Thanks for your reply. What I meant by 'Separation of Duties' was the ability to block sensitive data from being viewed by sysadmins. This can be done in Oracle via Data Guard.