RE: maintenance / review of Oracle database accounts

  • From: "Herring, David" <HerringD@xxxxxxx>
  • To: "JBECKSTROM@xxxxxxxxx" <JBECKSTROM@xxxxxxxxx>, oracle-l-freelists <oracle-l@xxxxxxxxxxxxx>, oracle-db-l <oracle-db-l@xxxxxxxxxxxxxxxxxxxx>
  • Date: Wed, 9 Apr 2014 12:26:45 -0500

We use a ticketing system and all account requests need to be approved by the 
requestor's manager and the DBA manager.

The auditing piece is a problem for us as we don't get notified when someone 
leaves, so we rarely know if a given account is still needed.  I would prefer 
some sort of notification to be sent out when a person's LAN account is being 
removed.

Dave Herring

From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On 
Behalf Of Jeffrey Beckstrom
Sent: Wednesday, April 09, 2014 7:00 AM
To: oracle-l-freelists; oracle-db-l
Subject: maintenance / review of Oracle database accounts

Just wondering what members of the community do to keep track of end user 
access requests for access to the database.  Do you really on paper forms for 
requesting access or what?  Do you audit the requests to determine if the 
individual is still employed and / or  access is still required and on what 
frequency is the review done?  Who has to approve the access requests?
 
Please respond offline.
 
 
Jeffrey Beckstrom
Database Administrator
Information Systems
Greater Cleveland Regional Transit Authority
1240 W. 6th Street
Cleveland, Ohio 44113


.
--
//www.freelists.org/webpage/oracle-l


Other related posts: