12c Role Separation

Production DBA Application DBA Application Support

Common Users Application Users * Schema Maintenance
Common Tablespaces Application Tablespaces * Object privilege grants
Role creation Temporary Tablespaces * SQL Tuning
Profile creation Role grants * Logical Backup/Restore
System privilege grants Profile assignments *
Database Parameters Application Scheduler Jobs
Database Links Performance monitoring
Public Synonyms Tablespace monitoring
Common Scheduler Jobs Logical Backup/Restore
Patching and upgrades
Physical Backup/Restore * PDBADBA proxy required
PDB Storage Limits

All roles need to follow appropriate Change Control procedures and ensure
compliance with BT Security Policies (e.g. A034)