Permissions required for impdp operations on expdp

With regard to expdp, the permissions required for impdp operations have always been misunderstood by DATAPUMP_EXP_FULL_DATABASE and DATAPUMP_IMP_FULL_DATABASE. I thought this permission is required only when the full database is imported. I only know it after reading the documentation, no. export Data Pump Export and Import operations require the user to have the DATAPUMP_EXP_FULL_DATABASE role and/or the DATAPUMP_IMP_FULL_DATABASE role. these roles are automatically defined for Oracle databases when you run the standard scripts that are part of database creation. (N Ote that although the names of these roles contain the word FULL, these roles are actually required for all export and import modes, not only Full mode .) from $ ORACLE_HOME/rdbms/admin/catdpb. SQL provides a full view of this permission.

01-- $ORACLE_HOME/rdbms/admin/catdpb.sql0203...04Rem    NAME05Rem      catdpb.sql - Main install script for all DataPump package body06Rem                   components0708...0910-------------------------------------------------------------------------11Rem Set up application roles to to be enabled for privileged users12-------------------------------------------------------------------------1314CREATE ROLE datapump_exp_full_database;15CREATE ROLE datapump_imp_full_database;1617GRANT exp_full_database          TO datapump_exp_full_database;18Rem Following grant needed for fgac test in dpx3f219GRANT create table               TO datapump_exp_full_database;20GRANT create session             TO datapump_exp_full_database;2122GRANT alter resource cost        TO datapump_imp_full_database;23GRANT alter user                 TO datapump_imp_full_database;24GRANT audit any                  TO datapump_imp_full_database;25GRANT audit system               TO datapump_imp_full_database;26GRANT create session             TO datapump_imp_full_database;27GRANT alter profile              TO datapump_imp_full_database;28GRANT create profile             TO datapump_imp_full_database;29GRANT delete any table           TO datapump_imp_full_database;30GRANT execute any operator       TO datapump_imp_full_database;31GRANT grant any privilege        TO datapump_imp_full_database;32GRANT grant any object privilege TO datapump_imp_full_database;33GRANT grant any role             TO datapump_imp_full_database;34GRANT imp_full_database          TO datapump_imp_full_database;35GRANT select any table           TO datapump_imp_full_database;36GRANT alter database             TO datapump_imp_full_database;3738Rem The following grant is needed to make loopback network jobs work right39Rem Since the application role makes it disappear otherwise.4041GRANT exp_full_database          TO datapump_imp_full_database;4243GRANT export full database TO dba;44GRANT import full database TO dba;45GRANT datapump_exp_full_database TO dba;46GRANT datapump_imp_full_database TO dba;4748Rem DataPump roles are not documented so also grant them to old exp/imp roles4950Rem Following grant needed for fgac test in dpx3f251GRANT create table               TO exp_full_database;52GRANT create session             TO exp_full_database;5354GRANT alter resource cost        TO imp_full_database;55GRANT alter user                 TO imp_full_database;56GRANT audit any                  TO imp_full_database;57GRANT audit system               TO imp_full_database;58GRANT create session             TO imp_full_database;59GRANT alter profile              TO imp_full_database;60GRANT create profile             TO imp_full_database;61GRANT delete any table           TO imp_full_database;62GRANT execute any operator       TO imp_full_database;63GRANT grant any privilege        TO imp_full_database;64GRANT grant any object privilege TO imp_full_database;65GRANT grant any role             TO imp_full_database;66GRANT select any table           TO imp_full_database;67GRANT alter database             TO imp_full_database;68697071-------------------------------------------------------------------------72--     Public view defs (DBA_/USER_*) go here.73-------------------------------------------------------------------------7475--  Fixed (virtual) View Declarations, Synonyms, and Grants76CREATE OR REPLACE VIEW SYS.V_$DATAPUMP_JOB AS77  SELECT * FROM SYS.V$DATAPUMP_JOB;78CREATE OR REPLACE PUBLIC SYNONYM V$DATAPUMP_JOB FOR SYS.V_$DATAPUMP_JOB;79GRANT SELECT ON SYS.V_$DATAPUMP_JOB TO SELECT_CATALOG_ROLE;8081CREATE OR REPLACE VIEW SYS.V_$DATAPUMP_SESSION AS82  SELECT * FROM SYS.V$DATAPUMP_SESSION;83CREATE OR REPLACE PUBLIC SYNONYM V$DATAPUMP_SESSION FOR84  SYS.V_$DATAPUMP_SESSION;85GRANT SELECT ON SYS.V_$DATAPUMP_SESSION TO SELECT_CATALOG_ROLE;8687CREATE OR REPLACE VIEW SYS.GV_$DATAPUMP_JOB AS88  SELECT * FROM SYS.GV$DATAPUMP_JOB;89CREATE OR REPLACE PUBLIC SYNONYM GV$DATAPUMP_JOB FOR SYS.GV_$DATAPUMP_JOB;90GRANT SELECT ON SYS.GV_$DATAPUMP_JOB TO SELECT_CATALOG_ROLE;9192CREATE OR REPLACE VIEW SYS.GV_$DATAPUMP_SESSION AS93  SELECT * FROM SYS.GV$DATAPUMP_SESSION;94CREATE OR REPLACE PUBLIC SYNONYM GV$DATAPUMP_SESSION FOR95  SYS.GV_$DATAPUMP_SESSION;96GRANT SELECT ON SYS.GV_$DATAPUMP_SESSION TO SELECT_CATALOG_ROLE;