Oracle DBA Role and its specific functions (and possible replacement)

I have to install an application server that requires an user to write to the database, possibly create new schemes and such. However, I've always used the "work around" to assign the DBA Role to that user.

I have some questions, as I am not that deep into Oracle security.

1. Has the DBA role a level o开发者_运维问答f privileges that can affect the whole Oracle installation?
2. Where can I find what privileges the DBA role exactly have?
3. How do I create an alternative role?

Thanks,

---

1) Yes, the dba role should have enough privileges to screw up a database beyond fixing.

2)

select * 
  from role_sys_privs 
 where grantee = 'DBA';

3) Unless you plan on having several user with similar privileges, I recommend creating a user and grant all needed privileges explicitly to this user instead of via a role.

You can read more about the topic in Oracle Database Security Guide chapter 11, Administering User Privileges, Roles, and Profiles

---

First look into Ronnis' solution. If this is not sufficient create a package, owned by SYSTEM, and grant EXECUTE to the user or users that need it. Add procedures that perform the needed operations taking care to limit their power as much as possible.