TDE

Hi

t've separate user in my standalone database(12.2) for managing wallet

SQL> select username,sysdba,syskm,account_status from v$pwfile_users;

USERNAME SYSDB  SYSKM  ACCOUNT_STATUS

-------- ------ ------ ----------------------------

SYS      TRUE   FALSE  OPEN

SYSKM    FALSE  TRUE   OPEN

I use syskm to create/open/close  soft wallet.  sys is also able to do the same, though syskm role is not granted . Is it possible to restrict sys from managing wallets,in view of segregation of duties

Thanx for help