EBS_system schema

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

EBS_system schema

Laurel
Hi Erman!
Happy New Year 2022! :)

Wanted to ask ,did you and your customers implemented the EBS_system schema ?
Oracle E-Business Suite Release 12.2 System Schema Migration (Doc ID 2755875.1)

We have DBA and sysadmin and unix admin in 1 person,so actually for security reason I dont see the need.
Thoughts ?

Br,Laurel
Reply | Threaded
Open this post in threaded view
|

Re: EBS_system schema

ErmanArslansOracleBlog
Administrator
Happy new year Laurel!:)

We don't have any customers implemented it yet.
The most important benefit of it is that you will not need to use SYS or SYSTEM schema for administrating EBS..  For instance, adop will not request SYSTEM schema password from you..  It will requests EBS_SYSTEM schema password :) But this increases the vibe towards to the seperation of duties.

I would recommend it if you have the following roles to manage your EBS env;

an APPS DBA responsible for EBS Apps Tier and the code/schemas inside the EBS database
a Database Admin responsible for the EBS database (oracle database without EBS-knowledge)
an OS/System Admin for managing the platform, OS and system
a Storage admnin to manage the storage ( in case it is a traditional converged env)
etc..

note that, in case of a Cloud env or Engineered system env, we have less roles ofcourse :)

Anyways;

So if you are in such an env, of course migrating to EBS_SYSTEM schema will give you benefits.

But! as you said :"We have DBA and sysadmin and unix admin in 1 person,so actually for security reason I dont see the need.", I don't either:)

You should first seperate the duties...

Doc 2755875.1 lists the key benefits of EBS_system schema as it is documented as follows;

Public Oracle Database APIs
Least Privileges Model for database object access
Separation of Duties for administrators
Database service names for application tier database connections
Oracle Database Unified Auditing
Easier interoperability across Oracle Database releases

There are some key features introduced as well.. Such as;

Access to the Oracle database SYS and SYSTEM and the Oracle database server operating system is no longer required for Oracle E-Business Suite system administrative functions.
Migration to the EBS System Schema obviates the need for any EBS-owned objects to reside in the SYS or SYSTEM schemas.

This is an ideal thing..  Ideals are like the stars in the sky. They show us the way. They prevent us from getting lost at night.  However; we cannot reach the stars directly. But, still on the way they show, we move towards the ideals. :)), so you should first seperate the duties..