We would like to create an EM user or role for Linux administrators that restricts Linux administrators to the deployment procedures for Linux patching; Patch Linux Hosts and Linux RPM Repository server setup. For example, our OEM 12c R2 environment is used by many groups, i.e. DBAs, Linux Sys Admins, Oracle VM Sys Admins, Apps Admins, Operations (NOC), etc... At this point in time we need to create a EM user or an EM role for our EM Linux admins users that is restricted/limited to the deployment procedures for Linux patching, i.e. 1) Patch Linux Hosts and 2) Linux RPM Repository server setup.
We have done extensive testing with all of the roles and have been unable to find a combination of roles along with operator access to each Linux target that only enables access to the deployment procedures for Linux patching, Patch Linux Hosts and Linux RPM Repository server setup. For example, to enable the Linux RPM Repository server setup deployment procedure we must enable Super Administrator. We would like to avoid Super Administrator for the Linux administrator group. We have also done extensive testing with User Defined Deployment Procedures, without any luck.