Grouping databases with CMU

AbbY-OC

Hello Gurus,

Not sure if this is the right forum to ask the q, but I could not find any specific forum for CMU.

Given that CMU talks directly to AD, how can limit users to a group of databases?

Say 3 Data Archs wants access to a varying subset of databases. Without having to create multiple roles on the databases, how can one limit access for the Archs to only the targets they need access to -

DataArch_1 --> Ent_DataArch_Role --> {DB_1, DB_10, DB_11,...}

DataArch_2 --> Ent_DataArch_Role --> {DB_4, DB_6, DB_11,...}

...

Or do I have to create "Ent_DataArch_1_Role", "Ent_DataArch_2_Role"... in each of the databases they need access to?

Thanks,

aBBy

Srinath Menon-Oracle

Or do I have to create "Ent_DataArch_1_Role", "Ent_DataArch_2_Role"... in each of the databases they need access to?

It seems this is the only way to achieve this requirement.

AbbY-OC

Thanks Srinath,

Can OUD provide the solution to this then? We create a virtual group of databases and assign the user to that virtual group?

AbbY-OC

Hello OUD user community,

In the same thread - How is every one managing users & databases in their enterprise?

• User_A needs access 5-Random databases
• UserGroup_A needs access to a different set of databases

And so on...

Any suggestions would be a great help.

aBBy

Sandeep Kumar sk

@AbbY-OC Here is a reference/blog for implementing RBAC or Role-Based Access Control with CMU. There is a section on implementing RBAC with Active Directory. Hope this helps.