{"id":11404,"date":"2018-07-10T16:03:15","date_gmt":"2018-07-10T14:03:15","guid":{"rendered":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/"},"modified":"2023-06-09T17:00:14","modified_gmt":"2023-06-09T15:00:14","slug":"oracle-database-vault-realm-in-a-pluggable-database","status":"publish","type":"post","link":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/","title":{"rendered":"Oracle Database Vault: Realm in a Pluggable Database"},"content":{"rendered":"

By Mouhamadou Diaw<\/strong><\/p>\n

Database Vault can also be used in a multitenant environment. In a multitenant environment we must register Oracle Database Vault in the root first, then after in the PDBs.
\nIn this blog we will see how we can use realms to protect data in a pluggable database 12.1.<\/p>\n

In CDB$ROOT we have to create common accounts that will be used for the Database Vault Owner (DV_OWNER role) and Database Vault Account Manager (DV_ACCTMGR role) accounts. It is also recommended to create a backup for each user.<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n
13<\/div>\n
14<\/div>\n
15<\/div>\n
16<\/div>\n
17<\/div>\n
18<\/div>\n
19<\/div>\n
20<\/div>\n
21<\/div>\n
22<\/div>\n
23<\/div>\n<\/td>\n
\n
\n
SQL> conn sys <\/code>as<\/code> sysdba<\/code><\/div>\n
Enter <\/code>password<\/code>:<\/code><\/div>\n
Connected.<\/code><\/div>\n
SQL> show con_name<\/code><\/div>\n
<\/div>\n
CON_NAME<\/code><\/div>\n
------------------------------<\/code><\/div>\n
CDB$ROOT<\/code><\/div>\n
SQL><\/code><\/div>\n
<\/div>\n
SQL> <\/code>GRANT<\/code> CREATE<\/code> SESSION, <\/code>SET<\/code> CONTAINER <\/code>TO<\/code> c##dbv_owner_root IDENTIFIED <\/code>BY<\/code> root CONTAINER = <\/code>ALL<\/code>;<\/code><\/div>\n
<\/div>\n
SQL> <\/code>GRANT<\/code> CREATE<\/code> SESSION, <\/code>SET<\/code> CONTAINER <\/code>TO<\/code> c##dbv_acctmgr_root IDENTIFIED <\/code>BY<\/code> root CONTAINER = <\/code>ALL<\/code>;<\/code><\/div>\n
<\/div>\n
SQL> <\/code>grant<\/code> select<\/code> any<\/code> dictionary <\/code>to<\/code> C##DBV_OWNER_ROOT;<\/code><\/div>\n
<\/div>\n
Grant<\/code> succeeded.<\/code><\/div>\n
<\/div>\n
SQL> <\/code>grant<\/code> select<\/code> any<\/code> dictionary <\/code>to<\/code> C##DBV_ACCTMGR_ROOT;<\/code><\/div>\n
<\/div>\n
Grant<\/code> succeeded.<\/code><\/div>\n
<\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

The next step is configure Database Vault user account on CDB$ROOT<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n<\/td>\n
\n
\n
BEGIN<\/code><\/div>\n
\u00a0<\/code>DVSYS.CONFIGURE_DV (<\/code><\/div>\n
\u00a0\u00a0\u00a0<\/code>dvowner_uname\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 => <\/code>'c##dbv_owner_root'<\/code>,<\/code><\/div>\n
\u00a0\u00a0\u00a0<\/code>dvacctmgr_uname\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 => <\/code>'c##dbv_acctmgr_root'<\/code>);<\/code><\/div>\n
\u00a0<\/code>END<\/code>;<\/code><\/div>\n
\u00a0\u00a0<\/code>6\u00a0 \/<\/code><\/div>\n
<\/div>\n
PL\/SQL <\/code>procedure<\/code> successfully completed.<\/code><\/div>\n
<\/div>\n
SQL> @?\/rdbms\/admin\/utlrp.sql<\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

