Thinks to consider during DBV implemenation (most of them need authoriztion, this

can be done from cloud control under DBV 12c adminstration page:

1. Export/Import:
If the user tried to export his protected schema by the realm and he is a realm
owner he can do that, participant cannot or other user inclduing sys cannot without
authorization:
do export/import he must be authorized by this:
execute DVSYS.DBMS_MACADM.AUTHORIZE_DATAPUMP_USER('BERNST','HR'); --- to be able
to export HR protected objects
execute DVSYS.DBMS_MACADM.AUTHORIZE_DATAPUMP_USER('SYS'); --- to be able to export
any protected objects by realms

the below error while try to export hr protected schem by sys user

[oracle@dbhost 27338020]$ expdp directory=DATA_PUMP_DIR dumpfile=test1.dmp

schemas=hr

Export: Release 12.1.0.2.0 - Production on Wed Jan 9 23:46:30 2019

Copyright (c) 1982, 2014, Oracle and/or its affiliates. All rights reserved.

Username: / as sysdba

Connected to: Oracle Database 12c Enterprise Edition Release 12.1.0.2.0 - 64bit
Production
With the Partitioning, Oracle Label Security, OLAP, Advanced Analytics,
Oracle Database Vault, Real Application Testing and Unified Auditing options
Starting "SYS"."SYS_EXPORT_SCHEMA_01": /******** AS SYSDBA directory=DATA_PUMP_DIR
dumpfile=test1.dmp schemas=hr
ORA-39327: Oracle Database Vault data is being stored unencrypted in dump file set.
Estimate in progress using BLOCKS method...
Processing object type SCHEMA_EXPORT/TABLE/TABLE_DATA
Total estimation using BLOCKS method: 448 KB
Processing object type SCHEMA_EXPORT/USER
Processing object type SCHEMA_EXPORT/SYSTEM_GRANT
.
.
.
ORA-31693: Table data object "HR"."COUNTRIES" failed to load/unload and is being
skipped due to error:
ORA-28116: insufficient privileges to do direct path access
.
.
******************************************************************************
Dump file set for SYS.SYS_EXPORT_SCHEMA_01 is:
/u01/app/oracle/admin/testdb/dpdump/test1.dmp
Job "SYS"."SYS_EXPORT_SCHEMA_01" completed with 8 error(s) at Wed Jan 9 23:47:29
2019 elapsed 0 00:00:55

2. Masking
3. Encrption
4. RMAN Backup/Restore: no changes or special needs, backup/restore can run
normally in DBV configured without any changes, maybe table level recovery need
consideration
5. Data Guard
6. GoldenGate and Streams
7. Scheduling Jobs: sys user/normal user who has create job success with create job
without authorization, dvsys.macadm.authorize_scheduler_user('TESTUSER')
8. Database Patching (apply patches to the software): nothing needed, but no idea
what they mean of authoriztion in the DBV adminstration page