Monitoring the Hosting Platform - Expert Consolidation in Oracle Database 12c - page 297

Figure 8-18. Managing resource privileges

Each resource type has one or more privilege grants available. To grant individual privileges you need to click
on the pencil icon in the “Manage Privilege Grants” column. If you don't see “N/A” in the column labeled then you
can further restrict a privilege to a target. For example, you could grant a backup administrator the ability to create a
backup configuration plus the right to do so on specific targets only.
Managing resource privileges on an individual user account is a lot of maintenance work, especially with a large
number of users to be created. It is easier to identify and group different tasks for users into roles. These roles can
subsequently be granted to users. The added benefit of using roles is that there is less change needed when a privilege
has to be revoked. Instead of changing each and every affected user account only a role has to change.

Review the Summary
The final step in the wizard shows you the summary of the last four screens you completed, and allows you to create
the user. If you notice that a setting has been omitted or anything else does not look right to you then use the “Back”
button to return to the view in question and correct or amend it.
If you are creating an account for an operational DBA, you should at least double-check the email address
entered and that his or her account is not a super-administrator account. The “Finish” button creates the new
administrator.

■ You are definitely encouraged to read more about security and Enterprise Manager Cloud control in the official
documentation. Especially look at Chapter 11 in the Enterprise Manager Cloud Control Administrator's Guide .

Note