The only immediate drawback that I can see is that SYSDBA == SYS always.
You'd be better off auditing sysdba actions by osuser (which IIRC 10g does
anyway). Granting dba to individual accounts seems reasonable enough to me.
On 10/23/07, Joe Armstrong-Champ <joseph.armstrong-champ_at_tufts.edu> wrote:
>
> Our auditors are concerned with the fact that we share the sys and
> system accounts among the dba group. Has anyone ever created equivalent
> accounts for each dba member? If so, what are the problems with doing
> this?
>
> Thanks.
> Joe
> --
> http://www.freelists.org/webpage/oracle-l
>
>
>
--
Niall Litchfield
Oracle DBA
http://www.orawin.info
--
http://www.freelists.org/webpage/oracle-l
Received on Wed Oct 24 2007 - 09:19:16 CDT