We can after enable Oracle Database Vault with user c##dbv_owner_root in CDB$ROOT<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n
13<\/div>\n
14<\/div>\n
15<\/div>\n
16<\/div>\n<\/td>\n
\n
\n
SQL> conn c##dbv_owner_root\/root<\/code><\/div>\n
Connected.<\/code><\/div>\n
SQL> show <\/code>user<\/code><\/div>\n
USER<\/code> is<\/code> \"C##DBV_OWNER_ROOT\"<\/code><\/div>\n
SQL> show con_name<\/code><\/div>\n
<\/div>\n
CON_NAME<\/code><\/div>\n
------------------------------<\/code><\/div>\n
CDB$ROOT<\/code><\/div>\n
SQL><\/code><\/div>\n
<\/div>\n
SQL> <\/code>EXEC<\/code> DBMS_MACADM.ENABLE_DV;<\/code><\/div>\n
<\/div>\n
PL\/SQL <\/code>procedure<\/code> successfully completed.<\/code><\/div>\n
<\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

After restart o CDB$ROOT , we can verify the status. These queries should return TRUE.<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n
13<\/div>\n
14<\/div>\n
15<\/div>\n
16<\/div>\n
17<\/div>\n
18<\/div>\n
19<\/div>\n
20<\/div>\n<\/td>\n
\n
\n
SQL> <\/code>SELECT<\/code> VALUE <\/code>FROM<\/code> V$<\/code>OPTION<\/code> WHERE<\/code> PARAMETER = <\/code>'Oracle Database Vault'<\/code>;<\/code><\/div>\n
<\/div>\n
VALUE<\/code><\/div>\n
----------------------------------------------------------------<\/code><\/div>\n
TRUE<\/code><\/div>\n
<\/div>\n
SQL> <\/code>SELECT<\/code> VALUE <\/code>FROM<\/code> V$<\/code>OPTION<\/code> WHERE<\/code> PARAMETER = <\/code>'Oracle Label Security'<\/code>;<\/code><\/div>\n
<\/div>\n
VALUE<\/code><\/div>\n
----------------------------------------------------------------<\/code><\/div>\n
TRUE<\/code><\/div>\n
<\/div>\n
SQL>\u00a0 <\/code>SELECT<\/code> * <\/code>FROM<\/code> DVSYS.DBA_DV_STATUS;<\/code><\/div>\n
<\/div>\n
NAME<\/code>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 STATUS<\/code><\/div>\n
------------------- ----------------------------------------------------------------<\/code><\/div>\n
DV_CONFIGURE_STATUS <\/code>TRUE<\/code><\/div>\n
DV_ENABLE_STATUS\u00a0\u00a0\u00a0 <\/code>TRUE<\/code><\/div>\n
<\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

At PDB level, we must register common users we created earlier. In this example I am using a pluggable database named PDB1.<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n
13<\/div>\n
14<\/div>\n
15<\/div>\n
16<\/div>\n
17<\/div>\n
18<\/div>\n
19<\/div>\n
20<\/div>\n
21<\/div>\n
22<\/div>\n
23<\/div>\n
24<\/div>\n
25<\/div>\n
26<\/div>\n
27<\/div>\n<\/td>\n
\n
\n
SQL> show <\/code>user<\/code><\/div>\n
USER<\/code> is<\/code> \"SYS\"<\/code><\/div>\n
SQL> show con_name<\/code><\/div>\n
<\/div>\n
CON_NAME<\/code><\/div>\n
------------------------------<\/code><\/div>\n
PDB1<\/code><\/div>\n
<\/div>\n
SQL> <\/code>GRANT<\/code> CREATE<\/code> SESSION, <\/code>SET<\/code> CONTAINER <\/code>TO<\/code> c##dbv_owner_root CONTAINER = <\/code>CURRENT<\/code>;<\/code><\/div>\n
<\/div>\n
Grant<\/code> succeeded.<\/code><\/div>\n
<\/div>\n
SQL> <\/code>GRANT<\/code> CREATE<\/code> SESSION, <\/code>SET<\/code> CONTAINER <\/code>TO<\/code> c##dbv_acctmgr_root CONTAINER = <\/code>CURRENT<\/code>;<\/code><\/div>\n
<\/div>\n
Grant<\/code> succeeded.<\/code><\/div>\n
<\/div>\n
SQL><\/code><\/div>\n
<\/div>\n
SQL> <\/code>grant<\/code> select<\/code> any<\/code> dictionary <\/code>to<\/code> C##DBV_OWNER_ROOT;<\/code><\/div>\n
<\/div>\n
Grant<\/code> succeeded.<\/code><\/div>\n
<\/div>\n
SQL> <\/code>grant<\/code> select<\/code> any<\/code> dictionary <\/code>to<\/code> C##DBV_ACCTMGR_ROOT;<\/code><\/div>\n
<\/div>\n
Grant<\/code> succeeded.<\/code><\/div>\n
<\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

