RMAN Enhancements

New Privilege

• A new SYSBACKUP privilege is created in Oracle 12c,  it allows the grantee to perform BACKUP and RECOVERY operations with RMAN

SQL in RMAN

• You can now use SQL Statements in RMAN like you would do in SQL*PLUS :
  • BEFORE : RMAN> SQL “alter system switch logfile”;
  • NOW : RMAN> alter system switch logfile;

Continue reading OCP 12C – RMAN and Flashback Data Archive →

User Task-Specific Administrative Privileges

• To continue with the objective of separating duties and the least privileges, Oracle 12c introduce new administratives privileges all destinated to accomplish specific duties:
  • SYSBACKUP : Used for RMAN operations like BACKUP, RESTORE, RECOVER
  • SYSDG : Used to administer DATAGUARD, In 12c when you use DGMGRL commandline interface your are automatically loggued on with the SYSDG privilege.
  • SYSKM : This privilege is meant for TDE operations like OPEN/CLOSE key stores, change master key or manage column encryption keys and tablespace encryption.

Continue reading OCP 12C – Privileges →

Unified Audit Data Trail

• Unifed Auditing offers a consolidated approach, all the audit data is consolidated in a single place.
• Unified Auditing consolidate audit records for the following sources :
  • Standard Auditing
  • Fine-grained auditing (DBMS_FGA)
  • RAC security auditing
  • RMAN auditing
  • Database Vault auditing
  • Oracle Label Security auditing
  • Oracle Data Mining
  • Oracle Data Pump
  • Oracle SQL*Loader
• In addition to the consolidation, the unified auditing adds security, all audit data consolidated is read-only.
• Unified auditing stores the consolidated data into the SYS.AUDSYS table.
• The unified auditing is activated by default in Oracle 12c but the Old auditing system is still functionning too, you are in mixed-mode. You have to set up explicitly the Unified Auditing to disable the old auditing system.
• You can query audit data by using the view : SYS.UNIFIED_AUDIT_TRAIL

Continue reading OCP 12C – Auditing →