Corporation Network Router User Manual

Introduction to Enterprise User Security
11-12 Oracle Database Advanced Security Administrator's Guide
The entries described in the following sections can only reside within a realm
Oracle Context.
Enterprise Roles
Enterprise users can be assigned an enterprise role, which determines their access
privileges on databases. These enterprise roles are stored and managed in a
directory. Figure 11–3 shows an example of an enterprise role called Manager under
the OracleDefaultDomain.
An enterprise role can consist of one or many global roles, each one of which is
defined in a specific database. A global role includes privileges contained in a
database, but the global role is managed in a directory. An enterprise role is thus a
container of global roles. For example, the enterprise role sales_manager could
contain the global role manage_leads with its privileges on the Customer
Relationship Management (CRM) database, and the bonus_approval global role
with its privileges on the Finance database. Figure 11–2 illustrates this example.