Oracle DB Administration User without Access to Business Data

[stefan_boettcher]

Hi,

I'm currently evaluating the options to have an database administration user for an SAP system running with Oracle that allows me to use all the brtools functionality (backup, restore, tablespace admin, start/stop DB, etc.) (also via sqlplus) but denies reading any business data (e.g. via select in sqlplus) from the DB.

Do you have any ideas how to implement this data security requirement?

Thanks,

Stefan

[Former Member]

Please read the following:

SAP on Oracle - Security

Regards

Roman

[Former Member]

Isn't it there already? OPS$ users?

[Former Member]

Additionally, you can use Oracle Database Vault. Check the link, below;

http://docs.oracle.com/cd/B28359_01/server.111/b31222/dvintro.htm

Best regards,

Orkun Gedik

[Former Member]

Hi Stefan,

You can set the privileges by creating new user at Oracle level and give the required permissions to that. Additionally, you can set the user security by configuring SQLPLUS_PRODUCT_PROFILE table, also. Please note that do not modify the SAP database owner. Just keep the password in secure and create a new user.

By doing so, you brtools will not be affected and can be used without any other modification.

Best regards,

Orkun Gedik