Work with User Assessments and Target Database Groups

Structure of a User Assessment for a Target Database Group

A user assessment for a target database group is organized into four tabs: Details, Overview, Assessment details, and Tags.

Details tab

On the Details tab, you can view the following general information about the assessment and target database group.

  • OCID for the assessment
  • Compartment name
  • Created (timestamp)
  • Assessed time (timestamp)
  • Target database group name
  • Number of target databases in the group

Overview tab

On the Overview tab, you can view the following charts:

  • Potential user risk pie chart
  • User roles bar chart
  • Last password change bar chart
  • Last login bar chart

Assessment details tab

On the Assessment details tab, you can view the following user details.

  • User name
  • Target database name
  • User type (for example, PRIVILEGED or SCHEMA)
  • Whether the user is a DBA, DV admin, or Audit admin
  • Potential risk level (for example, LOW or CRITICAL)
  • Status (for example, LOCKED, OPEN, or EXPIRED_AND_LOCKED)
  • Password changed time (timestamp)
  • Last login time (timestamp)
  • Schema access (a list of schemas the user has access to)
  • User profile
  • Audit records - You can select the View activity link to view the user's audit records in the All Activity Report. From here you can select other auditing reports or select the browser's back button to return to the Assessment details tab.
  • Password expiry date

Tags tab

On the Tags tab, you can create and manage Oracle Cloud Infrastructure tags.

View a User Assessment Analysis Across All Target Database Groups

The table on the Target group summary tab shows you an overview of all target group assessments and their respective risk levels. You can select the name of a target database group to view more assessment details.

  1. On the User assessment landing page, select the Target group summary tab.
  2. Next to Applied filters, select the compartment that contains the target database groups for which you want to view an assessment. If needed, use the Search and Filter box to help filter the list of targets.
    • To include all compartments in your tenancy, set the scope to root with its child compartments.
    • You can access only compartments and target databases within compartments for which you have permissions in Oracle Cloud Infrastructure Identity and Access Management (OIM).
  3. For each target database group, view the number of Critical, High, DBA, DV admin, Audit admin users as well as the Last assessed time.

Create a User Assessment for a Target Database Group

You can create a user assessment for a target database group.

  1. On the User Assessment landing page, select the Target group summary tab.
  2. Next to Applied filters, select your compartment.
  3. Select Create assessment for target database group. The Create assessment for target database group panel opens.
  4. Enter a name for the user assessment.
  5. Select the compartment in which to store the user assessment.
  6. (Optional) Enter a description for the user assessment.
  7. Select the compartment to which the target database group belongs.
  8. Select the name of the target database group.
  9. Select Create group assessment.
  10. View the user assessment. Its content is divided up into four tabs: Details (general metadata), Overview (charts), Assessment details (user details), and Tags.

View the Latest User Assessment for a Target Database Group

  1. On the User assessment landing page, select the Target group summary tab.
  2. Next to Applied filters, select the compartment that contains your target database group.
  3. Select the name of your target database group. The latest assessment for your target database group opens.
  4. On the Details tab, view general information and target database group metadata.
  5. Select the Overview tab and view the charts.
  6. Select the Assessment details tab and view details about all the users in the target databases that are part of the target database group.
    • Oracle Data Safe automatically updates the information on this tab as changes occur on the target databases in the group.
  7. (Optional) Select the Tag tab and create and manage Oracle Cloud Infrastructure tags.

Generate and Download a User Assessment Report for a Target Database Group

You can generate and download a PDF or XLS report of a user assessment for a target database group.

To generate and then download a report:

  1. Open the latest user assessment for a target database group.
  2. Select Generate report. The Generate report panel opens.
  3. Select PDF or XLS, and then select Generate report. Wait for the report to generate.
  4. Select Download report. The report is downloaded to your local computer.
  5. Select Cancel to close the panel.

To download a previously generated report:

  1. Open the latest user assessment for a target database group.
  2. From the Actions menu, select Download report. The Download report panel opens.
  3. Select the report format previously generated (PDF or XLS), and then select Download report. If you select a format not previously generate, you will get an error. The report is downloaded to your local computer.
  4. Select Cancel to close the panel.