CHAPTER 5
Database Vault Fundamentals

This chapter presents a collection of examples that demonstrate the fundamentals behind how DBV components are configured using the DBMS_MACADM API. The examples are built around the Sales History (SH) object-owner account included with Oracle Database’s sample schemas. These examples cover the following component configurations and demonstrate how these components’ configurations impact sessions trying to access objects owned by the SH accounts:

Realms Provide boundaries around the use of system ANY privileges that administrators typically have been granted. Realms examples demonstrate how you can meet your organization’s compliance and consolidation requirements.

Command rules Protect the use of more than 100 commands in the “Oracle SQL Reference Guide.” Command rules allow you to implement security policies based on the business rules maintained by your organization.