For Trellix DLP Discover to scan Oracle databases, create a user with the required permissions.
Run SQL*Plus.
Logon as a database administrator.
Example: username/password@SID as sysdba
Create a user using the following commands:
CREATE USER "username" PROFILE "DEFAULT" IDENTIFIED BY password DEFAULT TABLESPACE "USERS" TEMPORARY TABLESPACE "TEMP" QUOTA UNLIMITED ON "USERS" ACCOUNT UNLOCK;
Run each of the following commands in SQL*Plus to grant the required permissions:
GRANT CREATE VIEW TO "username";GRANT SELECT ANY TABLE TO "username";GRANT CONNECT TO "username";GRANT SELECT_CATALOG_ROLE TO "username";GRANT READ ON DIRECTORY EXT_TAB_DATA TO "username";(mandatory to work with external tables)GRANT WRITE ON DIRECTORY EXT_TAB_DATA TO "username";(mandatory for logging enabled case on external tables)GRANT EXECUTE ANY TYPE TO "username";(mandatory to cover nested tables case)
Caution
EXT_TAB_DATA is the most commonly used tag for external tables storage, but can depend on the client database structure. Each client DBA must carefully consider granting READ/WRITE permission on DIRECTORY with external tables.
The user created has the required permissions to allow Trellix DLP Discover to scan the Oracle database schemas.