[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 559
  • Last Modified:

users and roles

I want to create a user / role that will allow people to logon to this user e.g. isdb.  The user will have the Connect and Resource.  privs, but I want the user to be able to connect to Enterprise manager, which it currently can't do.

If create a new role what shall i add to this for the user to access Oracle's enterprise manager?
0
mmatharu
Asked:
mmatharu
4 Solutions
 
mmatharuAuthor Commented:
Also, I dont want to create public synonyms, but with the role, i want the user, to have access to all the tables in other schema's, but not have to create the synonyms, just specify this in the role, is that possible?
0
 
adrian_angCommented:
Taken from the Oracle Enterprise Manager Help:

Beginning with Oracle 8.0.6 databases and higher, the OEM_MONITOR role is created by the Oracle database creation scripts. This role permits access to database functionality within Enterprise Manager (running events against a database (tablespace full, buffer cache hit ratio) or browsing through the objects in a database via the Console Navigator tree). These types of functionality require database credentials on which to perform these operations. Rather than granting the powerful DBA role to the database credentials, many administrators prefer to provide only the necessary privileges required to do these operations. Granting the OEM_MONITOR role to the database credentials, ensures that the user has the minimum sufficient privileges required for these operations.  For database users on 7.3.x databases, you need to define the OEM_MONITOR role manually.

If your database is 7.3.x search in the help of OEM, ,if you cannot find it , post .

0
 
Mehul ShahIT consultantCommented:
You can provide the privilege of SELECT ANY TABLE if the version is below 9i and for 9i and above you need to give SELECT ANY DICTIONARY privilege
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
riazpkCommented:
"I want the user to be able to connect to Enterprise manager"

Grant SELECT_CATALOG_ROLE role to those users.

"Also, I dont want to create public synonyms, but with the role, i want the user, to have access to all the tables in other schema's, but not have to create the synonyms, just specify this in the role, is that possible?"

Agree with  MehulS78 for this question.

"You can provide the privilege of SELECT ANY TABLE if the version is below 9i and for 9i and above you need to give SELECT ANY DICTIONARY privilege"
0
 
oleggoldCommented:
I agree with the previous comments and may add to them a little to simplify what You've to do:
1.create user You 'll connect to oem,e.g. OEM_usr:
create user OEM_usr identified by Your_pass ;
grant  create session,resourse to OEM_usr;
2.create Role to be granted to that user,eg. OEM_role
grant OEM_role  to OEM_usr;
3.grant SELECT ANY DICTIONARY, SELECT ANY TABLE,SELECT_CATALOG_ROLE to OEM_role;

4.to be absolutely sure that the user/role " but not have to create the synonyms":
Revoke create synonym,create any synonym from OEM_role;
Revoke create synonym,create any synonym from OEM_usr;
0
 
riazpkCommented:
where r u ?
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now