separation of duties - different DBAs creating different types of users
Our company is looking to let one group of DBAs only create certain type of users and another group of DBAs to create a different type of users (most likely the difference between the two type of users will be the profile). Each of the DBAs have a DBA privilege and so I don't see how some DBAs can be restricted to only creating users with specific profile, but I also know that this requirement will be affecting multiple other companies. So I am asking if anyone has a way to place any restrictions on one group of DBAs in