RDBMS Database and Schema Denylist

This list contains the database and schema tables that are denied on the worker to avoid unnecessary scans of sensitive information. If necessary, you must approve these using an override command that must be performed on the worker node.

For a complete list of our supported data sources, see Supported Data Source Connectors.

Denied Databases

Connector

Databases

MySQL
CODE 
padb_harvest
template0
template1

Denied Schemas

Connector

Schemas

AWS Athena
CODE 
INFORMATION_SCHEMA

DB2
CODE 
nullid
sqlj
syscat
sysfun
sysibm
sysibmadm
sysibminternal
sysproc
syspublic
sysstat
systools
sysibmts

MySQL
CODE 
sys
performance_schema
information_schema
tempdb
model
msdb

Oracle
CODE 
apex_040000
anonymous
apex_050000
apex_public_user
appqossys
audsys
ctxsys
dbsfwuser
dbsnmp
dip
dvsys
dvf
flows_files
ggsys
gsmadmin_internal
gsmcatuser
gsmuser
lbacsys
mddata
mdsys
ordplugins
ordsys
orddata
outln
oracle_ocm
remote_scheduler_agent
si_informtn_schema
spatial_csw_admin_usr
sys
system
sysbackup
syskm
sysdg
sysrac
sys$umf
wmsys
xdb
xs$null
ojvmsys
olapsys

PostGresql
CODE 
information_schema
pg_catalog
pg_temp_1
pg_toast
pg_toast_temp_1

Redshift
CODE 
information_schema
pg_catalog
pg_catalog_history
pg_internal
pg_public
catalog_history
public

SAP
CODE 
_SYS_AFL
_SYS_AUDIT
_SYS_BI
_SYS_DATA_ANONYMIZATION
_SYS_EPM
_SYS_EPM_DATA
_SYS_EPM_DATA
_SYS_LDB
_SYS_PLAN_STABILITY
_SYS_REPO
_SYS_RT
_SYS_SECURITY
_SYS_SQL_ANALYZER
_SYS_STATISTICS
_SYS_TABLE_REPLICAS
_SYS_TASK
_SYS_TELEMETRY
_SYS_WORKLOAD_REPLAY
_SYS_XS
HANA_XS_BASE
SAP_AUTHORIZATION
SAP_HANA_ADMIN
SAP_HANA_BACKUP
SAP_HANA_IM_DP
SAP_HDM
SAP_HDM_DDO
SAP_HDM_DLM
SAP_INA_FILELOADER
SAP_PA_APL
SAP_RE
SAP_REST_API
SAP_XS_LM
SAP_XS_LM_PE
SAP_XS_LM_PE_TMP
SAP_XS_USAGE
SYS
SYSTEM
T_API
UIS

SQL Server
CODE 
db_accessadmin
db_backupoperator
db_datareader
db_datawriter
db_ddladmin
db_denydatareader
db_denydatawriter
db_owner
db_securityadmin
sys
guest
INFORMATION_SCHEMA

Snowflake
CODE 
INFORMATION_SCHEMA
PUBLIC

Teradata
CODE 
Crashdumps
All
DBC
dbcmngr
Default
External_AP
EXTUSER
LockLogShredder
PUBLIC
Sys_Calendar
SysAdmin
SYSBAR
SYSJDBC
SYSLIB
SYSSPATIAL
SystemFe
SYSUDTLIB
SYSUIF
TD_SERVER_DB
TD_SYSFNLIB
TD_SYSGPL
TD_SYSXML
TDStats
TDMaps
TDPUSER
TDQCD
tdwm
SQLJ

Sample Command to Override Denied Schemas

This command would require a unique update for each system variable:

CODE 
kubectl set env deployment/rdbms-scanner 
ONETRUST_DATADISCOVERY_SCANNER_RDBMS_CONNECTORS_DIALECTS_<SYSTEM-NAME>_BLACKLISTEDCATALOGSORSCHEMAS=INFORMATION_SCHEMA -n <NS_NAMe>