why not, it means everything is auditable then - lock down the oracle os account so no generic logins, grant the dbas sysdba to own user id's then can see who is logging in to change stuff