Like in CDB$ROOT we also have to configure the Database Vault Users in PDB1<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n
13<\/div>\n
14<\/div>\n
15<\/div>\n
16<\/div>\n
17<\/div>\n
18<\/div>\n
19<\/div>\n
20<\/div>\n
21<\/div>\n<\/td>\n
\n
\n
SQL> show <\/code>user<\/code><\/div>\n
USER<\/code> is<\/code> \"SYS\"<\/code><\/div>\n
SQL> show con_name<\/code><\/div>\n
<\/div>\n
CON_NAME<\/code><\/div>\n
------------------------------<\/code><\/div>\n
PDB1<\/code><\/div>\n
<\/div>\n
<\/div>\n
SQL> <\/code>BEGIN<\/code><\/div>\n
\u00a0<\/code>DVSYS.CONFIGURE_DV (<\/code><\/div>\n
\u00a0\u00a0\u00a0<\/code>dvowner_uname\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 => <\/code>'c##dbv_owner_root'<\/code>,<\/code><\/div>\n
\u00a0\u00a0\u00a0<\/code>dvacctmgr_uname\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 => <\/code>'c##dbv_acctmgr_root'<\/code>);<\/code><\/div>\n
\u00a0<\/code>END<\/code>;<\/code><\/div>\n
\u00a0\u00a0<\/code>6\u00a0 \/<\/code><\/div>\n
<\/div>\n
PL\/SQL <\/code>procedure<\/code> successfully completed.<\/code><\/div>\n
<\/div>\n
SQL><\/code><\/div>\n
<\/div>\n
SQL> @?\/rdbms\/admin\/utlrp.sql<\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

And now let\u2019s enable Oracle Database Vault on PDB1<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n<\/td>\n
\n
\n
SQL> show <\/code>user<\/code><\/div>\n
USER<\/code> is<\/code> \"C##DBV_OWNER_ROOT\"<\/code><\/div>\n
SQL> show con_name<\/code><\/div>\n
<\/div>\n
CON_NAME<\/code><\/div>\n
------------------------------<\/code><\/div>\n
PDB1<\/code><\/div>\n
SQL> <\/code>EXEC<\/code> DBMS_MACADM.ENABLE_DV;<\/code><\/div>\n
<\/div>\n
PL\/SQL <\/code>procedure<\/code> successfully completed.<\/code><\/div>\n
<\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

With SYS let\u2019s restart PDB1<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n
13<\/div>\n
14<\/div>\n<\/td>\n
\n
\n
SQL> show <\/code>user<\/code><\/div>\n
USER<\/code> is<\/code> \"SYS\"<\/code><\/div>\n
SQL> show con_name<\/code><\/div>\n
<\/div>\n
CON_NAME<\/code><\/div>\n
------------------------------<\/code><\/div>\n
PDB1<\/code><\/div>\n
SQL> <\/code>alter<\/code> pluggable <\/code>database<\/code> pdb1 <\/code>close<\/code> immediate;<\/code><\/div>\n
<\/div>\n
Pluggable <\/code>database<\/code> altered.<\/code><\/div>\n
<\/div>\n
SQL> <\/code>alter<\/code> pluggable <\/code>database<\/code> pdb1 <\/code>open<\/code>;<\/code><\/div>\n
<\/div>\n
Pluggable <\/code>database<\/code> altered.<\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

