Monitor DBA Profiles without changing the passwords
There are two DBA profiles that our auditors have recommended we implement the password settings according to our organization's security policies.
According to MOS Doc ID 420001.1,
AD_PATCH_MONITOR_PROFILE- Parameters attached to this profile must be left as default
Reasons: this is a seeded profile required performing patching procedures.
Implication: Apps user account can be locked out during patching if these parameters are adjusted
EM_OAM_MONITOR_PROFILE-Parameters attached to this profile must be left as default as this will affect the Oracle Monitory Tool. Although this tool is not mandatory to have the application running, it is advisable to be able to have Enterprise Manager running to monitor the health of the servers.