Oracle check
Learn about the credential and permission requirements for the Oracle checks app.oracle.check-oracle-alive, app.oracle.metrics-oracle, and util.metrics-oracle-query.
Oracle checks require two separate accounts with different permissions.
Oracle database account
The database user configured in ServiceNow® must have the following permissions:
- CREATE SESSION or CONNECT
- SELECT access to the Oracle views or tables queried by the specific check that is running
| Check | Queries |
|---|---|
check-oracle-alive |
SELECT BANNER FROM v$version WHERE banner LIKE 'Oracle%' |
metrics-oracle |
SELECT TABLESPACE_NAME, sum(BYTES), sum(MAXBYTES) FROM sys.dba_data_files GROUP BY TABLESPACE_NAME |
util.metrics-oracle-query |
Any custom query. The database account needs SELECT on the object targeted by that query. |
Agent Client Collector agent OS account
All three checks run sqlplus locally on the target host where the OS account runs the Agent Client Collector agent. This is a separate identity from the Oracle database account.
Agent Client Collector agent OS account needs the following access:
- Execute access to
$ORACLE_HOME/bin/sqlplus - Access to Oracle client libraries under
$ORACLE_HOME/lib - Access to Oracle configuration files if applicable, such as
tnsnames.oraandsqlnet.ora
Depending on the Oracle installation, this means the Agent Client Collector agent OS account must be a member of oinstall or a database administrator.
Configuration Prerequisites:
sqlplusinstalled and reachable at$ORACLE_HOME/bin/sqlplus- Oracle listener reachable from the agent host through
--host,default localhost, and--port, default 1521 - Valid Oracle database credentials
| Error | Cause |
|---|---|
Permission denied or command not found on sqlplus |
The Agent Client Collector agent OS account lacks access to $ORACLE_HOME or sqlplus. This is not a database credential problem. |
ORA-xxxxx errors |
Oracle-side error that points to the database account or grants and not the OS account. |
Custom query fails only on util.metrics-oracle-query |
Re-check SELECT grants whenever --query is changed to target a new object. |
Parent Topic:Agent Client Collector checks – credential and permission requirements
--- title: Oracle check description: Learn about the credential and permission requirements for the Oracle checks app.oracle.check-oracle-alive, app.oracle.metrics-oracle, and util.metrics-oracle-query. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/it-operations-management/agent-client-collector/oracle-check.html release: australia product: Agent Client Collector classification: agent-client-collector topic_type: reference last_updated: "2026-09-29" reading_time_minutes: 1 breadcrumb: [Agent Client Collector checks – credential and permission requirements, ACC-M reference, Agent Client Collector reference, Agent Client Collector, IT Operations Management] --- # Oracle check Learn about the credential and permission requirements for the Oracle checks `app.oracle.check-oracle-alive`, `app.oracle.metrics-oracle`, and `util.metrics-oracle-query`. Oracle checks require two separate accounts with different permissions. ## Oracle database account The database user configured in ServiceNow® must have the following permissions: - CREATE SESSION or CONNECT - SELECT access to the Oracle views or tables queried by the specific check that is running |Check|Queries| |-----|-------| |`check-oracle-alive`|`SELECT BANNER FROM v$version WHERE banner LIKE 'Oracle%'`| |`metrics-oracle`|`SELECT TABLESPACE_NAME, sum(BYTES), sum(MAXBYTES) FROM sys.dba_data_files GROUP BY TABLESPACE_NAME`| |`util.metrics-oracle-query`|Any custom query. The database account needs SELECT on the object targeted by that query.| ## Agent Client Collector agent OS account All three checks run `sqlplus` locally on the target host where the OS account runs the Agent Client Collector agent. This is a separate identity from the Oracle database account. Agent Client Collector agent OS account needs the following access: - Execute access to `$ORACLE_HOME/bin/sqlplus` - Access to Oracle client libraries under `$ORACLE_HOME/lib` - Access to Oracle configuration files if applicable, such as `tnsnames.ora` and `sqlnet.ora` Depending on the Oracle installation, this means the Agent Client Collector agent OS account must be a member of `oinstall` or a database administrator. Configuration Prerequisites: - `sqlplus` installed and reachable at `$ORACLE_HOME/bin/sqlplus` - Oracle listener reachable from the agent host through `--host`, `default localhost`, and `--port`, default 1521 - Valid Oracle database credentials |Error|Cause| |-----|-----| |Permission denied or command not found on `sqlplus`|The Agent Client Collector agent OS account lacks access to `$ORACLE_HOME` or `sqlplus`. This is not a database credential problem.| |`ORA-xxxxx` errors|Oracle-side error that points to the database account or grants and not the OS account.| |Custom query fails only on `util.metrics-oracle-query`|Re-check SELECT grants whenever `--query` is changed to target a new object.| **Parent Topic:**[Agent Client Collector checks – credential and permission requirements](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/agent-client-collector/acc-monitoring-checks-credential-and-permission-requirements.md)
| title | Oracle check |
| description | Learn about the credential and permission requirements for the Oracle checks app.oracle.check-oracle-alive, app.oracle.metrics-oracle, and util.metrics-oracle-query. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/it-operations-management/agent-client-collector/oracle-check.html |
| release | australia |
| product | Agent Client Collector |
| classification | agent-client-collector |
| topic_type | reference |
| last_updated | 2026-09-29 |
| reading_time_minutes | 1 |
| breadcrumb | Agent Client Collector checks – credential and permission requirementsACC-M referenceAgent Client Collector referenceAgent Client CollectorIT Operations Management |