Administrative privileges should be assigned to database accounts via database roles.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-15627	DG0117-ORACLE10	SV-24421r1_rule	ECPA-1	Medium

Description
Privileges granted outside the role of the administrative user job function are more likely to go unmanaged or without oversight for authorization. Maintenance of privileges using roles defined for discrete job functions offers improved oversight of administrative user privilege assignments and helps to protect against unauthorized privilege assignment.

STIG	Date
Oracle 10 Database Instance STIG	2014-01-14

Details

Check Text ( None )
None

Fix Text (F-3785r1_fix)
Revoke assigned administrative privileges from database accounts and assign to accounts via roles. Document roles and assignments in the System Security Plan.