Trivadis Germany GmbH
As a DBA you probably know the situation: one of the first SQL commands when installing third-party software is "GRANT DBA TO ..". Or: the developers in your own development department don't know which privileges they need in the database – and first demand DBA rights in the development environment. And then the security officer appears on stage and says "everyone may only get the rights he really needs" – the well-known least privilege principle is required. But how can this be found out? Since database version 12c Oracle offers the feature "Privilege Analysis" for this purpose. Unfortunately, the use of this feature was originally linked to the Database-Vault-License – and therefore not (legally) applicable for most DBAs. This restriction was lifted in November 2018: all customers with Enterprise Edition are allowed to use the feature. Reason enough to take a closer look at this functionality in the presentation: how can the DBA determine which rights the applications and users really need and set up a suitable rights concept for them?
Managing a large multitenant database with many pluggable database can be a difficult task. Many PDBs fight for the server resources like I/O, CPU and memory. It can be difficult to keep the SLAs agreed with your customers. Oracle Database 12c Release 2 offers improvments in resource management for PDBs and a new feature called „Lockdown Profiles“ which helps you to limit the available features on PDB level. The talk shows the various areas of these two features in a CDB environment and shows how they will help you managing a multitenant environment. And both features can help even with a single-tenant database. Additionally, the presentation covers the new 21c feature "DBNest".
Version 21c of the Oracle database is the version by which Oracle cuts off old heads and says goodbye to the classic architecture, also known as the non-CDB architecture. Now there are only container databases, and 21c brings with it some new features. New features include better integration into Oracle Cluster, improved isolation of Pluggable databases, extended flashback and recovery opportunities. The presentation provides an overview of the new features and shows the current migration methods you can use to migrate to the container database architecture.