Register an Oracle Connection

Immuta policies will not be automatically enforced in Oracle

While you can author and apply subscription and data policies on Oracle data sources within Immuta, these policies will not be enforced natively in the Oracle platform. You can use Immuta webhooks to be notified about changes to user access and make appropriate access updates in Oracle using your own process.

Requirement

• Amazon RDS for Oracle

Permissions

The user registering the connection must have the permissions below.

• APPLICATION_ADMIN Immuta permission

• The Oracle user running the script must have either of the following system privileges:

  • GRANT ANY ROLE

  • GRANT ANY PRIVILEGE

Create the database user

1. Create a new database user in Oracle to serve as the Immuta system account. Immuta will use this system account continuously to crawl the database you register.

2. Grant this account the SELECT Oracle privilege on the system views listed below:

   • V$DATABASE

   • CDB_PDBS

   • SYS.DBA_USERS

   • SYS.DBA_TABLES

   • SYS.DBA_VIEWS

   • SYS.DBA_MVIEWS

   • SYS.DBA_TAB_COLUMNS

   • SYS.DBA_OBJECTS

   • SYS.DBA_CONSTRAINTS

   • SYS.DBA_CONS_COLUMNS

Register an Oracle connection

1. In Immuta, click Data and select Connections in the navigation menu.

2. Click the + Add Connection button.

3. Select the Oracle tile.

4. Select RDS as the deployment method.

5. Enter the host connection information:

   1. Display Name: This is the name of your new connection. This name will be used in the API (connectionKey), in data source names from the host, and on the connections page.

   2. Hostname: URL of your Oracle instance.

   3. Port: Port configured for Oracle.

   4. Database: The Oracle database you want to connect to. All databases in the host will be registered.

   5. Region: The region of the AWS account with your Oracle instance.

6. Enter the username and password of the Oracle database user you created above.

7. Click Save Connection.

8. Copy the provided script and run it in Oracle as a user with the privileges listed above.

9. Click Validate Connection.

10. If the connection is successful, click Next. If there are any errors, check the connection details and credentials to ensure they are correct and try again.

11. Ensure all the details are correct in the summary and click Complete Setup.