Introduction

Introduction of Oracle Database Vault in 2005 brought a major change in the way security is enforced. Today, 10 years after it was introduced, it remains the most significant tool to control data access and enforce separation of duties in Oracle Database.

From licensing viewpoint, it is only available as an option for Oracle Database Enterprise Edition.

You need to understand how, when, why, and which component of Database Vault you should implement in order to successfully protect your database. In this chapter, you are going to learn to create and appropriately use realms, rules, rule sets, command rules, factors, and secure application roles. Basic concepts are covered in this chapter, whereas doing everyday administration tasks in Database Vault environment, more advanced topics, and security in more complex environments are explained in Chapter 11, Additional Topics.

For all recipes in this chapter, we assume that database is up and running, and each user has at least a create...