Monitoring the Hosting Platform - Expert Consolidation in Oracle Database 12c - page 294

To simplify account management, individual privileges can be rolled up into roles. Just as with the database
roles can further be granted to other roles, creating nested hierarchies. There are predefined roles available
out-of-the-box, but you can of course create your own if you like. The management of users via roles greatly simplifies
the management of accounts since changes have to be made only once for the role, not for every individual account.
Oracle supplies almost 20 roles for typical tasks, such as patching, target management, deploying and plugins.
In addition to these roles you are free to define a set of privileges to the PUBLIC role. This role does not have any
privileges by default. But since it is always granted to new users you can define a basic set of privileges every user
should have to it, simplifying new user creation. The EM_USER is another essential role, similar to the database's
CONNECT role and it allows the user to connect to the Enterprise Manager system.
There are two types of target privileges: those applicable to all targets like “view any target” and those that apply
to a named managed target only. There are more than 20 target-specific privileges available that should make it very
easy to properly define access to targets. Luckily you do not need to refer to the documentation when reviewing what
a privilege can be used for. The Enterprise Manager console does a better job describing what a privilege allows you to
do as well as which other privileges are implicitly granted as well.
The final group of privileges refers to the various parts or modules of Enterprise Manager itself. Depending on
the plugins deployed—and therefore new functionality—available you can grant privileges for patching, compliance
monitoring, the job system and many more.
The creation of a new user follows the process shown in Figure 8-14 :
The following sections detail the user creation.
Figure 8-14. The five-step process to create a new administrator
Defining Basic User Properties
To begin the creation of a new administrator account, navigate to Setup ➤ Security ➤ Administrators.
Figure 8-15. The five-step process to create a new administrator