RE: maintenance / review of Oracle database accounts

From: Herring, David <HerringD_at_DNB.com>
Date: Wed, 9 Apr 2014 12:26:45 -0500
Message-ID: <AD8FE6616C097545A4C9A8B0792909AC2E6DD39FBA_at_DNBEXCH01.dnbint.net>

We use a ticketing system and all account requests need to be approved by the requestor's manager and the DBA manager.

The auditing piece is a problem for us as we don't get notified when someone leaves, so we rarely know if a given account is still needed. I would prefer some sort of notification to be sent out when a person's LAN account is being removed.

Dave Herring

From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Jeffrey Beckstrom Sent: Wednesday, April 09, 2014 7:00 AM
To: oracle-l-freelists; oracle-db-l
Subject: maintenance / review of Oracle database accounts

Just wondering what members of the community do to keep track of end user access requests for access to the database.  Do you really on paper forms for requesting access or what?  Do you audit the requests to determine if the individual is still employed and / or  access is still required and on what frequency is the review done?  Who has to approve the access requests?
 

Please respond offline.
 
 

Jeffrey Beckstrom
Database Administrator
Information Systems
Greater Cleveland Regional Transit Authority 1240 W. 6th Street
Cleveland, Ohio 44113

.

--
http://www.freelists.org/webpage/oracle-l

Received on Wed Apr 09 2014 - 19:26:45 CEST