Introduction
Privilege analysis is a new security feature, introduced in Oracle Database 12c. It is only available in Oracle Database Enterprise Edition, and from licensing viewpoint, it is part of Oracle Database Vault option.
Privilege analysis is very useful to implement and maintain the least privilege principle by identifying both privileges that users are actually using (used privileges) and those that are only granted to them (unused privileges).
General steps to analyze privileges using this feature are shown in Figure 1.
Figure 1 - The steps to analyzethe used and unused privileges
In this chapter, it is assumed that all users have a create session privilege, and in the following table, other privileges and roles granted to the users and roles are listed:
|
USER/ROLE |
HR.EMPLOYEES |
OE.ORDERS |
ROLES/SYS.PRIVS. |
|
|
| ||
|
|
| ||
|
|
| ||
|
|
| ||
|
|
| ||
|
|
|
|
