Connect Oracle Autonomous Database to DSPM

Overview

Netskope DSPM supports scanning Oracle Autonomous Database data stores even on Dedicated Infrastructure. Follow these instructions to setup Oracle Autonomous Database and configure its connection to Netskope DSPM.

Please ensure that the Autonomous database is configured to have ‘Mutual TLS (mTLS) authentication’ set to ‘Not required’. The setting can be found under the Network section of Database Information. Without this setting, DSPM will not be able to establish a connection with the Autonomous database.

Create a Netskope DSPM Service Account

Begin by configuring an OCI database service account which will be dedicated to Netskope DSPM’s use.

The following steps may require the assistance of your local database administrator.

As an administrator, log into your Oracle Autonomous Database.
Create the Netskope DSPM-specific user by executing the following commands in order:

Command	Outcome
`CREATE USER netskope_user IDENTIFIED BY "netskope_password";`	Creates the Netskope DSPM-specific user. Note: Substitute netskope_user & netskope_password with your own preferred values.
`GRANT CONNECT, RESOURCE TO netskope_user;`	Permits the Netskope DSPM-specific user to connect to the OCI database.
`GRANT SELECT ANY TABLE TO netskope_user;`	Grants the initial necessary Netskope DSPM-specific user permissions to power capabilities within the Netskope DSPM platform.
`GRANT select_catalog_role TO netskope_user;`	Grants the remaining necessary Netskope DSPM-specific user permissions.

Retrieve Connection Information

In addition to authenticating the data store, Netskope DSPM will require additional information to communicate with your Oracle Autonomous Database. Please follow the steps below to identify the connection values for later use within Netskope DSPM.

Log into your OCI Console and navigate to Oracle Autonomous Database instance details page and click on DB Connection button (highlighted in red)
On the DB Connection page, under Connection strings choose TLS option in the TLS authentication dropdown and copy the connection string against the TNS name with ‘_medium’ suffix (highlighted in red)

Connect Your Data Store

Step 1: Provide Credentials

Follow these steps to configure the connection:

Go to Data Stores > Data Store Inventory.
Click CONNECT A DATA STORE in the upper right.

Tip: Alternatively, if the data store was already found by auto-discovery, go to the Discovered tab and click Connect in the Actions column.
In the Connect a Data Store window, click the data store icon you wish to connect.
In the Provide Credentials section, complete the following fields:

Field	Value
Select OCI Account	Select one of the OCI compartments defined within the Infrastructure Section screen. The field will default if there is just one OCI compartment configured.
Data Store Identifier	Human-friendly name to describe this Data Store. This value displays in other Netskope DSPM screens such as Policy Management and Classification Management.
Data Store Endpoint	Enter the corresponding values from the Retrieve Connection Information step above.
Database Username (if Service Account)	Enter the corresponding value from the Create a Netskope DSPM Service Account step above.
Password (if Service Account)	Enter the corresponding value from the Create a Netskope DSPM Service Account step above.
Scan Frequency	Controls how often your Data Store is reviewed for changes; Netskope DSPM’s recommended frequency is defaulted, which you can override as needed.
Sidecar Pool	If you will use sidecars to monitor this data store, select a sidecar pool with network visibility to said data store. This field is displayed when there is at least one defined sidecar pool. To learn more, please visit our Sidecar Administration article.

Step 2: Scanning Infrastructure

Click Next.
When the Select Capabilities tab appears, complete the following fields:
- Assign a Data Owner (Optional): Select one or more users responsible for this data store.
- Which databases should Netskope DSPM scan?: Select the specific data stores and schemas to monitor, if applicable.
- Features: Select the features you want to enable.

Capability	Supported for Oracle Base Database
Discovery	Yes (always-on)
Privilege Analysis	No
Shadow Data Analysis	No
Classification	Yes
Data In Use Monitoring	No
Automation	Yes (always-on)

Step 3: Review and Save

Click Save.
- When the Review tab appears, the system validates your configuration. If there are any issues, follow the on-screen instructions to fix them.
Click Save to finalize the connection.

Overview

Create a Netskope DSPM Service Account

Begin by configuring an OCI database service account which will be dedicated to Netskope DSPM’s use.

The following steps may require the assistance of your local database administrator.

As an administrator, log into your Oracle Autonomous Database.
Create the Netskope DSPM-specific user by executing the following commands in order:

Command	Outcome
`CREATE USER netskope_user IDENTIFIED BY "netskope_password";`	Creates the Netskope DSPM-specific user. Note: Substitute netskope_user & netskope_password with your own preferred values.
`GRANT CONNECT, RESOURCE TO netskope_user;`	Permits the Netskope DSPM-specific user to connect to the OCI database.
`GRANT SELECT ANY TABLE TO netskope_user;`	Grants the initial necessary Netskope DSPM-specific user permissions to power capabilities within the Netskope DSPM platform.
`GRANT select_catalog_role TO netskope_user;`	Grants the remaining necessary Netskope DSPM-specific user permissions.

Retrieve Connection Information

Log into your OCI Console and navigate to Oracle Autonomous Database instance details page and click on DB Connection button (highlighted in red)
On the DB Connection page, under Connection strings choose TLS option in the TLS authentication dropdown and copy the connection string against the TNS name with ‘_medium’ suffix (highlighted in red)

Connect Your Data Store

Step 1: Provide Credentials

Follow these steps to configure the connection:

Go to Data Stores > Data Store Inventory.
Click CONNECT A DATA STORE in the upper right.

Tip: Alternatively, if the data store was already found by auto-discovery, go to the Discovered tab and click Connect in the Actions column.
In the Connect a Data Store window, click the data store icon you wish to connect.
In the Provide Credentials section, complete the following fields:

Field	Value
Select OCI Account	Select one of the OCI compartments defined within the Infrastructure Section screen. The field will default if there is just one OCI compartment configured.
Data Store Identifier	Human-friendly name to describe this Data Store. This value displays in other Netskope DSPM screens such as Policy Management and Classification Management.
Data Store Endpoint	Enter the corresponding values from the Retrieve Connection Information step above.
Database Username (if Service Account)	Enter the corresponding value from the Create a Netskope DSPM Service Account step above.
Password (if Service Account)	Enter the corresponding value from the Create a Netskope DSPM Service Account step above.
Scan Frequency	Controls how often your Data Store is reviewed for changes; Netskope DSPM’s recommended frequency is defaulted, which you can override as needed.
Sidecar Pool	If you will use sidecars to monitor this data store, select a sidecar pool with network visibility to said data store. This field is displayed when there is at least one defined sidecar pool. To learn more, please visit our Sidecar Administration article.

Step 2: Scanning Infrastructure

Click Next.
When the Select Capabilities tab appears, complete the following fields:
- Assign a Data Owner (Optional): Select one or more users responsible for this data store.
- Which databases should Netskope DSPM scan?: Select the specific data stores and schemas to monitor, if applicable.
- Features: Select the features you want to enable.

Capability	Supported for Oracle Base Database
Discovery	Yes (always-on)
Privilege Analysis	No
Shadow Data Analysis	No
Classification	Yes
Data In Use Monitoring	No
Automation	Yes (always-on)

Step 3: Review and Save

Click Save.
- When the Review tab appears, the system validates your configuration. If there are any issues, follow the on-screen instructions to fix them.
Click Save to finalize the connection.