Oracle Database 12c Security Cookbook

Reporting on unused object privileges

In this recipe, you'll view collected data about the unused object privileges during the capture interval.

Getting ready

You'll need an existing user who can create a privilege analysis policy (has the CAPTURE_ADMIN role and the SELECT ANY DICTIONARY privilege), for example, the SYSTEM user.

How to do it...

1. Connect to the database as system or a user who has appropriate privileges:

   $ sqlplus system
   

2. View which object privileges the user Alan has used during the database policy capture interval:
   

   Figure 46 - The unused object privileges

There's more...

In EM 12c, after you have generated the report, select the policy, ...