An enterprise domain within an identity management realm can contain multiple enterprise roles. An enterprise role is a set of Oracle role-based authorizations across one or more databases in an enterprise domain.
Enterprise roles allow you to group global roles from different databases that are part of the enterprise domain. Enterprise roles can be assigned to enterprise users.
To create enterprise roles:
Log in to Enterprise Manager Cloud Control, as an administrative user.
To navigate to your database, select Databases from the Targets menu.
Click the database name in the list that appears. The database page appears.
Under the Administration menu, select Security, Enterprise User Security. The Oracle Internet Directory Login page appears.
Enter the distinguished name (DN) of a directory user who can administer enterprise users in the User field. Enter the user password in the Password field. Click Login.
The Enterprise User Security page appears.
Click Manage Enterprise Domains.
The Manage Enterprise Domains page appears. This page lists the enterprise domains in the identity management realm.
Select the enterprise domain that you wish to configure. Click Configure.
The Configure Domain page appears.
Click the Enterprise Roles tab.
Click Create to create a new enterprise role.
The Create Enterprise Role page appears.
Enter a name for the enterprise role in the Name field. Click Continue.
The new role is displayed in the Configure Domain page.
Next, you can configure the enterprise role that you just created. Configuring an enterprise role includes adding database global roles to the enterprise role and assigning the enterprise role to enterprise users or groups.
To add database global roles to the enterprise role:
Select the enterprise role that you just created in the Configure Domain page. Click Edit.
The Edit Enterprise Role page is displayed.
Make sure that the DB Global Roles tab is selected. Click Add to add global roles from databases that are part of the enterprise domain.
The Search and Select Database Global Roles page appears.
Select the Database that contains the global roles you wish to add. Log in to the selected database by supplying a User Name and Password. Click Go.
Select the global roles to add. Click Select.
The selected roles appear in the Edit Enterprise Role page.
You can now assign the enterprise role to enterprise users or groups.
To assign the enterprise role to enterprise users or groups:
Click the Grantees tab in the Edit Enterprise Role page.
Click Add.
The Select Users or Groups page is displayed.
Select the Search Base or the subtree that contains the user or group. Select User under View if you are granting the enterprise role to a user. Select Group under View, if you are granting the role to a group. Optionally, enter the common name of the user or group in the Name field. Click Go.
Select the users or groups to be granted the enterprise role. Click Select.
Click Continue in the Edit Enterprise Role page.
Click OK in the Configure Domain page.