Fleet Maintenance Patching Errors If Patch Designers and Patch Operators Do Not Have the Required Privileges
Issue
When patching with Fleet Maintenance, the patch fails while refreshing the Oracle home configuration.
12:58:38 [ERROR] Command failed with error: Can't deploy oracle.sysman.oh on https://<hostname>:<port>/emd/main/
The error occurs because the user does not have the following roles:
- ORACLE_PLUGIN_USER, to view the plug-in user interface
- ORACLE_PLUGIN_OMS_ADMIN, to deploy a plug-in on the OMS
- ORACLE_PLUGIN_AGENT_ADMIN, to deploy a plug-in on the Management Agent
These roles are required to submit the Discover Promote Oracle Home Targets job. The job deploys the Oracle home plug-in on the Management Agent if it is not already deployed.
Solution
Grant these roles explicitly while creating the user accounts:
- ORACLE_PLUGIN_USER, to view the plug-in user interface
- ORACLE_PLUGIN_OMS_ADMIN, to deploy a plug-in on the OMS
- ORACLE_PLUGIN_AGENT_ADMIN, to deploy a plug-in on the Management Agent
- EM_PROVISIONING_OPERATOR
- EM_PROVISIONING_DESIGNER