System Privilege Auditing

System privilege auditing lets you track the use of system privileges. In the AUDIT command, you can specify any system privilege. An audit record will be generated any time you exercise the specified system privilege. You are also able to audit the exercise of a system privilege by all users or a specific user.

AUDIT system_privilege [,system_privilege ...]
   [BY user[,user ...]]
   [BY SESSION [WHENEVER [NOT] SUCCESSFUL]
   [BY ACCESS [WHENEVER [NOT] SUCCESSFUL]

In this case, system_privilege can be any system privilege or one of the system privilege shortcuts. Table 7.4 lists all the system privilege shortcuts that have been defined.

Table 7-4. System Privilege Auditing Shortcuts

System Privilege Shortcut

System Privileges Represented

CONNECT

CREATE SESSION

RESOURCE

ALTER SESSION

CREATE CLUSTER

CREATE DATABASE LINK

CREATE PROCEDURE

CREATE ROLLBACK SEGMENT

CREATE SEQUENCE

CREATE SYNONYM

CREATE TABLE

CREATE TABLESPACE

CREATE VIEW

DBA

SYSTEM GRANT statement option

AUDIT SYSTEM

CREATE PUBLIC DATABASE LINK

CREATE PUBLIC SYNONYM

CREATE ROLE

CREATE USER

ALL

Equivalent to all SQL statement options in Table 7.2

ALL PRIVILEGES

Equivalent to all system privileges

Get Oracle Database Administration: The Essential Refe now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial