Back to Database Security homepage

Restricting DBA and Power User
Access to Application Data


Oracle Database Vault can be used to prevent a DBA from viewing application data using their DBA privileges by simply defining a Realm around sensitive schemas and objects. The business drivers for this security requirement include:

Strong internal control mandates found in regulations such as Sarbanes-Oxley
Insider threat concerns
Protection of personally identifiable information (PII)
IT or DBA outsourcing

Oracle Database Vault provides security to address this common security requirement.

Realms - Prevent usage of powerful DBA privileges such as SELECT ANY TABLE from being used to view application data

Click here to learn how to use a Database Vault Realm to address this security requirement:

Realms in Oracle Database Vault


Oracle Database Vault Customers


Absa Group Ltd.
(Success Story | Press Release)
National Marrow Donor Program (OpenWorld 2011 Daily Newspaper)
ROSS Stores (Listen)

Hands-On


Protect Application Data from DBA and Privileged Users (Viewlet | Oracle by Example)
Restrict DBA commands based on IP address (Viewlet | Oracle by Example)

Security Features


Data Encryption
Virtual Private Database
Database Auditing
Backup Encryption
Export file encryption
Proxy Authentication
Enterprise User Security
Secure Application Roles
Fine Grained Auditing

Related Technologies


Database Firewall
Audit Vault
Data Masking (pdf)
Secure Backup
Oracle Database Lifecycle Management
Identity Management

Technical Information


Datasheet
Overview Whitepaper
Oracle Database Vault Best Practices
DBA Administrative Best Practices with Oracle Database Vault
Database Vault certified with SAP: (Overview Whitepaper | Datasheet)
Database Vault certified with E-Business Suite
Database Vault certified with Peoplesoft (Datasheet | Red Paper | Security policies)
Database Vault certified with Siebel (Security policies)
Database Vault certified with JD Edwards EnterpriseOne (Security policies)
Database Vault certified with Oracle Financial Services (iFlex)
Database Vault certified with Infosys Finacle
Flash Demo
Business Whitepaper
Oracle Database Vault FAQ

Security Options


Oracle Database Vault
Oracle Advanced Security
Oracle Label Security

Discussion Forums


Security
Audit Vault


In-Memory Replay Banner