Oracle 23c New Features for DBA'sTo restrict user operations at PDB levels and even more granular restriction, in 12.2 we can create Lock down profiles using "create lock down profile".
Here are some examples
CREATE LOCKDOWN PROFILE test;
ALTER LOCKDOWN PROFILE test DISABLE STATEMENT = ('ALTER SYSTEM');
ALTER LOCKDOWN PROFILE test ENABLE STATEMENT = ('ALTER SYSTEM') CLAUSE= ('flush shared_pool');
ALTER LOCKDOWN PROFILE test DISABLE FEATURE = ('NETWORK_ACCESS');
ALTER LOCKDOWN PROFILE test DISABLE OPTION = ('Partitioning');
ALTER LOCKDOWN PROFILE test DISABLE STATEMENT = ('ALTER SYSTEM') CLAUSE = ('SUSPEND', 'RESUME');
Then set at PDB level using static parameter
ALTER SESSION SET CONTAINER=PDB1;
ALTER SYSTEM SET PDB_LOCKDOWN = test SCOPE = SPFILE;
ALTER PLUGGABLE DATABASE PDB1 CLOSE;
ALTER PLUGGABLE DATABASE PDB1 OPEN;
Follow Me!!!