About Oracle Database Security Central Administrative Accounts

Oracle Database Security Central administrative accounts help you manage user access.

When administrators log in to Oracle Database Security Central, they have access only to administrative functions, whereas auditors have access only to the auditing functions.

Oracle Database Security Central has two types of administrative user accounts:

• Audit Vault Server Super Administrator:

  • Manages system-wide settings

  • Creates user accounts for super administrators and administrators

  • Has access to all targets and target groups

  • Grants access to targets or target groups to administrators

• Audit Vault Server Administrator: Has access to specific targets or target groups granted by a super administrator. Administrators cannot manage system-wide settings.

After installing Oracle Database Security Central, a post-installation configuration page lets you create and specify passwords for one super administrator account and one super auditor account for the Audit Vault Server. This super administrator and super auditor created during post installation are Audit Vault Server database users. There is at least one Audit Vault Server database user as super administrator and one as super auditor.

The Oracle Database Security Central console can be configured to be authenticated using the following methods:

• Local Oracle DBSecCentral: Authentication for local users is through local passwords. See Configuring Administrative Accounts for Oracle Audit Vault Server for more information.

• AD/LDAP: Authentication for AD/LDAP users is through Microsoft Active Directory(AD) or OpenLDAP. See Integrating Oracle Database Security Central with Microsoft Active Directory or OpenLDAP for more information.

• SSO: Single sign-on (SSO) Authentication is through SAML 2.0 integration with Microsoft Active Directory Federation Service, Microsoft Entra ID (MS-EI), or Oracle Access Manager. See Configuring Single Sign-On (SSO) for Oracle Database Security Central Console Users for more information.

Thereafter, the Audit Vault Server super administrator can create other administrative users, and the super auditor can create other auditor users, for the server.

This chapter describes managing user accounts and passwords for the Oracle Database Security Central administrator user interfaces.

See Also:

• Oracle Database Security Central Installation Guide for information on post-installation configuration.

• Oracle Database Security Central Auditor’s Guide for information on managing auditor accounts.