKUP as usual:
brbackup -u system/<password>