Proxy permissions are created at the enterprise domain level. Proxy permissions allow an enterprise user to proxy a local database user, which means that the enterprise user can log in to the database as the local database user. You can grant proxy permissions to individual enterprise users or groups. Proxy permissions are especially useful for middle tier applications that operate across multiple databases as enterprise users.
To create a proxy permission for an enterprise domain:
Log in to Enterprise Manager Cloud Control, as an administrative user.
To navigate to your database, select Databases from the Targets menu.
Click the database name in the list that appears. The database page appears.
Under the Administration menu, select Security, Enterprise User Security. The Oracle Internet Directory Login page appears.
Enter the distinguished name (DN) of a directory user who can administer enterprise users in the User field. Enter the user password in the Password field. Click Login.
The Enterprise User Security page appears.
Click Manage Enterprise Domains.
The Manage Enterprise Domains page appears. This page lists the enterprise domains in the identity management realm.
Select the enterprise domain that you wish to configure. Click Configure.
The Configure Domain page appears.
Click the Proxy Permissions tab.
Click Create to create a new proxy permission.
The Create Proxy Permission page appears.
Enter the name for the proxy permission in the Name field. Click Continue.
The proxy permission appears in the Configure Domain page.
Next, you need to add target database users for the permission. You also need to grant the permission to enterprise users or groups, who can then proxy the target database users.
To add target database users for the proxy permission:
Select the proxy permission that you just created in the Configure Domain page. Click Edit.
The Edit Proxy Permissions page appears.
Ensure that the Target DB Users tab is selected. Click Add.
The Search and Select window appears. A list of all database users that have been altered to allow enterprise user proxy is displayed.
Select the target database users that you wish to proxy. Click Select.
You can now grant the proxy permission to enterprise users or groups.
To grant the proxy permission to an enterprise user or group:
Click the Grantees tab in the Edit Proxy Permission page.
Click Add.
The Select Users or Groups window appears.
Select the Search Base or the subtree that contains the user or group. Select User under View if you are granting the proxy permission to a user. Select Group under View, if you are granting the proxy permission to a group. Optionally, enter the common name of the user or group in the Name field. Click Go.
Select the Users or Groups to grant them the proxy permission. Click Select.
Click Continue in the Edit Proxy Permission page.
Click OK in the Configure Domain page.