Configure your source Oracle database

Overview

Database Migration Service supports continuous migrations from source databases to Cloud SQL for PostgreSQL destination databases.

Supported source databases for Oracle include versions:

Oracle 11g, Version 11.2.0.4
Oracle 12c, Version 12.1.0.2
Oracle 12c, Version 12.2.0.1
Oracle 18c
Oracle 19c
Oracle 21c
Oracle Real Application Clusters (RAC)

Database Migration Service leverages Oracle LogMiner, which is part of Oracle Database, to query archived redo log files. Redo log files contain information about the history of activity on a database. For more information about how Database Migration Service works with these log files, see Work with Oracle database redo log files

Configure your source Oracle database

Before you can use Database Migration Service to pull data from your source Oracle database, you must configure your database by:

Setting up archive logging to track changes in your database, such as the INSERT, UPDATE, DELETE, and RENAME operations.
Granting the appropriate privileges to the user account that will be used to connect to your database and access schema and code objects.

By default, Database Migration Service attempts to access all your object definitions through DBA_VIEWS. Access to DBA_VIEWS is granted with the SELECT ANY DICTIONARY privilege. If DBA views aren't accessible to the migration user account, Database Migration Service falls back to ALL_VIEWS. This approach provides you with the greatest degree of flexibility with respect to defining a security model that best matches your requirements.

If you want Database Migration Service to only access a certain subset of your object definitions, then grant the migration user a role with more fine-grained privilege configuration instead of SELECT ANY DICTIONARY.
Defining a data retention policy for your database to determine which data will be archived, how long it will be kept, should the data at the end of the retention period be archived or destroyed, and so on.

Database Migration Service currently works with the following types of Oracle databases:

Amazon RDS for Oracle
Self-hosted Oracle
Self-hosted Oracle pluggable database

Configure an Amazon RDS for Oracle database

Verify that your database is running in ARCHIVELOG mode. To do so, run the following command:

SELECT LOG_MODE FROM V$DATABASE;
1. If the result is ARCHIVELOG, then move on to step c.
2. If the result is NOARCHIVELOG, then you'll need to enable ARCHIVELOG mode for your database.
  
  For your database to be placed in ARCHIVELOG mode, you must enable backups for the database.
3. Archived log files consume disk space, so you'll want to configure the DB_RECOVERY_FILE_DEST_SIZE parameter for your database. Use this parameter to specify (in bytes) the hard limit on the total space to be used by target database recovery files. By setting this parameter, you can manage the tradeoff between information availability and disk space.
4. Define a data retention policy for your database by running this command:
```
exec rdsadmin.rdsadmin_util.set_configuration('archivelog retention hours',96);
```
  We recommend that you retain backups and archive logs for a minimum of 4 days, and 7 days is recommended.
  
  Running these commands will restart your database instance so that the changes you made to the database can take effect.
5. Configure the Oracle log file rotation policy. We recommend setting a maximum log file size of no more than 512MB. For more information about managing the log rotation, see Work with Oracle database redo log files.
Enable supplemental log data. To do so, first enable supplemental logging on the database by running the following command:
```
exec rdsadmin.rdsadmin_util.alter_supplemental_logging('ADD');
```
Next, choose whether to turn on logging for specific tables or the entire database.

To log changes only for specific tables, run the following command for each table that you want to replicate:
```
ALTER TABLE SCHEMA.TABLE ADD SUPPLEMENTAL LOG DATA (ALL) COLUMNS
```
Replace the following:
- SCHEMA: the name of the schema that contains the table.
- TABLE: the name of the table for which you want to log changes.
To replicate most or all tables in your database, consider turning logging on for the entire database.

At the SQL prompt, run the following command to enable supplemental log data for the entire database:
```
exec rdsadmin.rdsadmin_util.alter_supplemental_logging('ADD','ALL');
```
The supplemental logging mode must be set to ALL. You can't set this mode to PK_ONLY.

