User Roles and Privileges for Fleet Maintenance

This topic cover roles and privileges a user will need to have in order to be able to execute all Fleet Maintenance Operations.

The main role needed for Fleet Maintenance operations is: EM_PATCH_OPERATOR, to grant this role navigate from Enterprise Manager to Setup, select Security and finally select Administrators. Click on the Create button and provide a user name and password.

Table 17-1 User Roles and Privileges for Different Oracle Homes

Type of Oracle Home Role Target Privilege Resource Privilege
Single Instance Database EM_PATCH_OPERATOR Listener Privileges:
  • Configure Target
  • Blackout Target
Used for: Database and listener on the destination targets.
View Credential for normal and privileged credentials that will be used for operations.
Oracle Restart (HAS) EM_PATCH_OPERATOR Listener Privileges:
  • Configure Target
  • Blackout Target
Used for: Automatic storage management and Oracle High Availability Service targets running from the Oracle Home being patched.
View Credential for normal and privileged credentials that will be used for operations.
RAC Database EM_PATCH_OPERATOR Listener Privileges:
  • Configure Target
  • Blackout Target
Used for RAC database instances and listener targets running from the Oracle Home being patched.
View Credential for normal and privileged credentials that will be used for operations.
Grid Infrastructure Cluster EM_PATCH_OPERATOR Listener Privileges:
  • Configure Target
  • Blackout Target
Used for: Automatic Storage Management, Cluster and Oracle High Availability Service targets for the destination targets.
View Credential for normal and privileged credentials that will be used for operations.