Configuring Administrative Accounts for Oracle Audit Vault Server

Learn how to configure administrative accounts for Oracle Audit Vault Server.

Guidelines for Securing Oracle Database Security Central User Accounts

Review the guidelines for securing Oracle Database Security Central user accounts.

As a best practice, use the installed Oracle Database Security Central user accounts only as back-up accounts. Add new user accounts, with unique user names and passwords, for the users who are responsible for the day-to-day Oracle Database Security Central operations.

Note: Oracle Database Security Central does not accept user names with quotation marks. For example, "jsmith" is not a valid user name for an Oracle Database Security Central user account, or an account created on a target for use by Oracle Database Security Central.

Creating Local Administrative User

You can create Audit Vault Server administrative accounts to manage administration.

Audit Vault Server super administrators can create both super administrator and administrator user accounts.

1. Log in to the Oracle Database Security Central console as a super administrator.

2. Select Settings.

   The Manage Admins on the main page is selected by default.

3. Select Add in the top, right corner.

4. In the Add Admin dialog box, select Local Oracle Database Security Central User.

5. For Local Oracle Database Security Central User, enter the details to create a database administrator.

6. Enter the newly created Admin Name.

7. Select the Admin Type.

8. Enter the Password and Re-type Password.

   Oracle Database Security Central does not accept user names with quotation marks, such as "jsmith".

9. Select Save.

Related Topics

• About Oracle Database Security Central Administrative Accounts

Viewing the Status of Administrator User Accounts

Learn how to view the status of administrator accounts.

As a super administrator, you can view the status of administrator accounts by clicking the Settings. The Manage Admins sub lists all administrator and super administrator accounts, with their statuses, password expiry dates, the targets and target groups they have access to, etc.

Changing User Account Types for Audit Vault Server

You can change Audit Vault Server administrative account type from administrator to super administrator, or vice versa.

You can change an administrative account type from administrator to super administrator, or vice versa.

Note: If you change a user’s account type from administrator to super administrator, then the user will have access to all targets and target groups.

1. Log in to the Audit Vault Server as a super administrator.

2. Select Settings.

   The Manage Admins section appears by default. It displays existing users and the targets or groups to which they have access.

3. Select name of the user account that you want to change.

4. In the Modify Admin dialog, select edit icon against the Type field.

5. You can change the type from Admin to Super Admin. If you want to change the type from Super Admin to Admin.

6. Follow these steps to grant or revoke access to any targets or groups as necessary for this user:

   1. Select the targets or groups to which you want to grant or revoke access. You can also search for the targets or groups in the field under Targets & Target Groups.

   2. Choose the access rights in the Available column and move them to the Selected column, to grant access. Choose the access rights in the Selected column and move them to the Available column, to revoke access.

7. Select Save.

Unlocking User Accounts

This procedure explains how to unlock user accounts.

An Oracle Database Security Central administrator account is locked after at least 3 failed login attempts. A super administrator must unlock user accounts.

1. Log in to the Oracle Database Security Central console as a super administrator.

2. Select Settings.

   The Manage Admin sub is selected by default. It displays a list of existing users.

3. Select name of the user account you want to unlock.

4. In the dialog, select Unlock.

   See Also: ALTER USER

Unlocking Super Administrator or Super Auditor Users

The below process should be used to unlock the last super administrator or last super auditor users. It can also be used as an alternative to unlocking other users through the console.

1. Log in to the Audit Vault Server through SSH and switch to the root user.

   See Logging In to Oracle DBSecCentral Appliances Through SSH.

2. Switch to the dvaccountmgr user.

   su - dvaccountmgr

3. Start SQL*Plus without the user name and password.

   sqlplus /

4. If the account is locked, run the following command to unlock the account:

   alter user <user name> account unlock;

Deleting Oracle Audit Vault Server Administrator Accounts

You may need to delete Oracle Audit Vault Server Administrator accounts with this procedure.

1. Log in to the Audit Vault Server as a super administrator.

2. Select Settings.

   The Manage Admin page appears by default, and displays existing users and the targets or groups to which they have access.

3. Select the users you want to delete, and then select Delete.