Object Protection Policies
Object protection policies are known as realms in Database Vault.
Learn about Realms in the Oracle AI Database Database Vault Administrator’s Guide.
Create Object Protection Policies
Object protection policies can be created directly in Oracle DBSecCentral once credentials for Database Vault policy management are provided.
-
Log in to Oracle Database Security Central Console as an
auditor. -
Select Policies.
-
Select Database Vault Policies from the left navigation menu.
-
Select the name of the target database you want Oracle DBSecCentral to manage Database Vault policies for.
-
Provide user credentials following the steps in Set or Update the Credentials Needed for Database Vault Policy Management.
-
Expand the Object protection section.
-
Select Create.
-
Provide the details for the object protection policy, the schemas to protect, the users that can access the selected schema, and the audit policy details.
-
Select Create.
Modify Object Protection Policies
You can create object protection policies directly in Oracle DBSecCentral once you provide credentials for Database Vault policy management.
-
Log in to Oracle Database Security Central Console as an
auditor. -
Select Policies.
-
Select Database Vault Policies from the left navigation menu.
-
Select the target database for Oracle DBSecCentral to manage Database Vault policies.
-
Provide user credentials following the steps in Set or Update the Credentials Needed for Database Vault Policy Management.
-
Expand the Object protection section.
-
Select the object protection policy you want to edit.
-
Provide the details for the object protection policy, the schemas to protect, the users that can access the selected schema, and the audit policy details.
-
Select Save.
Enable, Enable in Simulation Mode, Disable, or Delete Object Protection Policies
Enabling, enabling in simulation mode, disabling, or deleting object protection policies, Database Vault realms, in Oracle DBSecCentral follow a similar workflow.
Note:
- You can only delete the object protection policies that are in a disabled state.
- Oracle-defined object protection policies cannot be deleted from Oracle DBSecCentral.
-
Log in to Oracle Database Security Central Console as an
auditor. -
Select Policies.
-
Select Database Vault Policies from the left navigation menu.
-
Select the target database you want Oracle DBSecCentral to manage Database Vault policies for.
-
Provide user credentials following the steps in Set or Update the Credentials Needed for Database Vault Policy Management.
-
Expand the Object protection section.
-
Select the object protection policies you want to manage.
-
Select the action you want to perform.
Related Topics