1. Cloud Control Security Guide
  2. Security Best Practices for Database Management in Enterprise Manager
  3. Flexible Database Access Control
  4. Database Administrator Access

Database Administrator Access

The database administrator has full access on the database and can perform any operation on the database.

Creating a Database Administrator Account

To create a database administrator account:

  1. Follow the instructions in "Creating a New Administrator" to create an Enterprise Manager administrator
  2. On the Create Administrator <Name>: Roles page add the EM_PATCH_ADMINISTRATOR and EM_PROVISIONING_OPERATOR roles.
  3. On the Target Privileges page grant the Add Any Target privilege from the Privileges Applicable to all Targets section.

Creating Named Credentials

To create named credentials the database administrator logs in to Enterprise Manager and creates a database named credential and a host named credential.

The database administrator provisions the database and adds the database to Enterprise Manager for management. Doing this makes the database administrator the owner of the database and listener targets in Enterprise Manager. The owner has FULL access on the targets in Enterprise Manager.

Granting Privileges Through Roles and Privilege Propagating Groups

A similar level of access on the database to multiple users can be granted by creating Enterprise Manager roles. Privileges can be granted to roles and the roles can be granted to the Enterprise Manager administrators. Access changes made to the roles are reflected to the Enterprise Manager administrators granted that role.

To manage a similar level of access across multiple databases to a user, privilege propagating groups should be created. Individual databases should be added to a privilege propagating group. Privileges can be granted on the privilege propagating group. Privileges granted at the group level are automatically propagated to the group members. The user automatically receives the privileges to any database that is later added to the privilege propagating group.

Enterprise Manager roles are explained in Section 2.2.1 of the Oracle Enterprise Manager Cloud Control Security Guide.

Note:

For more information about Enterprise Manager roles, see "Understanding Users, Privileges, and Roles"