1. Using Oracle Data Safe
  2. User Assessment
  3. Compare User Assessments
  4. Set the Latest User Assessment or a Saved Assessment as the Baseline for a Target Database

Set the Latest User Assessment or a Saved Assessment as the Baseline for a Target Database

You can set an assessment for a target database as a baseline.

Note:

The Set as Baseline operation requires read permission on the data-safe-work-requests resource in IAM.
  1. Under Security Center, click User Assessment.
  2. From the User Assessment page, click the Target Summary tab.
  3. From under List Scope, select the compartment that contains your target database.
  4. (Optional) Under Filters, select a target database from the Target databases list to narrow the scope of displayed metrics and charts.
  5. In the Target Summary table, locate your target database and then click the View Report link to open the latest assessment report.

    The User Assessment Details page shows the latest assessment.

  6. Review the user accounts, their privileges, and potential risk level.
  7. If you are confident that the overall potential risk level reported in the latest assessment is acceptable in the baseline, then click Set as Baseline and then click Yes to confirm.

If instead you want to set an earlier assessment as the baseline, then back on the same User Assessment Details page where the latest assessment is displayed, click View History.

  1. On the Assessment History page, find an assessment that looks like a potential candidate for use as the baseline. At this level you can see how many roles are granted within the target database and how many accounts are high or critical potential risk.
  2. In the Assessment Name column, click on the assessment to see more details. Here you can see all privileged and non-privileged users as well as the open potential risks posed by each user.
  3. If you are confident that this assessment is a good choice for the baseline, then click Set as Baseline.

    The Set as Baseline dialog box is displayed.

  4. Click Yes to confirm.

Once you have set a baseline, future assessments of the target database automatically include a check for security drift, which is any deviation from the baseline. You are also then able to manually compare any saved assessment with the baseline to check for security drift.