DBMS_CLOUD_MACADM Package

This section covers the DBMS_CLOUD_MACADM subprograms provided with Autonomous Database.

CONFIGURE_DATABASE_VAULT Procedure

This procedure configures the initial two Oracle Database user accounts, which are granted the DV_OWNER and DV_ACCTMGR roles, respectively for Autonomous Database.

Syntax

DBMS_CLOUD_MACADM.CONFIGURE_DATABASE_VAULT(
       dvowner_uname    IN VARCHAR2,
       dvacctmgr_uname  IN VARCHAR2);

Parameters

Parameter Description

dvowner_uname

Name of the user who will be the Database Vault Owner. This user will be granted the DV_OWNER role.

dvacctmgr_uname

Name of the user who will be the Database Vault Account Manager. This user will be granted the DV_ACCTMGR role. If you omit this setting, the user specified by the dvowner_uname parameter is made the Database Vault Account Manager and granted the DV_ACCTMGR role.

Usage Notes

  • Only the ADMIN user can run the DBMS_CLOUD_MACADM.CONFIGURE_DATABASE_VAULT procedure.

  • The DBMS_CLOUD_MACADM.CONFIGURE_DATABASE_VAULT procedure does not allow the ADMIN user to be specified as an input for the dvowner_uname or dvacctmgr_uname arguments.

Example

BEGIN
   DBMS_CLOUD_MACADM.CONFIGURE_DATABASE_VAULT(
       dvowner_uname         => 'adb_dbv_owner',
       dvacctmgr_uname       => 'adb_dbv_acctmgr');
END;
/

DISABLE_DATABASE_VAULT Procedure

This procedure disables Oracle Database Vault on Autonomous Database. To use this procedure you must have the DV_OWNER role.

Syntax

DBMS_CLOUD_MACADM.DISABLE_DATABASE_VAULT;

Usage Notes

After you run DBMS_CLOUD_MACADM.DISABLE_DATABASE_VAULT you must restart the Autonomous Database instance.

To use this procedure you must have the DV_OWNER role.

Example

EXEC DBMS_CLOUD_MACADM.DISABLE_DATABASE_VAULT;

DISABLE_USERMGMT_DATABASE_VAULT Procedure

This procedure disallows user management related operations for specified components on Autonomous Database with Oracle Database Vault enabled.

Syntax

DBMS_CLOUD_MACADM.DISABLE_USERMGMT_DATABASE_VAULT('component_name');

Where: component_name is the component name. Valid value is: APEX.

APEX is the Oracle APEX component.

Usage Notes

If you enable Oracle Database Vault with Autonomous Database and you want to enforce strict separation of duty to disallow user management related operations for the APEX, use the DBMS_CLOUD_MACADM.DISABLE_USERMGMT_DATABASE_VAULT procedure.

To use this procedure you must have the DV_ACCTMGR and DV_ADMIN roles.

Example

The following example disables user management for the APEX component:

EXEC DBMS_CLOUD_MACADM.DISABLE_USERMGMT_DATABASE_VAULT('APEX'); 

ENABLE_DATABASE_VAULT Procedure

This procedure enables Oracle Database Vault on Autonomous Database. To use this procedure you must have the DV_OWNER role.

Syntax

DBMS_CLOUD_MACADM.ENABLE_DATABASE_VAULT;

Usage Notes

After you run DBMS_CLOUD_MACADM.ENABLE_DATABASE_VAULT you must restart the Autonomous Database instance.

To use this procedure you must have the DV_OWNER role.

Example

The following example enables Oracle Database Vault:

BEGIN
   DBMS_CLOUD_MACADM.ENABLE_DATABASE_VAULT;
END;
/

ENABLE_USERMGMT_DATABASE_VAULT Procedure

This procedure allows user management with Oracle Database Vault enabled for specified components on Autonomous Database.

Syntax

DBMS_CLOUD_MACADM.ENABLE_USERMGMT_DATABASE_VAULT('component_name');

Where: component_name is the component name. Valid value is: APEX.

APEX is the Oracle APEX component.

Usage Notes

To use this procedure you must have the DV_ACCTMGR and DV_ADMIN roles.

Example

The following example enables user management for the APEX component:

EXEC DBMS_CLOUD_MACADM.ENABLE_USERMGMT_DATABASE_VAULT('APEX');