Oracle Database

Create a User

As a DBA or SYSDBA, create a dedicated read-only user for Dot.

CREATE USER dot_reader IDENTIFIED BY '<something secret>';
GRANT CREATE SESSION TO dot_reader;

Grant Read Access to Data

For each schema you want Dot to access, grant SELECT on all tables.

BEGIN
  FOR t IN (SELECT table_name FROM all_tables WHERE owner = '<SCHEMA>') LOOP
    EXECUTE IMMEDIATE 'GRANT SELECT ON <SCHEMA>.' || t.table_name || ' TO dot_reader';
  END LOOP;
END;
/

Note: Replace <SCHEMA> with the schema/owner name (e.g. HR, SALES). Repeat for each schema you want to expose to Dot.

To also grant access to views:

BEGIN
  FOR v IN (SELECT view_name FROM all_views WHERE owner = '<SCHEMA>') LOOP
    EXECUTE IMMEDIATE 'GRANT SELECT ON <SCHEMA>.' || v.view_name || ' TO dot_reader';
  END LOOP;
END;
/

Connection Details

In Dot, use these fields:

• Host: Your Oracle server hostname or IP address

• Port: 1521 (default Oracle listener port)

• Service Name: Your Oracle service name (e.g. ORCL, XEPDB1, FREEPDB1)

• Username: dot_reader

• Password: The password you set above

Dot connects directly using Oracle's TNS protocol (Thin mode) — no Oracle Client installation is required on the Dot side.

Allow Dot IPs

If your organization uses a firewall to manage Oracle access, Dot will only access your database through the following IPs:

• 5.78.211.110

• 178.105.217.177

Connect via SSH Tunnel

If your database is in a private network or behind a firewall, Dot can connect through an SSH bastion host instead of exposing it directly. In the connection dialog, enable Connect via SSH Tunnel and provide:

• SSH Host: your bastion / jump server

• SSH Port: 22 (default) or a custom port

• SSH Username: the SSH user

• SSH Authentication: SSH password or private key

Dot tunnels the database connection through the bastion, so the database itself never needs a public endpoint.