Creating the Enterprise Manager Administrator to Manage Protected Database Operations

The Enterprise Manager administrator is an Enterprise Manager user that has the roles and privileges required to manage the data protection of one or more protected databases.

To create an Enterprise Manager administrator named protdb_admin:

  1. Log in to Cloud Control as an Enterprise Manager administrator who has the privileges to create other Enterprise Manager administrator accounts.

  2. From the Setup menu, select Security, and then select Administrators.

    The Administrators page is displayed.

  3. Click Create to display the Create Administrator: Properties page.

  4. Enter the credentials of the new Enterprise Manager administrator in the Name and Password fields. In this example, the name of the Enterprise Manager administrator is protdb_admin.

    In the Password Profile field, DEFAULT is selected. This value need not be modified. Providing information in the other fields on this page is optional.

  5. Click Next to display the Create Administrator protdb_admin: Roles page.

  6. Move the EM_USER role from the Available Roles list to the Selected Roles list and click Next.

    The Create Administrator protdb_admin: Target Privileges page is displayed.

  7. In the Target Privileges section, add privileges for all the targets that the new Enterprise Manager administrator will require access to. The required target privileges for an administrator that will manage protected database operations are as follows:

    • Targets corresponding to the protected databases that will be managed by this Enterprise Manager administrator user: Full privilege.

    • Targets corresponding to the hosts of each protected database that will be managed by this Enterprise Manager administrator: Full privilege.

    • Target corresponding to the Recovery Appliance to which the protected databases will be sending backups: View privilege.

    To add privileges for these targets:

    1. Click Add to display the Search and Add: Targets dialog.

    2. Search for the target(s) using the Target Name, Target Type, and On Host filters. Choose the target(s) and click Select.

      The selected targets are added to the list of targets in the Target Privileges section.

    3. Privileges can be specified for all the targets in the list via the Grant to All button or by selecting individual targets and clicking the Grant to Selected button. Either way, in the subsequent Assign Privileges screen, select the appropriate privilege for the targets as specified above; then click Continue to return to the Target Privileges page.

    Repeat these steps as needed for each target that will be managed by the new Enterprise Manager user.

  8. Click Next to display the Create Administrator protdb_admin: EM Resource Privileges page.

  9. Perform the following steps:

    • For the Job System privilege, click the Edit icon in the Manage Privilege Grants column. In the Resource Type Privileges section, select Create and then click Continue.

    • To provide the EM administrator user access to existing credentials, click the Edit icon in the Named Credential column. In the Resource Privileges section, click Add and select the named credentials that must be associated with this Enterprise Manager administrator.

  10. Click Review to display the Create Administrator protdb_admin: Review page.

    The properties, roles, and privileges for this new user are displayed. Review the settings and click Back to modify settings.

  11. Click Finish to create the Enterprise Manager administrator.