A note on my environment: the EE database is hosted on AWS.
AWS does not support connecting as SYSDBA; Certain sys privileges (SELECT ANY DICTIONARY) are blocked.
Developer-role accounts are directly assigned a mess of elevated privileges.
OraNet (TNSNAMES) is not allowed -- sqlplus, sqldeveloper, etc., are not options.
Login to the APEX URL is authenticated by a smart card rather than a password.
My user has (thankfully) developer as well as administrator roles
The former DBAs who touched this last are long gone.
There is no actual APEX application, fortunately. The APEX framework exists to provide the SQL Worksheet to certain authorized personnel (mostly RO queries).
I have three objectives:
What needs to change in order for developer-role assignees to have least-necessary privileges
Need to query or execute SYS-schema objects -- how to confirm I have DBA rights OR to get rights if not
Better assistance to the developers -- what's available to them within the SQL Worksheet features
I do have a DBA-level user account -- perhaps the biggest gap in my understanding is how that relates (or not) to the APEX-related schemas. Conversation appreciated, AWS-experience preferred.