Does Symantec DLP require SYS or SYSTEM to install in Oracle?

Products

• Data Loss Prevention Enforce
• Data Loss Prevention

Issue/Introduction

The SYS and SYSTEM are two very powerful accounts within Oracle.  Most DBAs reserve them for themselves.  Are they necessary to install the Oracle portion of Symantec DLP?

Resolution

During the creation of the Symantec DLP schema, sys as sysdba is used to create the database and the protect user. 

After that sys is used for dba related activities only, and the protect user, being the owner of all Symantec DLP objects, is used for all operations concerning Symantec DLP.