Oracle Database B10772-01 Administrator's Manual page 325

3.
4.
Task 2: Configure User-Schema Mappings for the Enterprise Domain
Use Enterprise Security Manager (see
page 2-16) to configure user-schema mappings for the OracleDefaultDomain by
using the following steps:
1.
2.
3.
4.
For more information about this task, see
Schema Mappings"
Configuring Enterprise User Security Objects in the Database and the Directory
Alternatively, you can grant the CREATE SESSION privilege to a global role,
which you grant to specific users through an
Create global roles for the database to hold relevant privileges. The following
syntax examples create the emprole and custrole global roles:
SQL> CREATE ROLE emprole IDENTIFIED GLOBALLY;
SQL> CREATE ROLE custrole IDENTIFIED GLOBALLY;
Global roles are associated with enterprise roles, which will be created later, and
then are allocated to enterprise users.
Grant privileges to the new global roles that were created in Step 3. The
following syntax example grants the SELECT privilege to emprole and
custrole global roles on the products table:
SQL> GRANT select ON products TO custrole, emprole;
Oracle Database SQL Reference for information about the
See Also:
syntax used for these steps.
Select the OracleDefaultDomain in the navigator pane.
Choose the Database Schema Mapping tabbed window and click Add....
In the Add Database Schema Mappings dialog box enter the appropriate DN
and the shared schema name that you created in Task 1 on page 12-12. Refer to
the Enterprise Security Manager online help for information about how to enter
these values.
Choose OK. The new user-schema mappings apply to all databases in the
enterprise domain.
on page 13-20.
You also can create user-schema mappings under a
Note:
database in an enterprise domain which only apply to that
database.
Enterprise User Security Configuration Tasks and Troubleshooting 12-13
enterprise
"Starting Enterprise Security Manager"
"Managing Enterprise Domain Database
role. See Step 3.
on