Roles for database server and audit administration

The operating-system administrator (OSA) can set up the following roles for database server administration and audit administration, in addition to any administrative roles that your operating system might have:

• The database server administrator (DBSA) maintains and tunes the database server
• An audit administrator can have either or both of the following roles:
  • Database system security officer (DBSSO), who specifies and maintains the audit masks
  • Audit analysis officer (AAO), who turns auditing on and off, sets up and maintains the audit configuration, and reads and analyzes audit-trail data

Although role separation provides more secure auditing, these roles are optional. Before the database server software is installed, the OSA, or whoever installs the database server, decides whether to have separate or combined DBSSO and AAO roles for audit administration and who must perform each role.

For detailed information about roles and role separation, see Using role separation. For information about setting up role separation and creating a user group for each role, see your HCL OneDB™ Installation Guide.