Então, eu vi que o sysoper pode fazer:
-Perform STARTUP and SHUTDOWN operations
-CREATE SPFILE
-ALTER DATABASE OPEN/MOUNT/BACKUP
-ALTER DATABASE ARCHIVELOG
-ALTER DATABASE RECOVER (Complete recovery only. Any form of incomplete recovery, such as UNTIL TIME|CHANGE|CANCEL|CONTROLFILE requires connecting as SYSDBA.)
-Includes the RESTRICTED SESSION privilege
This privilege allows a user to perform basic operational tasks, but without the ability to look at user data