| If the DBMS or DBMS host is not shared by production and development activities, this check is not a finding. |
Review OS DBA group membership.
If any developer accounts, as identified in the System Security Plan, have been assigned DBA privileges, this is a finding.
Note: Though shared production/non-production DBMS installations was allowed under previous database STIG guidance, doing so may place it in violation of OS, Application, Network or Enclave STIG guidance. Ensure that any shared production/non-production DBMS installation meets STIG guidance requirements at all levels or mitigate any conflicts in STIG guidance with the AO.