Privileges for Monitoring Data

To monitor data, the FortiDB user for your target database need the following privileges:
RDBMS Type Required Privilege(s)
Oracle

For Collection Method 'DB, EXTENDED' and 'XML File Agent'

  • CREATE SESSION
  • SELECT_CATALOG_ROLE
  • DELETE_CATALOG_ROLE
  • AUDIT ANY
  • AUDIT SYSTEM
  • SELECT SYS.AUD$
  • SELECT on the monitored tables or SELECT ANY TABLE

For Collection Method 'TCP/IP Sniffer', 'SGA Agent', 'Net Agent' (Privileges need for browsing database to define data policy)

  • CREATE SESSION
  • SELECT_CATALOG_ROLE
  • SELECT on the monitored tables or SELECT ANY TABLE
MSSQL Member of sysadmin
Sybase

For MDA

  • No privilege is required for the MDA table

For Collection Method 'TCP/IP Sniffer' (Privileges need for browsing database to define data policy)

  • User who can browse database object
DB2 UDB

For DB2 Agent

  • SECADM privilege

For Collection Method 'TCP/IP Sniffer' (Privileges need for browsing database to define data policy)

  • User who can browse database object
Related concepts
Privileges of DB User for FortiDB



FortiDB 5.0.0 Handbook
1st Edition , July 11 2013
© Copyright 2013 Fortinet Inc. All rights reserved.
Latest documentation: http://docs.fortinet.com/fdb.html