Skip to Main Content
Forums

Security Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Grouping databases with CMU

AbbY-OCAug 27 2020 — edited Sep 2 2020

Hello Gurus,

Not sure if this is the right forum to ask the q, but I could not find any specific forum for CMU.

Given that CMU talks directly to AD, how can limit users to a group of databases?

Say 3 Data Archs wants access to a varying subset of databases. Without having to create multiple roles on the databases, how can one limit access for the Archs to only the targets they need access to -

DataArch_1 --> Ent_DataArch_Role --> {DB_1, DB_10, DB_11,...}

DataArch_2 --> Ent_DataArch_Role --> {DB_4, DB_6, DB_11,...}

...

Or do I have to create "Ent_DataArch_1_Role", "Ent_DataArch_2_Role"... in each of the databases they need access to?

Thanks,

aBBy

Comments

Srinath Menon-Oracle 
Or do I have to create "Ent_DataArch_1_Role", "Ent_DataArch_2_Role"... in each of the databases they need access to?

It seems this is the only way to achieve this requirement.

AbbY-OC

Thanks Srinath,

Can OUD provide the solution to this then? We create a virtual group of databases and assign the user to that virtual group?

AbbY-OC

Hello OUD user community,
In the same thread - How is every one managing users & databases in their enterprise?
User_A needs access 5-Random databases
UserGroup_A needs access to a different set of databases
And so on...
Any suggestions would be a great help.
aBBy

Sandeep Kumar sk

@abby-oc Here is a reference/blog for implementing RBAC or Role-Based Access Control with CMU. There is a section on implementing RBAC with Active Directory. Hope this helps.

1 - 4

Post Details

Added on Aug 27 2020
#identity-management, #oracle-unified-directory-oud-oracle-directory-server-enterprise-edition-sun-dsee
4 comments
198 views
1 mention