As in CDB$ROOT we can verify<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n
13<\/div>\n
14<\/div>\n
15<\/div>\n
16<\/div>\n
17<\/div>\n
18<\/div>\n
19<\/div>\n
20<\/div>\n
21<\/div>\n
22<\/div>\n
23<\/div>\n
24<\/div>\n
25<\/div>\n<\/td>\n
\n
\n
SQL> show con_name<\/code><\/div>\n
<\/div>\n
CON_NAME<\/code><\/div>\n
------------------------------<\/code><\/div>\n
PDB1<\/code><\/div>\n
SQL> <\/code>SELECT<\/code> VALUE <\/code>FROM<\/code> V$<\/code>OPTION<\/code> WHERE<\/code> PARAMETER = <\/code>'Oracle Database Vault'<\/code>;<\/code><\/div>\n
<\/div>\n
VALUE<\/code><\/div>\n
----------------------------------------------------------------<\/code><\/div>\n
TRUE<\/code><\/div>\n
<\/div>\n
SQL> <\/code>SELECT<\/code> VALUE <\/code>FROM<\/code> V$<\/code>OPTION<\/code> WHERE<\/code> PARAMETER = <\/code>'Oracle Label Security'<\/code>;<\/code><\/div>\n
<\/div>\n
VALUE<\/code><\/div>\n
----------------------------------------------------------------<\/code><\/div>\n
TRUE<\/code><\/div>\n
<\/div>\n
SQL> <\/code>SELECT<\/code> * <\/code>FROM<\/code> DVSYS.DBA_DV_STATUS;<\/code><\/div>\n
<\/div>\n
NAME<\/code>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 STATUS<\/code><\/div>\n
------------------- ----------------------------------------------------------------<\/code><\/div>\n
DV_CONFIGURE_STATUS <\/code>TRUE<\/code><\/div>\n
DV_ENABLE_STATUS\u00a0\u00a0\u00a0 <\/code>TRUE<\/code><\/div>\n
<\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

Now that the Database vault is configured, we can create A REALM to protect our DATA. In this example we are protecting data of the SCOTT table EMP. We are using EM 12c to create the REAM.
\nFrom Database Home select Security and then Database Vault
\n\"dbvault1\"<\/a>
\nIn the Database vault page log with any user having appropriate privileges: DV_OWNER or DV_ADMIN role, SELECT ANY DICTIONARY
\n\"dbvault2\"<\/a>
\nBefore creating the REALM we can verify that user SYSTEM access to table SCOTT.EMP<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n
13<\/div>\n
14<\/div>\n
15<\/div>\n
16<\/div>\n
17<\/div>\n
18<\/div>\n
19<\/div>\n
20<\/div>\n
21<\/div>\n
22<\/div>\n
23<\/div>\n
24<\/div>\n
25<\/div>\n
26<\/div>\n
27<\/div>\n
28<\/div>\n
29<\/div>\n
30<\/div>\n
31<\/div>\n
32<\/div>\n<\/td>\n
\n
\n
SQL> show <\/code>user<\/code><\/div>\n
USER<\/code> is<\/code> \"SYSTEM\"<\/code><\/div>\n
SQL> show con_name<\/code><\/div>\n
<\/div>\n
CON_NAME<\/code><\/div>\n
------------------------------<\/code><\/div>\n
PDB1<\/code><\/div>\n
SQL> <\/code>select<\/code> * <\/code>from<\/code> scott.emp;<\/code><\/div>\n
<\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>EMPNO ENAME\u00a0\u00a0\u00a0\u00a0\u00a0 JOB\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 MGR HIREDATE\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SAL\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 COMM\u00a0\u00a0\u00a0\u00a0 DEPTNO<\/code><\/div>\n
---------- ---------- --------- ---------- --------- ---------- ---------- ----------<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7369 SMITH\u00a0\u00a0\u00a0\u00a0\u00a0 CLERK\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7902 17-<\/code>DEC<\/code>-80\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 800\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 20<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7499 ALLEN\u00a0\u00a0\u00a0\u00a0\u00a0 SALESMAN\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7698 20-FEB-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1600\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 300\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 30<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7521 WARD\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SALESMAN\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7698 22-FEB-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1250\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 500\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 30<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7566 JONES\u00a0\u00a0\u00a0\u00a0\u00a0 MANAGER\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7839 02-APR-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2975\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 20<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7654 MARTIN\u00a0\u00a0\u00a0\u00a0 SALESMAN\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7698 28-SEP-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1250\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1400\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 30<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7698 BLAKE\u00a0\u00a0\u00a0\u00a0\u00a0 MANAGER\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7839 01-MAY-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2850\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 30<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7782 CLARK\u00a0\u00a0\u00a0\u00a0\u00a0 MANAGER\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7839 09-JUN-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2450\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7788 SCOTT\u00a0\u00a0\u00a0\u00a0\u00a0 ANALYST\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7566 19-APR-87\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 3000\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 20<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7839 KING\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 PRESIDENT\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 17-NOV-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 5000\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7844 TURNER\u00a0\u00a0\u00a0\u00a0 SALESMAN\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7698 08-SEP-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1500\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 30<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7876 ADAMS\u00a0\u00a0\u00a0\u00a0\u00a0 CLERK\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7788 23-MAY-87\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1100\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 20<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7900 JAMES\u00a0\u00a0\u00a0\u00a0\u00a0 CLERK\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7698 03-<\/code>DEC<\/code>-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 950\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 30<\/code><\/div>\n
<\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>EMPNO ENAME\u00a0\u00a0\u00a0\u00a0\u00a0 JOB\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 MGR HIREDATE\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SAL\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 COMM\u00a0\u00a0\u00a0\u00a0 DEPTNO<\/code><\/div>\n
---------- ---------- --------- ---------- --------- ---------- ---------- ----------<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7902 FORD\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ANALYST\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7566 03-<\/code>DEC<\/code>-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 3000\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 20<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7934 MILLER\u00a0\u00a0\u00a0\u00a0 CLERK\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7782 23-JAN-82\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1300\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10<\/code><\/div>\n
<\/div>\n
14 <\/code>rows<\/code> selected.<\/code><\/div>\n
<\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

