Fleet Maintenance Patching Errors If Patch Designers and Patch Operators Do Not Have the Required Privileges

Issue

When patching with Fleet Maintenance, the patch fails while refreshing the Oracle home configuration.

12:58:38 [ERROR] Command failed with error: Can't deploy oracle.sysman.oh on https://<hostname>:<port>/emd/main/

The error occurs because the user does not have the following roles:

  • ORACLE_PLUGIN_USER, to view the plug-in user interface
  • ORACLE_PLUGIN_OMS_ADMIN, to deploy a plug-in on the OMS
  • ORACLE_PLUGIN_AGENT_ADMIN, to deploy a plug-in on the Management Agent

These roles are required to submit the Discover Promote Oracle Home Targets job. The job deploys the Oracle home plug-in on the Management Agent if it is not already deployed.

Solution

Grant these roles explicitly while creating the user accounts:
  • ORACLE_PLUGIN_USER, to view the plug-in user interface
  • ORACLE_PLUGIN_OMS_ADMIN, to deploy a plug-in on the OMS
  • ORACLE_PLUGIN_AGENT_ADMIN, to deploy a plug-in on the Management Agent
You can also grant the provisioning roles that include the previous roles within:
  • EM_PROVISIONING_OPERATOR
  • EM_PROVISIONING_DESIGNER
After granting the privileges, retry the out-of-place patching operation.