Step 4: Create a Realm to Protect the OE.CUSTOMERS Table

To restrict the OE.CUSTOMER table from administrative access, you will create a realm around the OE schema.

To create a realm around the OE schema: 

1. Start Oracle Database Vault Administrator.

   In a browser, enter the following URL:

   https://host_name:port/dva

   Replace host_name with the name of the server on which you installed Oracle Database Vault, and port with the Oracle Enterprise Manager Console HTTPS port number. In most cases, the name of the server and port number are the same as those used by Database Control.

   If you cannot start Database Vault Administrator, you may need to manually deploy it. See Oracle Database Vault Administrator's Guide for more information.

2. In the Login to Database page, enter the following information:

   • User Name: Enter the name of the DV_OWNER or DV_ADMIN account (for example, DBVOWNER).

   • Password: Enter the password of the user whose name you entered.

   • Host: Enter the host name or IP address of the computer where you installed Oracle Database Vault, for example, myserver.us.example.com.

   • Port: Enter the port number for the database, for example, 1521.

   • SID/Service: Enter either the SID (for example, orcl) of the database, or the service (for example, myserver.us.example.com).

   The Database Instance Administration page appears.

3. Under Database Vault Feature Administration, select Realms.

   The Realms page appears.

4. Click Create.

   The Create Realm page appears.

5. Enter the following information:

   • Name: OE Protections

   • Description: Realm to protect the OE schema

   • Status: Click Enabled.

   • Audit Options: Select Audit on Failure.

6. Click OK.

   The Realms page appears, with the OE schema listed as a realm. However, it has no protected objects or authorized users yet.

7. Select the OE Protections realm and then click Edit.

   The Edit Realm page appears.

8. Under Realm Secured Objects, click Create.

   The Create Realm Secured Object page appears.

9. From the Object Owner list, select OE.

10. From the Object Type list, select TABLE.

11. In the Object Name field, enter % to specify all tables within the OE schema, and then click OK.

    The Edit Realm page appears.

12. Under Realm Authorizations, click Create.

    The Create Realm Authorization page appears.

13. From the Grantee list, select OE [USER], and then set the Authorization Type to Owner. Then set Authorization Rule Set to <Non Selected>.

    This authorizes the OE user to manage access to the objects within the OE schema. As an Owner, the OE user can grant or revoke realm-secured database roles, and access, manipulate, and create objects protected by the OE Protections realm.

    The Authorization Rule Set list enables to you select a rule that further controls access, such as the time the realm is in effect, and so on.

14. Click OK to return to the Edit Realm page, and then click OK again to return to the Realms page.

15. Do not exit Oracle Database Vault Administrator.