Using the RMAN Recovery Catalog - OCP: Oracle Database 12c Administrator Certified Professional - page 182

to him (you assume, of course, that he does not have SYS access to your recovery catalog, or
all is lost!).
To create the RVPC account for Ed, you would execute the following steps:
1. Create the RVPC database account.
First, you create the RVPC database account log in the recovery catalog database as a
privileged user (for example, SYS ) and issue the CREATE USER command. You will also
need to grant the recovery_catalog_owner privilege to the new user.
2. Create the RVPC.
Once the RVPC user has been created, you need to create the virtual catalog. To do
this, you log into RMAN as the RVPC user and use the CREATE VIRTUAL CATALOG
command, as shown here:
Create virtual catalog;
3. Grant the RVPC access to the appropriate catalog databases.
4. Now that you have created the RVPC account, you need to indicate to the recovery
catalog database which databases this account will have access to. In our case, let's
assume we have two different database accounts in ORCL database called rcat_001
and rcat_002 . These accounts are granted permission to back up the ORCL database
with RMAN.
Since we have implemented VPC with RMAN, we will need to grant permission to
access the catalog to these database users. You will use the RMAN GRANT CATALOG
command to perform this operation, as shown here, where we grant access to the
ORCL database catalog metadata:
grant catalog for database orcl to rcat_001;
Administering the RMAN Virtual Private Catalog
Once you have set up RVPC, there are other administrative activities you can perform.
For example, you can grant the register database privilege to RVPC owners using the
RMAN GRANT command, as shown here:
RMAN> grant register database to rcat_002;
Grant succeeded.
In this case, the rcat_002 user can register the ORCL database with the recovery catalog.
The rcat_001 user could not register the database, however, since it does not have the register
database privilege.
The REVOKE RMAN command is used to revoke privileges to databases in the RVPC or
other privileges, such as the register database privilege, as shown here:
RMAN>Revoke catalog for database abc from rcat_002;