Grant the appropriate privileges to the user account that will be used to connect to your database. To do so, run the following commands:

GRANT CONNECT TO USER_NAME;
GRANT CREATE SESSION TO USER_NAME;
exec rdsadmin.rdsadmin_util.grant_sys_object('V_$DATABASE','USER_NAME','SELECT');
exec rdsadmin.rdsadmin_util.grant_sys_object('V_$ARCHIVED_LOG','USER_NAME','SELECT');
exec rdsadmin.rdsadmin_util.grant_sys_object('V_$LOGMNR_LOGS','USER_NAME','SELECT');
exec rdsadmin.rdsadmin_util.grant_sys_object('V_$LOGMNR_CONTENTS','USER_NAME','SELECT');
exec rdsadmin.rdsadmin_util.grant_sys_object('DBMS_LOGMNR','USER_NAME','EXECUTE');
exec rdsadmin.rdsadmin_util.grant_sys_object('DBMS_LOGMNR_D','USER_NAME','EXECUTE');
GRANT SELECT ANY TRANSACTION TO USER_NAME;
GRANT SELECT ANY TABLE TO USER_NAME;
GRANT SELECT ANY DICTIONARY TO USER_NAME;

If your source database is Oracle 12c or newer, then grant the following additional privilege:

GRANT LOGMINING TO USER_NAME;

For each command, replace USER_NAME with the name of the user account. Also, running these commands will grant privileges to the user to read from V$DATABASE (which is required for validation), start the log miner, and grant privileges to select from V$LOGMNR_CONTENT.

Configure a self-hosted Oracle database

Verify that your database is running in ARCHIVELOG mode. To do so, run the following command:

SELECT LOG_MODE FROM V$DATABASE;
1. If the result is ARCHIVELOG, then move on to step 2.
2. If the result is NOARCHIVELOG, then you'll need to enable ARCHIVELOG mode for your database.
3. Run the following commands when logged in as SYSDBA:
```
SHUTDOWN IMMEDIATE;
STARTUP MOUNT;
ALTER DATABASE ARCHIVELOG;
ALTER DATABASE OPEN;
```
  Running these commands will restart your database instance so that the changes you made to the database can take effect.
4. Archived log files consume disk space, so you'll want to configure the DB_RECOVERY_FILE_DEST_SIZE parameter for your database. Use this parameter to specify (in bytes) the hard limit on the total space to be used by target database recovery files. By setting this parameter, you can manage the tradeoff between information availability and disk space.
Define a data retention policy for your database by running the following Oracle Recovery Manager (RMAN) command:
```
CONFIGURE RETENTION POLICY TO RECOVERY WINDOW OF 4 DAYS;
```
You can use the TARGET / command to start an RMAN client and connect to the source database. See Connecting to the Target Database Using RMAN.

We recommend that you retain backups and archive logs for a minimum of 4 days, and 7 days is recommended.
Return to the SQL prompt of the database tool that you're using to configure the Oracle log file rotation policy. We recommend setting a maximum log file size of no more than 512MB.
Enable supplemental log data. To do so, first enable supplemental logging on the database by running the following command:
```
ALTER DATABASE ADD SUPPLEMENTAL LOG DATA;
```
Next, choose whether to turn on logging for specific tables or the entire database.

To log changes only for specific tables, run the following command for each table that you want to replicate:
```
ALTER TABLE SCHEMA.TABLE ADD SUPPLEMENTAL LOG DATA (ALL) COLUMNS
```
Replace the following:
- SCHEMA: the name of the schema that contains the table.
- TABLE: the name of the table for which you want to log changes.
To replicate most or all tables in your database, consider turning logging on for the entire database.

Run the following command to enable supplemental log data for the entire database:
```
ALTER DATABASE ADD SUPPLEMENTAL LOG DATA (all) COLUMNS;
```
The supplemental logging mode must be set to ALL. You can't set this mode to PK_ONLY.

Grant the appropriate privileges to the user account that will be used to connect to your database. To do so, run the following commands:

GRANT CONNECT TO USER_NAME;
GRANT CREATE SESSION TO USER_NAME;
GRANT SELECT ON SYS.V_$DATABASE TO USER_NAME;
GRANT SELECT ON SYS.V_$ARCHIVED_LOG TO USER_NAME;
GRANT SELECT ON SYS.V_$LOGMNR_CONTENTS TO USER_NAME;
GRANT SELECT ON SYS.V_$LOGMNR_LOGS TO USER_NAME;
GRANT EXECUTE ON DBMS_LOGMNR TO USER_NAME;
GRANT EXECUTE ON DBMS_LOGMNR_D TO USER_NAME;
GRANT SELECT ANY TRANSACTION TO USER_NAME;
GRANT SELECT ANY TABLE TO USER_NAME;
GRANT SELECT ANY DICTIONARY TO USER_NAME;
GRANT EXECUTE_CATALOG_ROLE TO USER_NAME;

If your source database is Oracle 12c or newer, then grant the following additional privilege:

GRANT LOGMINING TO USER_NAME;

Configure a self-hosted Oracle pluggable database

Database Migration Service supports Oracle multi-tenant architecture, where a single container database (CDB) contains one or more pluggable databases (PDBs). Each pluggable database is a self-contained database with a unique ID and name, and can be managed independently.

