Oracle Break Glass for Cloud EPM and Cloud EDM

Oracle Break Glass for Oracle Fusion Cloud Enterprise Performance Management and Oracle Fusion Cloud Enterprise Data Management gives you enhanced security and governance controls to manage Oracle operator access to your data and maintain control over encryption keys for your data.

When you enable Oracle Break Glass, you gain the following capabilities:

Oracle Managed Access (OMA)

Oracle Managed Access (OMA) lets you approve or deny requests from Oracle operators to access your environments.

When you enable Break Glass, Oracle Operations personnel cannot access your data by default. Instead, they must submit an access request, typically linked to a Service Request (SR). Designated approvers in your organization review and approve or deny each request.

You grant access that is:

• Temporary
• Time-bound
• Fully auditable

This approach allows Oracle to troubleshoot issues while you retain full control over access.

When access is granted, it is temporary, auditable, and limited to the approved duration, ensuring strong governance and traceability.

Bring Your Own Key (BYOK)

Bring Your Own Key (BYOK) lets you provide and manage your own Transparent Data Encryption (TDE) keys to encrypt the data.

With BYOK, you:

• Maintain full control over encryption keys
• Store and manage keys in OCI Vault
• Align encryption with your security and compliance requirements

Enabling Oracle Break Glass

Customers can obtain the Break Glass capability in the following ways:

• Include Break Glass SKU during the original onboarding order
• Add Break Glass SKU as an additional subscription