Under Administration Tab, Select Reams
\n\"dbvault3\"<\/a>
\nAnd Click on Create
\nGive a name and a description for the realm
\n\"dbvault4\"<\/a>
\nClick on Next
\nOn the Realm Secured Objects click on Add
\n\"dbvault5\"<\/a>
\nClick on OK
\n\"dbvault6\"<\/a>
\nClick on Next
\nOn Real Authorization page select ADD
\n\"dbvault7\"<\/a>
\nClick on OK
\n\"dbvault8\"<\/a>
\nClick Next
\nOn the Review page Click Finish
\n\"dbvault9\"<\/a>
\nAnd the end we should have
\n\"dbvault10\"<\/a>
\nAnd that\u2019s all. We can verify now that SYSTEM is no longer allowed to query SCOTT.EMP<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n
13<\/div>\n
14<\/div>\n
15<\/div>\n<\/td>\n
\n
\n
SQL> conn system\/root@pdb1<\/code><\/div>\n
Connected.<\/code><\/div>\n
SQL> show <\/code>user<\/code><\/div>\n
USER<\/code> is<\/code> \"SYSTEM\"<\/code><\/div>\n
SQL> show con_name<\/code><\/div>\n
<\/div>\n
CON_NAME<\/code><\/div>\n
------------------------------<\/code><\/div>\n
PDB1<\/code><\/div>\n
SQL> <\/code>select<\/code> * <\/code>from<\/code> scott.emp;<\/code><\/div>\n
select<\/code> * <\/code>from<\/code> scott.emp<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>*<\/code><\/div>\n
ERROR <\/code>at<\/code> line 1:<\/code><\/div>\n
ORA-01031: insufficient <\/code>privileges<\/code><\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

