Oracle Database 12c Security Cookbook

Reporting on unused system privileges

In this recipe, you'll view the collected data about the unused system privileges during the capture interval.

Getting ready

You'll need an existing user who can create a privilege analysis policy (has the CAPTURE_ADMIN role and the SELECT ANY DICTIONARY privilege), for example, the SYSTEM user.

How to do it...

1. Connect to the database as system or a user who has appropriate privileges:

   $ sqlplus system
   

2. View that the user Alan has used all system privileges that have been granted to him (there are no unused system privileges):
   

   Figure 45 - The unused system privileges for the user Alan during the database policy ALL_PRIV_POL ...