Assign <sapsid>adm and SAPService<SAPSID> to the local groups ORA_<DBSID>_DBA and ORA_<DBSID>_OPER. BRBACKUP then logs on using connect / as sysoper.

The group ORA_<DBSID>_OPER (DB role: SYSOPER) is an administrator group that is restricted to operator operations. ORA_<DBSID>_OPER can start or shut down the database, perform backups, etc., but has no read or write authorizations.

BRBACKUP and BRARCHIVE must also have full access to the SAP tables SDBAD, SDBAH and tables defined in the XDB interface. These access rights are contained in the database role SAPDBA.

BRCONNECT only executes from CCMS when the database is open. Appropriate database privileges are necessary for the following BRCONNECT operations:

-f stats, -f next, -f cleanup, -f check

BRCONNECT must have write permissions to the following tables:

SDBAD, SDBAH, DBSTATC, DBSTATTORA, DBSTATHORA, DBSTATIORA, DBSTAIHORA, , and other DBA* tables. These access rights are also contained in SAPDBA role.

If database backup and archive log backups are to run directly to locally attached tape drives (not using 3rd party backup solutions) the user SAPService<SAPSID> must be a member of the local Backup Operators group.