Comparison of Oracle Database Vault Configuration for SAP NetWeaver 11gR2 vs. 12cR1
The following table shows the main differences of the SAP Database Vault configuration between 11g R2 and 12c R1.
| Description | Change in 12cR1 | 11gR2 | |
| Database user SECADMIN | Database Vault Security Administrator | no change | created |
| Database user SECACCTMGR | Database Vault Account Manager | no change | created |
| Database user SAPACCTMGR | Database Vault Account Manager for SAP | obsolete in 12c | created |
| Database user BRTDBA | Default Administrator for BR*Tools for Segment Managment | same function, configuration has changed | created |
| Database role SAPSYS | SAP specific Database Role for Segment Management | same function, definition has changed | created |
| Database role SECMGRPRIV_ROLE | SAP specific database role for SECACCTMGR | new | - |
| Database role SAPCRED | SAP specific Database Role for Account Management | obsolete in 12c | created |
| DV Realm SAP ABAP Stack | Realm to protect SAP Application Data ABAP Stack | authorization based on users | authorization based on roles |
| DV Realm SAP Java Stack | Realm to protect SAP Application Data Java Stack | authorization based on users | authorization based on roles |
| DV Realm SAP BRTOOLS | Realm for SAP BR*Tools Dictionary | configuration has changed | created |
| DV Realm SAP ROLES | Realm to protect SAP Specific Database Roles | obsolete in 12c | created |
| DV Command rule CONNECT | Command rule to control connect command | obsolete in 12c | created |
| DV Command rule GRANT | Command rule to control grant command | obsolete in 12c | not defined any more |
| Database role SAPDBA | SAP specific Database Role for Basic Administration Tasks | same function, definition has changed | created |