My Oracle DBA Colleague is requesting root access on our production servers.
He is arguing that he need it to perform some operations like rebooting the server and some other tasks.
I do not not agree with him because I've set him a Oracle user/group and a dba group where Oracle user belong. Everything is running smoothly and without the DBA having root access currently.
I also think that all administrative tasks like scheduled server reboot needs to be done by the proper administrator (The Systems administrator on our case) to avoid any kind of issues related to a misunderstanding of the infrastructure interactions.
I would like input from both sysadmins and Oracle DBAs - Is there any good reason for an Oracle DBA to have root access in a production environment?
If my colleague really needs this level of access I'll provide it, but I'm quite afraid of doing so because of security and system integrity concerns.
I'm not looking for pros/cons but rather advice on the how I should take to deal with this situation.
SYSDBA
access.