Other administrative roles and users
A number of other, more minor, roles might be involved in database server secure auditing.
Database Administrator
A DBA manages access control for a specific database. A DBA cannot change database system modes, add or delete space, or maintain or tune the system. For information about the role and responsibilities of a DBA, see the HCL OneDB™ Guide to SQL: Tutorial. For information about this and other database server roles and users, see your HCL OneDB Administrator's Guide.
Operating-System Administrator
The OSA carries out responsibilities and tasks that the database server requires from the operating system. The OSA enables role separation, grants and revokes access to and from the database server if role separation is enforced, and adds new AAO, DBSSO, and DBSA accounts as necessary. In addition, the OSA coordinates with the DBSSO and AAO to perform various security-related functions of the database server, such as periodic reviews of the operating-system audit trail.
No special account exists for the operating-system requirements of the database server, and no special database server protection mechanisms are associated with OSA tasks. For more information, see your operating-system documentation.
System Users
All operating-system accounts, including those for the DBSA, DBSSO, AAO, and the account called onedb, potentially can use the database server. All users with accounts who want to use the database server must explicitly be granted access to the database server if role separation is configured to enforce access control on database server users. The DBSA can revoke that access at any time, whether role separation is enabled. For more information about granting or revoking access, see Configuring and enforcing role separation.
Privileged Users
Privileged users are those users whom the database server recognizes as having additional privileges and responsibilities. These privileged users include the DBSA, DBSSO, AAO, and DBA. In addition, the users onedb and root can also operate as any privileged user on database servers configured without role separation. Even with role separation, root can be a privileged user.