Using Database Vault
By default, the database administration account as SQL Data Manipulation Language (DML) access to the application’s schema, as dictated by the default permissions of the Oracle Database. It is possible to restrict the permissions of the DBA to SQL Data Definition Language (DDL) statements only using Database Vault. Refer to the Database Vault Administrators Guide for details of this facility.
The product includes a prebuilt database vault solution, refer to the Database Vault Integration (Doc Id: 1290700.1) available from My Oracle Support.