1.4 Privileges for Configuring and Using Oracle SQL Firewall

You must be granted the appropriate role to administer Oracle SQL Firewall or to query the views that are associated with Oracle SQL Firewall.

To administer Oracle SQL Firewall, you must be granted the SQL_FIREWALL_ADMIN role. This role provides the following privileges:

  • The ADMINISTER SQL FIREWALL system privilege, which is required to run the PL/SQL procedures in the DBMS_SQL_FIREWALL package
  • The EXECUTE privilege for the DBMS_SQL_FIREWALL PL/SQL package
  • The READ privilege for the SQL Firewall DBA_SQL_FIREWALL_* data dictionary views

To be able to query the DBA_SQL_FIREWALL_* data dictionary views (but not administer SQL Firewall), users must be granted the SQL_FIREWALL_VIEWER role.

Note:

The SQL Firewall SQL_FIREWALL_ADMIN and SQL_FIREWALL_VIEWER roles are powerful roles. Only grant these roles to trusted users.