Identity Manager Interaction with SYS Owned Database Views

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article clarifies whether Identity Manager utilizes database views or jobs owned by the SYS schema. This information is intended for database administrators and security teams performing database hardening.

Environment

Identity Manager

Resolution

Identity Manager does not directly utilize or require access to SYS owned views or jobs.

• Database Permissions: Identity Manager operates entirely within its designated application schema.
• Schema Isolation: No SYS access or administrative schema permissions are required for the standard operation of the Identity Manager application.
• Security Recommendation: Database administrators can safely restrict the Identity Manager service account from accessing SYS or other system-level schemas to adhere to the principle of least privilege.