Connector Improvement: Provide option to configure what Fivetran is trying to determine for Oracle connector setup
Per Fivetran support:
The permission
GRANT SELECT ON SYS.V_$DATABASE TO <USER>;is required for both LogMiner and Teleport connectors. This permission is needed to check whether the database is containerized (information stored in SYS.V_$DATABASE), and if it is, to verify access to the PDB. It is currently a required permission and we can't bypass it. This requirement will be added to the documentation.
Requesting to make this check a configuration parameter to avoid needing to grant this right.
Currently, setting up Oracle connectors without this grant causes the connection test to fail. As we know ahead of time whether our Oracle database is containerized or not, it shouldn't be required to have this grant solely to check for this, if we were able to specify it as an option.
Reason for this feature request: to adhere to "least privilege" for access grants, infosec sees this as extraneous given Fivetran support's response (i.e. it is seen as a bug not a true functional requirement).
Please sign in to leave a comment.
Comments
0 comments