Oracle Database Advanced Security 10g Release 1, Administrator'S Manual

Page: 325 / 518

Configuring Enterprise User Security Objects in the Database and the Directory
Enterprise User Security Configuration Tasks and Troubleshooting 12-13
Alternatively, you can grant the
CREATE SESSION
privilege to a global role,
which you grant to specific users through an enterprise role . See Step 3.
3.
Create global roles for the database to hold relevant privileges. The following
syntax examples create the
emprole
and
custrole
global roles:
SQL> CREATE ROLE emprole IDENTIFIED GLOBALLY;
SQL> CREATE ROLE custrole IDENTIFIED GLOBALLY;
Global roles are associated with enterprise roles, which will be created later, and
then are allocated to enterprise users.
4.
Grant privileges to the new global roles that were created in Step 3. The
following syntax example grants the
SELECT
privilege to
emprole
and
custrole
global roles on the products table:
SQL> GRANT select ON products TO custrole, emprole;
Task 2: Configure User-Schema Mappings for the Enterprise Domain
Use Enterprise Security Manager (see "Starting Enterprise Security Manager" on
page 2-16) to configure user-schema mappings for the OracleDefaultDomain by
using the following steps:
1.
Select the OracleDefaultDomain in the navigator pane.
2.
Choose the Database Schema Mapping tabbed window and click Add....
3.
In the Add Database Schema Mappings dialog box enter the appropriate DN
and the shared schema name that you created in Task 1 on page 12-12. Refer to
the Enterprise Security Manager online help for information about how to enter
these values.
4.
Choose OK. The new user-schema mappings apply to all databases in the
enterprise domain.
For more information about this task, see "Managing Enterprise Domain Database
Schema Mappings" on page 13-20.
See Also:
Oracle Database SQL Reference for information about the
syntax used for these steps.
Note:
You also can create user-schema mappings under a
database in an enterprise domain which only apply to that
database.