Reporting on used object privileges

In this recipe, you'll view collected data about the usage of object privileges during the capture interval.

Getting ready

You'll need an existing user who can create a privilege analysis policy (has the CAPTURE_ADMIN role and the SELECT ANY DICTIONARY privilege), for example, the SYSTEM user.

How to do it...

1. Connect to the database as system or a user who has appropriate privileges:

   $ sqlplus system
   

2. View which object privileges the user Alan has used while database policy ALL_PRIV_POL has been active.

   

   Figure 42 - The used object privileges

3. View grant path by querying DBA_USED_OBJPRIVS_PATH:

   

   Figure 43 - Object privileges grant path

There's more...

In EM 12c, after you have generated the report, select the policy, and from Actions drop-down menu, select Reports. The Usage Summary report will open. Click on the Used tab and verify that the user Alan has used the SELECT and DELETE privileges while ALL_PRIV_POL has been active (see Figure 44):

Figure 44 - Reports