And that user EDGE is allowed to query SCOTT.EMP<\/p>\n

\n
\n\n\n\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n
13<\/div>\n
14<\/div>\n
15<\/div>\n
16<\/div>\n
17<\/div>\n
18<\/div>\n
19<\/div>\n
20<\/div>\n
21<\/div>\n
22<\/div>\n
23<\/div>\n
24<\/div>\n
25<\/div>\n
26<\/div>\n
27<\/div>\n
28<\/div>\n
29<\/div>\n
30<\/div>\n
31<\/div>\n
32<\/div>\n<\/td>\n
\n
\n
SQL> show <\/code>user<\/code><\/div>\n
USER<\/code> is<\/code> \"EDGE\"<\/code><\/div>\n
SQL> show con_name<\/code><\/div>\n
<\/div>\n
CON_NAME<\/code><\/div>\n
------------------------------<\/code><\/div>\n
PDB1<\/code><\/div>\n
SQL> <\/code>select<\/code> * <\/code>from<\/code> scott.emp;<\/code><\/div>\n
<\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>EMPNO ENAME\u00a0\u00a0\u00a0\u00a0\u00a0 JOB\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 MGR HIREDATE\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SAL\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 COMM\u00a0\u00a0\u00a0\u00a0 DEPTNO<\/code><\/div>\n
---------- ---------- --------- ---------- --------- ---------- ---------- ----------<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7369 SMITH\u00a0\u00a0\u00a0\u00a0\u00a0 CLERK\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7902 17-<\/code>DEC<\/code>-80\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 800\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 20<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7499 ALLEN\u00a0\u00a0\u00a0\u00a0\u00a0 SALESMAN\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7698 20-FEB-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1600\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 300\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 30<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7521 WARD\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SALESMAN\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7698 22-FEB-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1250\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 500\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 30<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7566 JONES\u00a0\u00a0\u00a0\u00a0\u00a0 MANAGER\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7839 02-APR-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2975\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 20<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7654 MARTIN\u00a0\u00a0\u00a0\u00a0 SALESMAN\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7698 28-SEP-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1250\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1400\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 30<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7698 BLAKE\u00a0\u00a0\u00a0\u00a0\u00a0 MANAGER\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7839 01-MAY-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2850\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 30<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7782 CLARK\u00a0\u00a0\u00a0\u00a0\u00a0 MANAGER\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7839 09-JUN-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 2450\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7788 SCOTT\u00a0\u00a0\u00a0\u00a0\u00a0 ANALYST\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7566 19-APR-87\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 3000\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 20<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7839 KING\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 PRESIDENT\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 17-NOV-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 5000\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7844 TURNER\u00a0\u00a0\u00a0\u00a0 SALESMAN\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7698 08-SEP-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1500\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 30<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7876 ADAMS\u00a0\u00a0\u00a0\u00a0\u00a0 CLERK\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7788 23-MAY-87\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1100\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 20<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7900 JAMES\u00a0\u00a0\u00a0\u00a0\u00a0 CLERK\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7698 03-<\/code>DEC<\/code>-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 950\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 30<\/code><\/div>\n
<\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>EMPNO ENAME\u00a0\u00a0\u00a0\u00a0\u00a0 JOB\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 MGR HIREDATE\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 SAL\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 COMM\u00a0\u00a0\u00a0\u00a0 DEPTNO<\/code><\/div>\n
---------- ---------- --------- ---------- --------- ---------- ---------- ----------<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7902 FORD\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ANALYST\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7566 03-<\/code>DEC<\/code>-81\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 3000\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 20<\/code><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/code>7934 MILLER\u00a0\u00a0\u00a0\u00a0 CLERK\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 7782 23-JAN-82\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 1300\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 10<\/code><\/div>\n
<\/div>\n
14 <\/code>rows<\/code> selected.<\/code><\/div>\n
<\/div>\n
SQL><\/code><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

