Database vault with CREATE USER
Introduction
There is the application. The application schema owner create users to access to the schema objects.
The client want to protect application data from DBA by using Database Vault.
The supplier does not want to change anything in his aplication.
Case
After implementing database vault. Database administrator could not see access application data.
But Schema owner could not create new users.
TEMPORARY TABLESPACE TEMP;
Error
ORA-01031 Insufficient privilages
I have disabled
"CREATE USER" Command rule in Database Vault
And grant CREATE USER back to the SCHEMA OWNER
but nothing changes
The client want to protect application data from DBA by using Database Vault.
The supplier does not want to change anything in his aplication.
Case
After implementing database vault. Database administrator could not see access application data.
But Schema owner could not create new users.
CREATE USER TEST IDENTIFIED BY test
DEFAULT TABLESPACE USERS
TEMPORARY TABLESPACE TEMP;
Error
ORA-01031 Insufficient privilages
I have disabled
"CREATE USER" Command rule in Database Vault
And grant CREATE USER back to the SCHEMA OWNER
but nothing changes
0