To connect to a container in a multi-tenant architecture setup, or to switch between container sessions, use the following command:

ALTER SESSION SET CONTAINER = CONTAINER_NAME;

Replace CONTAINER_NAME with the name of your container, for example your pluggable database or the CDB$ROOT container.

To configure a self-hosted Oracle pluggable database so that you can use it with Database Migration Service, perform the following steps:

Verify that your database is running in ARCHIVELOG mode. To do so, run the following command from the CDB$ROOT container:

SELECT LOG_MODE FROM V$DATABASE;
1. If the result is ARCHIVELOG, then move on to step 2.
2. If the result is NOARCHIVELOG, then you'll need to enable ARCHIVELOG mode for your database.
3. Run the following commands when logged in as SYSDBA:
```
SHUTDOWN IMMEDIATE;
STARTUP MOUNT;
ALTER DATABASE ARCHIVELOG;
ALTER DATABASE OPEN;
```
  Running these commands will restart your database instance so that the changes you made to the database can take effect.
4. Archived log files consume disk space, so you'll want to configure the DB_RECOVERY_FILE_DEST_SIZE parameter for your database. Use this parameter to specify (in bytes) the hard limit on the total space to be used by target database recovery files. By setting this parameter, you can manage the tradeoff between information availability and disk space.
Define a data retention policy for your database by running the following Oracle Recovery Manager (RMAN) command from the CDB$ROOT container:
```
CONFIGURE RETENTION POLICY TO RECOVERY WINDOW OF 4 DAYS;
```
You can use the TARGET / command to start an RMAN client and connect to the source database. See Making Database Connections with RMAN.

We recommend that you retain backups and archive logs for a minimum of 4 days, and 7 days is recommended.
Return to the SQL prompt of the database tool that you're using to configure the Oracle log file rotation policy. We recommend setting a maximum log file size of no more than 512MB.
Enable supplemental log data. To do so, first enable supplemental logging on the database at the CDB$ROOT level by running the following command:
```
ALTER DATABASE ADD SUPPLEMENTAL LOG DATA;
```
Next, choose whether to turn on logging for specific tables or the entire pluggable database.

To log changes only for specific tables, connect to the pluggable database container and run the following command for each table that you want to replicate:
```
ALTER TABLE SCHEMA.TABLE ADD SUPPLEMENTAL LOG DATA (ALL) COLUMNS
```
Replace the following:
- SCHEMA: the name of the schema that contains the table.
- TABLE: the name of the table for which you want to log changes.
To replicate most or all tables in your database, consider turning logging on for the entire database.

Run the following command to enable supplemental log data for the entire database:
```
ALTER DATABASE ADD SUPPLEMENTAL LOG DATA (all) COLUMNS;
```
The supplemental logging mode must be set to ALL. You can't set this mode to PK_ONLY.
Create a common user. A common user has the same identity in the CDB$ROOT container and in the pluggable databases. A common user can connect to and perform operations within the root, and within any pluggable database in which it has privileges. The common user name must start with C## or c##.

Grant the appropriate privileges to the common user that will be used to connect to your database. Different permissions are required at the CDB$ROOT container and pluggable database levels.

Connect to the CDB$ROOT container and run the following commands:

GRANT CREATE SESSION TO USER_NAME;
GRANT SET CONTAINER TO USER_NAME;
GRANT SELECT ON SYS.V_$DATABASE TO USER_NAME;
GRANT SELECT ON SYS.V_$LOGMNR_CONTENTS TO USER_NAME;
GRANT EXECUTE ON DBMS_LOGMNR TO USER_NAME;
GRANT EXECUTE ON DBMS_LOGMNR_D TO USER_NAME;
GRANT LOGMINING TO USER_NAME;
GRANT EXECUTE_CATALOG_ROLE TO USER_NAME;

Connect to the pluggable database and run the following commands:

GRANT CREATE SESSION TO USER_NAME;
GRANT SET CONTAINER TO USER_NAME;
GRANT SELECT ANY TABLE TO USER_NAME;
GRANT SELECT ANY DICTIONARY TO USER_NAME;
GRANT SELECT ON SYS.V_$DATABASE TO USER_NAME;
GRANT SELECT ON SYS.V_$ARCHIVED_LOG TO USER_NAME;
GRANT SELECT ON DBA_SUPPLEMENTAL_LOGGING TO USER_NAME;

For each command, replace USER_NAME with the name of the common user account. Running these commands will grant privileges to the user to read from V$DATABASE (which is required for validation), start the log miner, and grant privileges to select from V$LOGMNR_CONTENT.