To avoid a possible denial of service caused by exhausting these resources, regular user accounts should not use these tablespaces. The SYSTEM and SYSAUX tablespaces are reserved for Oracle-supplied user accounts. User Schemas in SYSTEM or SYSAUX Tablespaceĭisplays information about the regular user accounts that use the reserved Oracle-supplied tablespaces. Oracle Defined - Displays whether the user account is oracle maintained or not.Īuthorization Type - Displays the type of authorization used. Tablespace - Displays the tablespace used by the account. Status - Displays whether the account is Open, Locked, or Expired. User Name - Displays the name of the user. READ or SELECT on SYS.DBA_USERS_WITH_DEFPWD (11 g and later)ĭisplays the user accounts and the following information about each account: Role DV_SECANALYST (if Database Vault is enabled or if Database Grant the DBSAT user the following privileges: Must connect to the database as a user with sufficient privileges to select from The Oracle DBSAT Collector collects most of its data by querying database views. Order to collect and process file system data using OS commands. Read permissions on files and directories under ORACLE_HOME in In addition, the Oracle DBSAT Collector must be run as an OS user with Server that contains the database, because it executes some operating systemĬommands to collect process and file system information that cannot be obtained from In order to collect complete data, the Oracle DBSAT Collector must be run on the The following figure shows the components, sources, and reports of the Oracle You are not limited to running the Discoverer on theĭatabase server or the same machine as the Collector or Reporter. The Discoverer can run on any machine: PC, The collectedĭata is then used to generate the Oracle Database Sensitive Data Assessment Itĭoes this primarily by querying database dictionary views. The Discoverer executes SQL queries and collects data from the system to beĪssessed, based on the settings specified in the configuration files. To running the Reporter on the database server or the same machine as the Reporter can run on any machine: PC, laptop, or server. Security Assessment Report in HTML, Excel, JSON, and Text formats. The Reporter analyzes the collected data and generates the Oracle Database The collected data is written to a JSON file that is used by the DBSAT Reporter in the analysis phase. It does this primarily by querying database dictionary views. The Collector executes SQL queries and runs operating system commands to collect data from the system to be assessed. The Oracle DBSAT consists of the following components: