For details on the property sheet command
buttons, see Property Sheets on page 7-14 .
The Create Role property sheet contains the following pages.
â–
General (Basic UI mode)
â–
Roles/Privileges (See Create User Property Sheet: Roles/Privileges Page on page
9-8)
9-16Oracle Enterprise Manager Administrator’s Guide
Roles Folder
â–
Object Privileges (See Create User Property Sheet: Object Privileges Page on page
9-9)
Create Role Property Sheet: General Page
The General page allows you to enter the following information:
Role
Name of the role to be created. Enter the name of the new role.
Authentication
Method used to enable the role.
None specifies that a user granted the role may enable it without specifying a
password.
Global: Specifies that a user granted the role may enable it globally amongst
multiple databases. The global authorization option is only available with Oracle 8
databases.
External: Specifies that the operating system or an external security utility to verify the role.
Password: Secifies that a password is required to enable the role. Enter the
password in the Enter Password entry field. Enter the password again in the
Confirm Password entry field to verify the new password.
Create Like Role
If you want to create a new role with the similar parameters as an existing role:
1.
Select the desired role from the navigator.
2.
Choose Create Like menu option from the Role menu.
3.
Modify the property sheet as desired.
4.
Click the Create button.
You can also perform this operation by selecting a role in the navigator and
choosing the Create Like menu option from the context-sensitive menu. You must
enter the name of the new role and enter a new password if the Password button is
selected.
This property sheet is identical to the Create Role property sheet. Refer to Creating a
User on page 9-6 for information about Create Role property sheet.
Managing Database Security
9-17
Roles Folder
Modifying a Role
To alter the property sheet information for an existing role:
1.
Select the role to be altered from the navigator. The property sheet for that role
appears.
2.
Modify the property sheet as desired.
3.
Click the Apply Button.
You can also modify a role by selecting a role from the Role multi-column list with
the right mouse button to call up the context-sensitive menu. Select Quick Edit to
bring up the Quick Edit property sheet appears.
The Role property sheet is identical to the Create Role property sheet except that
the name is read-only. Refer to Creating a User on page 9-6 for information about the
property sheet.
If you want to add privileges or roles to multiple roles, use the Add Privileges to
Roles menu item. See Adding Privileges or Roles to Roles on page 9-18.
If you alter an object, such as a user named DAVE or a role named CLERK, in any
location of the navigator, all instances of the object in the tree list are changed.
Removing a Role
To remove a role that is no longer needed:
1.
Select a role in the navigator.
2.
Choose Remove from the Role menu. The Remove Role alert box appears.
3.
Click Yes to remove the role.
You can also remove a role by selecting the role to be dropped from the Roles
object type folder in the navigator and choosing Remove from the context-sensitive
menu.
Adding Privileges or Roles to Roles
To assign subroles and grant individual privileges to multiple roles, or add roles
and grant privileges to multiple roles:
1.
Choose Add Privileges to Roles from the Role menu to display the Add
Privileges to Roles dialog box. A scrolling list of roles is displayed in the top
half of the dialog box.
2.
Select the roles in the list that you want to add privileges or roles to.
9-18Oracle Enterprise Manager Administrator’s Guide
Roles Folder
3.
Select System Privileges, Object Privileges, or Roles from the drop-down list.