Oracle Database Vault - Part 8 ( Assigning the Rule sets) Posted by MOHAMMED ABDUL HAMEED on 2:06 PM

By creating the Rule Set , we can unable the functionality of the SYS User.

Steps : Login to Database Vault Page.

Select Rule Sets

Click on Create

Provide the name as : SYS_ADMIN_USER -> OK

Select from List " SYS_ADMIN_USER" and click on edit

Scroll down to " Rules Associated to the Rule Set" and Click on "Create"

Use the name “SYS_ADMIN_USER”

Enter this in the expression  field – dvf.f$session_user = ‘SYS’

Click on OK to save it, then on OK again.

Go back to the home page, and click on “Command Rules”

Select the “CREATE USER” item and click on “Edit”

Leave the command as “CREATE USER”, and in the “RULE SET” drop-down choose “SYS_ADMIN_USER”

Click on OK

The SYS user can now create users in the database.