Administering User Accounts and Security

Overview

    Purpose

    In this tutorial you learn how to use Enterprise Manager Express to administer user accounts and roles, named groups of related system and object privileges.

    Time to Complete

    Approximately 1 hour

    Introduction

    For users to access your database, you must create user accounts and grant appropriate database access privileges to those accounts. A user account is identified by a user name and defines the attributes of the user.

    Software Requirements

    The following is a list of software requirements:

    • Oracle Database 12c

    Prerequisites

    Before starting this tutorial, you should have:

    • Installed Oracle Database 12c
    • Configured the HTTP port for Enterprise Manager Express

Administering Roles

    Roles are named groups of related system and object privileges. You can create roles and then grant them to users and to other roles.

    Viewing Roles

      Log in to Enterprise Manager Database Express as the SYSTEM user.

      Select Roles in the Security menu.

      The Roles page is displayed.

      To view the privileges granted to a role, select a role of interest. The CONNECT role is selected in this example. Click View Details in the Actions menu.

      The Privileges & Roles tab shows the system privileges and roles granted to the CONNECT role. Click the Object Privileges tab.

      The Object Privileges tab shows the object privileges granted to the role. There are no object privileges granted to the CONNECT role.

      Click ORCL to return to the Database Home page.

    Creating a Role

      Select Roles in the Security menu.

      Click Create Role.

      Enter a name such as appdev for the role. Click the right arrow.

      Select the privileges to grant to the role by selecting the privilege name and clicking the right arrow. Select CREATE PROCEDURE, CREATE SEQUENCE, CREATE SYNONYM, CREATE TABLE, CREATE TRIGGER, and CREATE VIEW.

      Select "With Admin" for each privilege. Click OK.

      Click OK on the Confirmation page.

      The new APPDEV role is displayed on the Roles page.

      Click ORCL to return to the Database Home page.

    Modifying a Role

      Select Roles in the Security menu.

      Select the role to modify, the APPDEV role. Select "Alter Privileges & Roles" in the Actions menu.

      Select the AQ_ADMINISTRATOR_ROLE and AQ_USER_ROLE roles. Click the right arrow.

      Select "With Admin" for the two additional roles. Click OK.

      Click OK on the Confirmation page.

      The Roles page is displayed again.

      Click ORCL to return to the Database Home page.

Administering Database User Accounts

    When you create a user account, you must assign a user name, a password, and default tablespaces for the account. You must also grant the appropriate system privileges, object privileges, and roles to the user account. If the user will create database objects, assign a space usage quota for each affected tablespace.

    Viewing User Accounts

      Select Users in the Security menu.

      The Users page is displayed.

      To view additional information about the user, select the user. Expand the Actions menu and select View Details.

      Privileges and roles granted to the user are displayed. 

      Click ORCL to return to the Database Home page.

    Creating a User Account

      Select Users in the Security menu.

      Click Create User on the Users page.

      Enter a user name such as appuser in the Name field. Enter a password in the Password field and in the Confirm Password field. Accept the Profile default value of DEFAULT. Click the right arrow.

      Select the APPTS tablespace or another tablespace of your choice. Accept the Temporary Tablespace default of TEMP. Click the right arrow.

      Select the APPDEV role and select With Admin. Click OK.

      Click OK on the Confirmation page.

      The new APPUSER user is listed on the Users page.

      Click ORCL to return to the Database Home page.

    Unlocking a User Account

      Select Users in the Security menu.

      Select the HR user. Select Alter Account in the Actions menu.

      Deselect Account Locked. Click OK.

      Click OK on the Confirmation page.

      The Account Status for the HR user indicates the user is unlocked.

Summary

    In this tutorial, you have learned how to:

    • Create and view roles
    • Create and view user accounts
    • Unlock user accoutns

    Resources

    • Oracle Database 2 Day DBA 12c Release 1 (12.1)

    Credits

    • Lead Curriculum Developer: Donna Keesling
    • Other Contributors: Bert Rich

To help navigate this Oracle by Example, note the following:

Hiding Header Buttons:
Click the Title to hide the buttons in the header. To show the buttons again, simply click the Title again.
Topic List Button:
A list of all the topics. Click one of the topics to navigate to that section.
Expand/Collapse All Topics:
To show/hide all the detail for all the sections. By default, all topics are collapsed
Show/Hide All Images:
To show/hide all the screenshots. By default, all images are displayed.
Print:
To print the content. The content currently displayed or hidden will be printed.

To navigate to a particular section in this tutorial, select the topic from the list.