Creating a User in a Database Vault-Protected Oracle PDB
Creating a User in a Database Vault-Protected Oracle PDB Oracle Database Vault (DV) significantly tightens security by restricting privileged users—even DBA roles—from performing certain operations unless explicitly authorized. One such restriction is creating users in a DV-enabled Pluggable Database (PDB) . This article demonstrates how to properly create a new user ( SCOTT ) in such an environment using the DV Account Manager user . Background In a standard Oracle environment, a user with DBA or SYSDBA privileges can easily create users. However, once Database Vault is configured and enabled, these privileges are no longer sufficient unless the user is explicitly granted DV-specific roles , like: DV_OWNER DV_ACCTMGR Let’s walk through a real-world scenario where an attempt to create a user fails due to DV restrictions , and how to fix it using the correct privileged user. Initial Attempt — Access Denied First, we switch to the target PDB ( pdb1 ) and...