Oracle Database Advanced Security 10g Release 1, Administrator'S Manual

Page: 292 / 518

Introduction to Enterprise User Security
11-8 Oracle Database Advanced Security Administrator's Guide
About Enterprise User Schemas
Enterprise users can retain their individual database schemas (exclusive schemas)
or share schemas if the enterprise security administrator maps them to a shared
schema.
Exclusive-Schema Enterprise Users If users want to retain their individual schemas in
the databases that they access, then
■
Create enterprise users in the directory, and
■
Create a global user schema for each user in each database that they access.
Creating separate accounts for each enterprise user on each database that they
access results in significant overhead. Instead, creating enterprise users who access
a single, generic shared schema in each database increases the efficiency of the
enterprise user solution.
Shared Schema Enterprise Users
To receive the real benefit of the enterprise user
solution, you can use shared schemas for your enterprise users. For this strategy
■
Create enterprise users in the directory,
■
Create a single shared schema in each database, and
■
Create a single shared schema mapping in Oracle Internet Directory.
Mapping enterprise users to a generic, shared schema on each of the databases that
they access greatly reduces the overhead of creating separate schemas for each
enterprise user.
Shared schema enterprise users can be mapped to generic, shared schemas on all of
the databases that they access, or they can have exclusive schemas on some
databases and shared schemas on others. The shared schema mappings are stored
in the directory.
See Also:
■
"Creating New Enterprise Users" on page 13-9
■
Oracle Database Security Guide for more information about
global users.
■
Oracle Internet Directory Administrator's Guide for information
about defining users in the directory.