Adding Object privilege as Critical Action in Ruleset

[MichaelHealy779]

Hi,

Could someone please inform me how can I can add an Object Privilege to our ruleset? Currently I am not sure how it will look in the function. I want to track access to a schema. Do I need to use the "Permissions" or should the "Action" with the schema name work? Any help would be very much appreciated.

Michael

[MichaelHealy779 · Accepted solution]

I found the answer, the schemas need a ":" in the name. ex: _SYS_REPO: - and not just _SYS_REPO

[valentynchapnyi]

check note 1744355 - Permission rules without actions

[MichaelHealy779]

Yes, I did already try this but it still doesn't seem to work. Have you ever managed to create a CP or CA for an Object Privilege in GRC?

The permission group is ^!<schema_name>. The permission is SELECT and the FIELD is OBJECTPRIVILEGE. Value from is the schema name. Any idea if this is wrong, or what I am doing incorrect?