Description of the illustration cdb_with

Graphic cdb_with_dv.png shows from top to bottom, left to right, the following components:

The root administrator for a CDB that contains three PDBs. PDB1 has the HR realm; PDB2 has the FIN realm, and PDB3. PDB3 is not Database Vault-enabled and has a CRM. The root administrator has access to the CRM in PDB3 but not to the realms in the PDB1 and PDB2
To the left, the local administrator for the two Database Vault-enabled PDBs does not have access to the HR and FIN realms.
To the right, the local adminstrator for the PDB that is not Database Vault-enabled has access to the CRM application in PDB3.