Asset Protection

To protect the engineered system from inadvertent changes in the configuration and the resulting loss of service, high-risk actions are disabled for all users.

Some actions in Oracle Enterprise Manager Ops Center might break an Oracle SuperCluster engineered system configuration. To protect the engineered system from inadvertent changes in the configuration and the resulting loss of service, high-risk actions are disabled for all users. For example, modifying logical domains or network configuration might break the engineered system configuration leading to loss of service.

The following actions are disabled for all users, including Ops Center Admin:

Control Domains

  • Attach Network

  • Create Logical Domains

  • Cancel Delayed Reconfiguration

Logical Domains

  • Delete logical domain

  • Migrate logical domain

  • Connect network

  • Add storage

  • Move metadata

  • Edit attributes of logical domain (with exception of name and description)

  • Enable/Disable automatic recovery

  • Network/Network Connectivity operations

  • Network/Link Aggregation operations

  • Network/IPMP group operations

  • Network/Bandwidth Flow operations

Global Zones

  • Network/Network Connectivity operations

  • Network/IPMP group operations

  • Network/Bandwidth Flow operations

Common Operations

  • Install Software

  • Deploy/Update Software

  • Update Firmware

  • Update BIOS

Disable Asset Protection

The Ops Center Administrator role has special privilege to turn off the Asset protection feature in engineered systems.

Note:

Use this privilege for emergency purpose only.

Enable the oes.asset.protection.override.user parameter in the /opt/sun/n1gc/lib/XVM_SATELLITE.properties file to allow all actions, including actions disabled by asset protection.

The Oracle Enterprise Manager OpsCenter Enterprise Controller must be restarted for changes in the XVM_SATELLITE.properties file to take effect.