Oracle Database B10772-01 Administrator's Manual page 326

Configuring Enterprise User Security Objects in the Database and the Directory
Task 3: Create Enterprise Roles in the Enterprise Domain
Use Enterprise Security Manager to create enterprise roles in the
OracleDefaultDomain by using the following steps:
1.
2.
3.
For more information about this task, see
page 13-27.
Task 4: Add Global Database Roles to Enterprise Roles
Use Enterprise Security Manager to add the global database roles that you created
in Task 1 on page 12-12 to the enterprise roles that you created in Task 3 by using
the following steps:
1.
2.
3.
12-14 Oracle Database Advanced Security Administrator's Guide
Right-click the OracleDefaultDomain in the navigator pane and choose Create
Enterprise Role....
The Create Enterprise Role dialog box appears with the appropriate realm
Oracle Context and enterprise domain displayed.
Enter the enterprise role name in the Role Name field.
Click OK. The new enterprise role is added under the domain in the navigator
pane.
Select the enterprise role name in the navigator pane.
Choose the Database Global Roles tabbed window and click Add....
In the Add Global Database Roles dialog box, select the database from which to
obtain global roles. A database logon window appears, prompting you for a
username and password to authenticate to the database so global roles can be
fetched. Typically, this is a DBA logon to the database.
You can use the database name that appears by default in
Note:
the Service field to connect to the database if your Oracle home has
LDAP as one of its selected Oracle Net naming methods, or if this
name appears as a TNS alias in your local Oracle Net configuration.
Otherwise, you can overwrite the Service field with any other TNS
alias (from the database tnsnames.ora file), or by using a connect
string in the following format:
<host>:<port>:<oracle_SID>
For example: machine111:1521:sales_db
"Creating a New Enterprise Role" on