Oracle Database B10772-01 Administrator's Manual page 296

Introduction to Enterprise User Security
The entries described in the following sections can only reside within a
Oracle
Enterprise Roles
Enterprise users can be assigned an
privileges on databases. These enterprise roles are stored and managed in a
directory.
the OracleDefaultDomain.
An enterprise role can consist of one or many
defined in a specific database. A global role includes privileges contained in a
database, but the global role is managed in a directory. An enterprise role is thus a
container of global roles. For example, the enterprise role sales_manager could
contain the global role manage_leads with its privileges on the Customer
Relationship Management (CRM) database, and the bonus_approval global role
with its privileges on the Finance database.
11-12 Oracle Database Advanced Security Administrator's Guide
Context.
Figure 11–3 shows an example of an enterprise role called Manager under
enterprise role, which determines their access
global roles, each one of which is
Figure 11–2 illustrates this example.
realm