> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Oracle accounts

> Add and connect to Oracle databases.

Oracle accounts let you manage access to your Oracle databases. Users connect through the CLI, which starts a local proxy, and every [session](/docs/documentation/platform/pam/sessions/overview) is recorded.

## Creating an account

<Steps>
  <Step title="Start adding an account">
    Go to **Privileged Access Management → Accounts** and select **Add Account**.
  </Step>

  <Step title="Select a folder and template">
    Choose which [folder](/docs/documentation/platform/pam/folders/overview) to add the account to, then select an Oracle [template](/docs/documentation/platform/pam/templates/overview).
  </Step>

  <Step title="Enter connection details">
    | Field                   | Description                                                        |
    | ----------------------- | ------------------------------------------------------------------ |
    | **Name**                | A descriptive name (e.g., `billing-db`)                            |
    | **Host**                | Database hostname or IP                                            |
    | **Port**                | Listener port (default: 1521, or 2484 for TCPS)                    |
    | **Service Name**        | The Oracle service name, such as `ORCL` or `FREEPDB1`              |
    | **SSL Enabled**         | Connect to the TCPS listener                                       |
    | **Reject Unauthorized** | Reject connections with invalid certificates (only if SSL enabled) |
    | **SSL Certificate**     | Custom CA certificate (only if SSL enabled)                        |
  </Step>

  <Step title="Enter credentials">
    | Field        | Description                                                                           |
    | ------------ | ------------------------------------------------------------------------------------- |
    | **Username** | The Oracle username, exactly as Oracle stores it. Unquoted names are stored uppercase |
    | **Password** | The Oracle password. Maximum 30 characters                                            |
  </Step>

  <Step title="Save">
    Select **Create**.
  </Step>
</Steps>

Infisical checks it can reach the host before saving, so a wrong host or port fails at **Create**. The username and password are verified by the first [credential health check](/docs/documentation/platform/pam/product-reference/credential-health/overview), which reports **Out of Sync** if Oracle rejects them.

## Connecting

The CLI starts a local proxy that you connect to with your preferred Oracle client.

```bash theme={"dark"}
infisical pam access my-folder/billing-db
```

The command outputs the local port to connect to, along with the username and service name.

Then use `sqlplus`, SQL Developer, or any Oracle client:

```bash theme={"dark"}
sqlplus <username>/password@127.0.0.1:<port>/<service-name>
```

**Flags:**

* `--port <port>`: use a specific local port (otherwise one is assigned automatically)
* `--reason <reason>`: provide an access reason (if required by template)

## Next steps

<CardGroup cols={2}>
  <Card title="Oracle credential rotation" icon="rotate" href="/docs/documentation/platform/pam/product-reference/credential-rotation/oracledb">
    Rotate Oracle account passwords on a schedule.
  </Card>

  <Card title="Sessions" icon="display" href="/docs/documentation/platform/pam/sessions/overview">
    View and manage sessions.
  </Card>
</CardGroup>