By Mouhamadou Diaw Database Vault can also be used in a multitenant environment. In a multitenant environment we must register Oracle Database Vault in the root first, then after in the PDBs. In this blog we will see how we can use realms to protect data in a pluggable database 12.1. In CDB$ROOT we have […]<\/p>\n","protected":false},"author":27,"featured_media":11405,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[229,59],"tags":[1379,1398,1384],"type_dbi":[],"class_list":["post-11404","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-database-administration-monitoring","category-oracle","tag-oracle-12-1","tag-oracle-database-vault","tag-oracle-security"],"acf":[],"yoast_head":"\nOracle Database Vault: Realm in a Pluggable Database - dbi Blog<\/title>\n<meta name=\"description\" content=\"Oracle Database Vault, Oracle Security, Oracle 12.1\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Oracle Database Vault: Realm in a Pluggable Database\" \/>\n<meta property=\"og:description\" content=\"Oracle Database Vault, Oracle Security, Oracle 12.1\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/\" \/>\n<meta property=\"og:site_name\" content=\"dbi Blog\" \/>\n<meta property=\"article:published_time\" content=\"2018-07-10T14:03:15+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-09T15:00:14+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/dbvault1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1030\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Oracle Team\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Oracle Team\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/\"},\"author\":{\"name\":\"Oracle Team\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\"},\"headline\":\"Oracle Database Vault: Realm in a Pluggable Database\",\"datePublished\":\"2018-07-10T14:03:15+00:00\",\"dateModified\":\"2023-06-09T15:00:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/\"},\"wordCount\":370,\"commentCount\":0,\"image\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/dbvault1.png\",\"keywords\":[\"oracle 12.1\",\"Oracle Database Vault\",\"oracle security\"],\"articleSection\":[\"Database Administration & Monitoring\",\"Oracle\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/\",\"name\":\"Oracle Database Vault: Realm in a Pluggable Database - dbi Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/dbvault1.png\",\"datePublished\":\"2018-07-10T14:03:15+00:00\",\"dateModified\":\"2023-06-09T15:00:14+00:00\",\"author\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\"},\"description\":\"Oracle Database Vault, Oracle Security, Oracle 12.1\",\"breadcrumb\":{\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#primaryimage\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/dbvault1.png\",\"contentUrl\":\"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/dbvault1.png\",\"width\":1920,\"height\":1030},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.dbi-services.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Oracle Database Vault: Realm in a Pluggable Database\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#website\",\"url\":\"https:\/\/www.dbi-services.com\/blog\/\",\"name\":\"dbi Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee\",\"name\":\"Oracle Team\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g\",\"caption\":\"Oracle Team\"},\"url\":\"https:\/\/www.dbi-services.com\/blog\/author\/oracle-team\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Oracle Database Vault: Realm in a Pluggable Database - dbi Blog","description":"Oracle Database Vault, Oracle Security, Oracle 12.1","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/","og_locale":"en_US","og_type":"article","og_title":"Oracle Database Vault: Realm in a Pluggable Database","og_description":"Oracle Database Vault, Oracle Security, Oracle 12.1","og_url":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/","og_site_name":"dbi Blog","article_published_time":"2018-07-10T14:03:15+00:00","article_modified_time":"2023-06-09T15:00:14+00:00","og_image":[{"width":1920,"height":1030,"url":"http:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/dbvault1.png","type":"image\/png"}],"author":"Oracle Team","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Oracle Team","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#article","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/"},"author":{"name":"Oracle Team","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee"},"headline":"Oracle Database Vault: Realm in a Pluggable Database","datePublished":"2018-07-10T14:03:15+00:00","dateModified":"2023-06-09T15:00:14+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/"},"wordCount":370,"commentCount":0,"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/dbvault1.png","keywords":["oracle 12.1","Oracle Database Vault","oracle security"],"articleSection":["Database Administration & Monitoring","Oracle"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/","url":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/","name":"Oracle Database Vault: Realm in a Pluggable Database - dbi Blog","isPartOf":{"@id":"https:\/\/www.dbi-services.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#primaryimage"},"image":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#primaryimage"},"thumbnailUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/dbvault1.png","datePublished":"2018-07-10T14:03:15+00:00","dateModified":"2023-06-09T15:00:14+00:00","author":{"@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee"},"description":"Oracle Database Vault, Oracle Security, Oracle 12.1","breadcrumb":{"@id":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#primaryimage","url":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/dbvault1.png","contentUrl":"https:\/\/www.dbi-services.com\/blog\/wp-content\/uploads\/sites\/2\/2022\/04\/dbvault1.png","width":1920,"height":1030},{"@type":"BreadcrumbList","@id":"https:\/\/www.dbi-services.com\/blog\/oracle-database-vault-realm-in-a-pluggable-database\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.dbi-services.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Oracle Database Vault: Realm in a Pluggable Database"}]},{"@type":"WebSite","@id":"https:\/\/www.dbi-services.com\/blog\/#website","url":"https:\/\/www.dbi-services.com\/blog\/","name":"dbi Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dbi-services.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.dbi-services.com\/blog\/#\/schema\/person\/66ab87129f2d357f09971bc7936a77ee","name":"Oracle Team","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f711f7cd2c9b09bf2627133755b569fb5be0694810cfd33033bdd095fedba86d?s=96&d=mm&r=g","caption":"Oracle Team"},"url":"https:\/\/www.dbi-services.com\/blog\/author\/oracle-team\/"}]}},"_links":{"self":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/11404","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/comments?post=11404"}],"version-history":[{"count":2,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/11404\/revisions"}],"predecessor-version":[{"id":25774,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/posts\/11404\/revisions\/25774"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media\/11405"}],"wp:attachment":[{"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/media?parent=11404"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/categories?post=11404"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/tags?post=11404"},{"taxonomy":"type","embeddable":true,"href":"https:\/\/www.dbi-services.com\/blog\/wp-json\/wp\/v2\/type_dbi?post=11404"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}