Oracle Cloud Infrastructure Documentation

Run and Manage Subsetting Readiness Reports

Readiness checks that identify issues in the subsetting policy or database are triggered automatically when a subsetting job is run. You can also run a subsetting readiness report at any time to perform readiness checks before executing the subsetting operation.

The following readiness checks are performed:

  • Check if the tables being subsetted have Virtual Private Database (VPD) policies applied.
  • Check whether Database Vault (DV) is enabled on the selected database.
  • Check if the provided database user has required privileges to perform subsetting.
  • Check if the subsetting rules in the subsetting policy are valid on the selected database.
  • Check if there are active subsetting jobs. Concurrent jobs are not allowed on a database.
  • Check if the tables being subsetted have up-to-date statistics.
  • Check if the USER default tablespace and the TEMP tablespace have enough free space to perform subsetting.
  • Check whether autoextend is enabled for UNDO tablespaces or whether they have enough space.
  • Check if the tables being subsetted have audit policies enabled.
  • Check if the tables being subsetted have redaction policies applied.

If VPD, DV, audit policies, and redaction policies are enabled on subsetting tables, and if the database user doesn’t have enough privileges, data subsetting might fail. Also post subsetting, these policies will not be auto-enabled/created. You will have to manually enable or create these policies.

Run a Subsetting Readiness Report

You can run a subsetting readiness report from the Subsetting readiness reports page or from the Actions menu on a Subsetting policy page.

  1. Under Data Safe - Database Security, expand Data subsetting, and then select Subsetting readiness reports.

  2. Select Run subsetting readiness check.

    The Subsetting readiness check panel opens.

  3. Select a target database compartment and target database name.

  4. Select a subsetting policy compartment and subsetting policy name.

  5. Select a compartment for the subsetting readiness report.

  6. (Optional) Enter a tablespace to be used for subsetting.

    If no tablespace is specified, the user’s default tablespace is used.

  7. Enter your target database username and password.

  8. Select Run subsetting readiness check.

    You are returned to the Subsetting readiness reports page.

  9. In the table, select the name of your subsetting readiness report and view it.

View a Subsetting Readiness Report

  1. Under Data Safe - Database Security, expand Data subsetting, and then select Subsetting readiness reports.

  2. Search and filter as needed.

  3. Select the name of a subsetting readiness report to open it.

    The subsetting readiness report opens.

  4. On the Details tab, under General information, review the following information:

    • OCID of the subsetting readiness report - Select Copy to copy the OCID to the clipboard.
    • Compartment of the subsetting readiness report
    • When the subsetting readiness report was created and updated
    • Target database name - Select View to navigate to the database (page) for which checks were run.
    • Subsetting policy name - Select View to navigate to the Subsetting policy page.
    • Number of warnings
    • Number of errors

  5. Under Readiness checks, review the table of messages. Search and filter as needed. Each row in the table includes the following information:

    • Message
    • Message type (Error, Warning, Pass) - You can select the arrow next to the Type heading and select a filter.
    • Remediation steps
    • Timestamp

  6. (Optional) Select Subset database to configure and start a subsetting job. The target database is selected from the readiness report and you need to provide the remaining details, such as credentials, tablespace, subsetting options, and so on.

Move a Subsetting Readiness Report

  1. Under Data Safe - Database Security, expand Data subsetting, and then select Subsetting readiness reports.

  2. Search and filter as needed.

  3. On the same row as the subsetting readiness report that you want to move, select the three dots, and then select Move resource.

    The Move resource panel opens.

  4. Select the compartment to move the subsetting readiness report to.

  5. Select Move resource.

    The subsetting readiness report is moved to the selected compartment.

Delete a Subsetting Readiness Report

You can delete a subsetting readiness report from the Subsetting readiness reports page and from the subsetting reports page itself via the Actions menu.

  1. Under Data Safe - Database Security, expand Data subsetting, and then select Subsetting readiness reports.

  2. Search and filter as needed.

  3. On the same row as the subsetting readiness report that you want to delete, select the three dots, and then select Delete.

    A Delete Subsetting readiness report dialog box appears, asking you to confirm the deletion.

  4. Select Delete.