To create an Oracle Site Guard administrator user with Enterprise Manager Cloud Control, perform the following steps:

1. Login to Enterprise Manager as a super user.

2. From the Setup menu, select Security, then select Administrators.

3. On the Administrators page, click Create.

4. In the Create Administrator wizard, do the following:

   1. On the Properties page:

      1. Specify the name SG_ADMIN.

      2. Provide a password.

      3. Provide a password confirmation.

   2. Make changes to any other fields as appropriate, and then click Next.

   3. On the Roles page, select the EM_SG_ADMINISTRATOR role in the Available Roles pane on the left, and click Move to add the role to the Selected Roles pane on the right.

   4. If you discovered targets at the Primary and Standby sites as another user, assign target level privileges to the Oracle Site Guard Administrator user on the Target Privileges page.

      1. Assign Full any Target or View any Target privileges in the section Privileges applicable to all Targets.

      2. Alternately, assign view or full privileges for every target in the Primary and Standby sites by setting Target Privileges.

   5. On the Review page, review the information you have provided for the user account, and click Finish.

To create an Oracle Site Guard administrator, run the following EMCLI command (located at OMS_HOME/bin/emcli):

emcli create_user
       -name="SG_ADMIN"
       -password=password
       -roles="EM_SG_ADMINISTRATOR;EM_USER;PUBLIC"

For more information about the create_user command, see create_user.

To create a generic system with Enterprise Manager Cloud Control Console, perform the following steps:

To create a generic system, run the following EMCLI command (located at OMS_HOME/bin/emcli):

emcli create_system
      -name="name"
      -type=generic_system
      -add_members="name1:type1;name2:type2;..."]...
      -timezone_region="actual_timezone_region"

See also create_system.

You can create named credentials using Enterprise Manager Cloud Control Console or EMCLI commands as explained in the following tasks.

To create named credentials with Enterprise Manager Cloud Control Console, perform the following steps:

1. Login to Enterprise Manager, preferably as an EM_CLOUD_ADMINISTRATOR user.

2. From the Setup menu, select Security, then select Named Credentials.

   The Named Credentials page is displayed.

3. Click Create.

   The Create Credential page is displayed.

4. In the General Properties section, specify the following:

   • Credential name: Enter a name for the credential.

   • Credential description: Enter the credential description.

   • Authenticating Target Type/ Credential type/ Scope: Enter the details as specified in the following table:

     Element	Host	Host (root-User Privileges)	Oracle Node Manager	Oracle WebLogic Server	Database Instance
     Authenticating Target Type	Host	Host	Oracle Weblogic Domain	Oracle WebLogic Server	Database Instance
     Credential type	Host Credentials	Host Credentials	Node Manager Credentials	Oracle WebLogic Credentials	Database Credentials
     Scope	Global	Global	Global	Global	Global

   • If these credentials are valid for all targets of the selected Authenticating Target Type, then set Scope to Global.

     If these credentials are only valid for a specific target, then set Scope to Target, and set the Target Type and Name fields to match the specific target.

5. In the Credential Properties section, specify the following:

   • UserName: Enter the user name.

   • Password: Enter the password.

   • Confirm Password: Enter the password again.

   • Run Privilege: Enter the details as specified in the following table:

     Element	Host	Host (Users with root privileges)	Oracle WebLogic Server	Database Instance
     Run Privilege	None	Select Sudo and enter values in the Run As fields	Oracle WebLogic Server Administration user credentials	Oracle Database SYS user credential

     Note:

     When the credentials used by Oracle Site Guard are configured to use sudo privileges to run as root, the sudo privilege must be configured as PDP (Privilege Delegation Provider) on all the agents running on the respective hosts of the target.

     PDP (Privilege Delegation Provider) can be configured from Enterprise Manager Cloud Control console. To configure PDP, go to Setup -> Security -> Privilege Delegation in the Enterprise Manager Cloud Control console.

6. If you are creating this credential as a user other than the Oracle Site Guard Administrator, you must grant view credential access to the Oracle Site Guard Administrator who will use the credential. To provide access, use the procedure in Granting Credential Privileges to Oracle Site Guard Administrator Users.

   To provide access, complete the following steps in the Access Control section.

   1. Click Add Grant. The Add Grant pop-up window appears.

   2. Select the rows for all the Oracle Site Guard Administrator users you created while creating Oracle Site Guard Administrator users. See Creating Oracle Site Guard Administrator Users.

   3. Click Select.

   4. Verify that the users you selected appear in the list of Grantees in the Access Control table.

7. Click Test and Save. To test credentials, select the appropriate Test Target Type from the drop-down menu for which you want to test the credentials, and specify Test Target Name.

To create named credentials with EMCLI:

emcli create_named_credential
         -cred_name="cred_name"
         -auth_target_type="auth_target_type"
         -cred_type="cred_type"
         -attributes="p1:v1;p2:v2"

colname:colvalue;colname:colvalue

You can create preferred credentials using Enterprise Manager Cloud Control Console and set them as target of a preferred credential with EMCLI Commands, as explained in the following tasks.

To create preferred credentials with the Enterprise Manager Cloud Control Console:

To set a named credential as a target preferred credential with EMCLI, use the set_preferred_credential command.

emcli set_preferred_credential 
        -set_name="set_name"
        -target_name="target_name"
        -target_type="type"
        -credential_name="name"
        [-credential_owner ="owner"]

Example:

emcli set_preferred_credential 
        -set_name="HostCredsNormal"
        -target_name="test.example.com"
        -target_type="host"
        -credential_name="MyHostCredentials"
        -credential_owner="Admin"

To grant credential privileges with Enterprise Manager Cloud Control Console: