...application-tier etc. then you should keep rights (and responsibilites) to the respective administrators. root should not be oracle user and sap* at the same time, and must not know their passwords. Exception: if you are the only admin running unix, oracle AND the app, e.g. SAP. Of course can...