Database administrator access is restricted to defined roles rather than accounts with default administrative permissions, or all permissions.
Topic
Database administrator accounts
Applicable to
all
History
Priority
should
Mar 2023
Removed
An existing control relating to database administrator accounts being restricted to defined roles rather that having default permissions or all permissions was rescinded due to duplication of an existing control [ISM-1508] on limiting privileged access to systems and applications to only what is required for users to undertake their duties.
2015
Database administrator access should be restricted to defined roles rather than accounts withdefault administrative permissions, or all permissions.