Oracle Database 12c Security Cookbook

Chapter 9. Database Vault

In this chapter, we will cover the following tasks:

• Registering Database Vault
• Preventing users from exercising system privileges on schema objects
• Securing roles
• Preventing users from executing a specific command on a specific object
• Creating a rule set
• Creating a secure application role
• Using Database Vault to implement that administrators cannot view data
• Running Oracle Database Vault reports
• Disabling Database Vault
• Re-enabling Database Vault

Introduction

Introduction of Oracle Database Vault in 2005 brought a major change in the way security is enforced. Today, 10 years after it was introduced, it remains the most significant tool to control data access and enforce separation of duties in Oracle Database.

From licensing viewpoint, ...