31.3 Creating Roles for Systems Infrastructure Administration

The Systems Infrastructure plug-in does not define its own roles for access controls. To manage the plug-in, you must create roles and administrators, and then assign roles to administrators. The roles restrict a user's privileges.

Note:

For security reasons, Oracle recommends that the SYSMAN account be used only as a template to create other accounts, and not used directly.

To create roles to provide management rights to users:

1. Log in to the Enterprise Manager Cloud Control as the super administrator user.
2. Click Setup, then Security.
3. Select Roles.

   On the Security page, a list of predefined roles is provided. These roles can serve as basis to define custom roles to suite specific site level requirements.

   Note:

   The predefined roles provided cannot be edited or deleted.

4. Select a role that closely matches the role you wish to create. Click Create Like.
5. On the Properties page, enter a name for the new role. You can optionally add a description. Click Next.
6. On the Roles page, select the roles from the list of Available Roles. Click Move to add the role to Selected Roles. Click Next.
7. On the Target Privileges page, select the privilege you want to grant to the new role. Click Next.
8. On the Resource Privileges page, you can edit specific privileges to be explicitly granted. Click the Manage Privilege Grant edit icon to make the changes. Click Next.
9. On the Administrators page, select the administrators from the list of Available Administrators that you want to grant the new role to. Click Move to add the administrator to Selected Administrators. Click Next.
10. On the Review page, a complete summary of the new role you have created is displayed. Click Back to go to previous screens to make changes. Click Finish to complete the role creation.

When the newly created administrator logs in, unlike SYSMAN, the administrator is restricted by the privileges set.