OracleEntitlementreports.pptVIP

? 2009 IBM Corporation ? 2009 IBM Corporation Entitlement Reports Agenda What are Entitlement Reports? How Entitlement Reports are configured This is a presentation – no hands-on Lab Entitlement Reports are already activated within your Guardium VM 10.10.9.245 Entitlement Reports Entitlement reports keep track of database user accounts, privileges and group membership Requirement for auditing and security best practices Pre-built Oracle entitlement reports out of the box Also supports other DBMS (SQL Server, DB2, Sybase, etc) Allows for tracking at the enterprise level, on many servers automatically Scales for enterprise infrastructure (APIs available as well) Don’t need extra DBA or sql programmers to create and execute these reports Save DBA resources for other issues, and helps in separation of duties Every customer NEEDS to understand entitlements in the database Configuring Guardium Entitlement Reports The following domains are provided to facilitate uploading and reporting on Oracle DB Entitlements. Each of the following domains has a single entity (with the same name), and there is a predefined report for each domain. All of these domains are available from the Custom Query Builder. As with other predefined entities and reports, these cannot be modified, but you can clone and then tailor your own versions of any of these domains or reports. Oracle DB Entitlements Domains ORA Accnts of ALTER SYSTEM - Accounts with ALTER SYSTEM and ALTER SESSION privileges ORA Accnts with BECOME USER - Accounts with BECOME USER privileges ORA All Sys Priv and admin opt - Report showing all system privilege and admin option for users and roles ORA Obj And Columns Priv - Object and columns privileges granted WITH GRANT ORA Object Access By PUBLIC - Object access by PUBLIC ORA Object privileges - Object privileges by database account not in the SYS and not a DBA role ORA PUBLIC Exec Priv On SYS Proc - Execute privilege on SYS PL/SQL procedures assigned to PUBL OR