How Shared Schemas Are Configured For Enterprise Users; How Enterprise Users Are Mapped To Schemas - Oracle Database B10772-01 Administrator's Manual

About Using Shared Schemas for Enterprise User Security
How Shared Schemas Are Configured for Enterprise Users
To configure shared schemas, the local database administrator (DBA) must create at
least one database schema in a database. Enterprise users can be mapped to this
schema.
In the following example, the administrator creates a shared schema and maps
users to it:
1.
2.
3.
4.
When Harriet connects to the HR database, she is automatically connected to the
EMPLOYEE schema and is given the global role of HRMANAGER. Multiple enterprise
users can be mapped to the same shared schema. For example, the enterprise
security administrator can create another enterprise user Scott and map Scott to the
EMPLOYEE schema. From that point on, both Harriet and Scott automatically use the
EMPLOYEE schema when connecting to the HR database, but each can have
different roles and can be individually audited.

How Enterprise Users Are Mapped to Schemas

Global schemas (those created with CREATE USER IDENTIFIED GLOBALLY AS
'') can be owned by one enterprise user (exclusive schema) or shared among
11-20 Oracle Database Advanced Security Administrator's Guide
Each enterprise user can be mapped to a shared schema on each database the
user needs to access. The user connects to the shared schema when the user
connects to a database.
Shared schemas lower the cost of managing users in an enterprise.
The administrator creates a global shared schema called EMPLOYEE and the
global role HRMANAGER on the HR database.
The administrator uses Enterprise Security Manager to create and manage
enterprise users and roles in the directory. For example, the administrator
creates enterprise user Harriet and an enterprise role named MANAGER. The
administrator then assigns the HR database global role of HRMANAGER to the
enterprise role MANAGER.
The administrator assigns enterprise roles to enterprise users in the directory.
For example, the administrator assigns the enterprise role MANAGER to Harriet.
The administrator uses Enterprise Security Manager to map the user Harriet in
the directory to the shared schema EMPLOYEE on the HR database.
Oracle Database Security Guide for more information
See Also:
about auditing.