Role based access control in Oracle VM using Enterprise Manager 12c
- by Ronen Kofman
Enterprise Managers let’s you control any element in the
environment and define which users can do what on each element. We will show here
an example on how to set up RBAC (Role Base Access Control) for Oracle VM using
Enterprise Manager, this will be a very simplified explanation to help you
get going. For more comprehensive explanations
please refer to the Enterprise Manager User Guide.
OK, first some basic Enterprise Manager terminology:
Target – any element in the environment is a target –
server, pool, zone, VM etc.
Administrators – these are the Enterprise Manager users who
can login to the platform.
Roles – roles are privilege profiles which could be applied
to Administrators.
The first step will be to discover the virtual environment
and bring it in to Enterprise Manager, this process is simple and can be done
in two ways:
Work on your Oracle VM manager, set it up until you feel
comfortable and then register it in Enterprise Manager
Use Enterprise Manager and build it all from there.
In both cases we will be able to see the same picture from Oracle VM and from Enterprise Manager, any change made in one will be reflected in the other.
Oracle VM Manager:
Enterprise Manager:
Once you have your virtual environment set up in Enterprise
Manager it is time to start associating VMs with users (or Administrators as
they are called in Enterprise Manager). Enterprise Manager allows us to connect
to multiple different identity services and
import users from them but the simplest way to add Administrators is just go to
setup->security->Administrators and create new Administrator.
The creation wizard will walk you through several stages and
allow you to assign role(s) to your newly created Administrator, using roles can really shorten the process if done multiple
times. When you get to “Target Privileges” stage, scroll down to the bottom to the
“Target Privileges” section. In this section you can add targets (virtual machine
in our case) and define the type of privileges you would like to assign to the
Administrator which you are creating. In this example I chose one of the VMs
and granted full privileges to the newly created Administrator.
Administrator creation wizard "Target Privileges":
Now when you login as the newly created administrator, you
will only see the VM that was assign to you and will be able to have full
control over it.
That’s it, simple and straight forward, Enterprise Manager offers
many more things which I skipped here but the point is that if you need role based
access control Enterprise Manager can give it to you in a very easy way.
Oh and one more thing, virtualization management in Enterprise
Manager has no license cost, sweet.
