Create an Oracle user

For Trellix DLP Discover to scan Oracle databases, create a user with the required permissions.

Run SQL*Plus.
Logon as a database administrator.
Example: username/password@SID as sysdba

Create a user using the following commands:

CREATE USER "username"  PROFILE "DEFAULT"
IDENTIFIED BY password DEFAULT TABLESPACE "USERS"
TEMPORARY TABLESPACE "TEMP"
QUOTA UNLIMITED
ON "USERS"
ACCOUNT UNLOCK;

Run each of the following commands in SQL*Plus to grant the required permissions:
GRANT CREATE VIEW TO "username";
GRANT SELECT ANY TABLE TO "username";
GRANT CONNECT TO "username";
GRANT SELECT_CATALOG_ROLE TO "username";
GRANT READ ON DIRECTORY EXT_TAB_DATA TO "username"; (mandatory to work with external tables)

GRANT WRITE ON DIRECTORY EXT_TAB_DATA TO "username"; (mandatory for logging enabled case on external tables)

GRANT EXECUTE ANY TYPE TO "username";
(mandatory to cover nested tables case)
Caution
EXT_TAB_DATA is the most commonly used tag for external tables storage, but can depend on the client database structure. Each client DBA must carefully consider granting READ/WRITE permission on DIRECTORY with external tables.

The user created has the required permissions to allow Trellix DLP Discover to scan the Oracle database schemas.