OEM Security

The idea behind external roles is to create a role in Enterprise Manager with the relevant privileges and have the name of the role match the name of a LDAP group. Users who are part of the LDAP group will automatically be granted privileges in the role once they log on to Enterprise Manager. (1)

Select any Available Roles you want to add to this Role

Select any Privileges you want to add to this Role

Select ant Target specific Privileges to add to this Role

Named Credentials

Preferred Credentials

Monitoring Credentials

Database Instance

Monitoring Database Credentials will often have a Target Username of DBSNMP. When the password for this user expires or changes you will need to update this credential for your Instance.

Host

Listener

OMS and Repository

Oracle Coherence Cache

Oracle Coherence Cluster

Oracle Coherence Node

Oracle HTTP Server

Oracle Management Service

Privilege Delegation

Registration Passwords

Audit Data

Bibliography & References

https://www.oracledistilled.com/grid-control/privileges-roles-and-users-in-oracle-enterprise-manager-11gr1-grid-control/(1) https://docs.oracle.com/en/enterprise-manager/cloud-control/enterprise-manager-cloud-control/13.3.1/emsec/security-features.html#GUID-974C5E6E-C381-4DCB-8963-BC2BE07485A6