Creating combined analysis policy
In this recipe, you'll create a combined analysis policy. This type of policy defines that the usage of directly and indirectly granted privilege to specified roles will be gathered if roles are enabled in the session and the context condition is satisfied. The context condition can consist of one or more conditions (you can use the AND
or OR
Boolean operators).
Getting ready
You'll need an existing user who can create a privilege analysis policy (has the CAPTURE_ADMIN
role and the SELECT ANY DICTIONARY
privilege), for example, the SYSTEM
user.
How to do it...
Connect to the database as system or a user who has appropriate privileges:
$ sqlplus system
Create a privilege analysis policy that captures the usage of privileges, when using SQL Developer, which are granted through the role
P2_ROLE
:SQL> BEGIN SYS.DBMS_PRIVILEGE_CAPTURE.CREATE_CAPTURE( name => '<policy_name>', description => '<your_desc>', type ...