On each target database, Oracle Data Safe requires its own service account.
For a DB system, you need to create the service account with the least amount of privileges on the database.
For an Autonomous Database, you do not need to create a service account for Oracle Data Safe on the database. An Autonomous Database already has an account for Oracle Data Safe named
DS$ADMIN that is initially locked with the password expired. When you register the Autonomous Database, Oracle Cloud Infrastructure unlocks this service account and resets its password. When you deregister the Autonomous Database, the account is locked again.