Skip to main content

Target Oracle Requirements, Permissions, and Ports

The Access Analyzer for Databases Solution lets you audit and monitor Oracle database environments to collect permissions, sensitive data, and activity events. It scans:

  • Oracle Database 12c
  • Oracle Database 18c
  • Oracle Database 19c

Data Collectors

This solution uses the following data collectors to scan the target environment:

Permissions​

For .Active Directory Inventory Prerequisite

  • Read access to directory tree

  • List Contents & Read Property on the Deleted Objects Container

    note

    See the Microsoft Searching for Deleted Objects article and the Microsoft Dsacls article for additional information.

For PowerShell Data Collection

  • Member of the Local Administrators group

For Oracle Data Collection

  • Recommended User with SYSDBA role OR Least Privilege Model
  • Local Administrator on the target servers – Applies only to Windows Servers, not to Linux or Unix operating systems

The Oracle Target Least Privilege Model topic describes the least privilege model for scanning your domain.

Ports​

Open the following firewall ports:

For ADInventory Data Collector

  • TCP 389
  • TCP 135-139
  • Randomly allocated high TCP ports

For PowerShell Data Collector

  • Randomly allocated high TCP ports

For SQL Data Collector

  • The Instances table specifies the port (default is 1521)