Required Permissions for Oracle DB Assessments

Problem

Which user rights & permissions are required for an Oracle Database Benchmark assessment using CIS-CAT Pro Assessor v4? Do I have to use the SYS account or grant DBA privileges to a user?

Solution

The PDF version of each CIS Oracle DB Benchmark includes an Appendix in Section 7 (“Establishing an Audit/Scan User”) & 8 (“Establishing a Unified Audit Policy“) that list the required prerequisites.

These two sections outline the process of creating a CISSCAN user and associated Roles, permissions, custom Views & Audit Policies for an assessment, as well as details for Multi-Tenant and Non-Multi-Tenant deployments.

An example for the Oracle Database 19c Benchmark v1.1.0:

Open

Open

Keywords; Oracle Database Assessor

Content by Label