Create a custom RBAC role for Oracle cloning
A custom role can allow an Oracle administrator to clone an Oracle database or a pluggable database. Optionally you can provide a user access to a stored OS credential.
Use this role if you do not want users to have the Default Oracle Administrator role. Or, you do not want to give users access to all the available Oracle backup and recovery operations.
To create a custom role for Oracle cloning
- If you want the user to have access to the OS credential, this credential must already exist in NetBackup Credential Management.
See Add a credential to use for cloning an Oracle database.
Contact your NetBackup administrator for assistance.
- On the left, select Security > RBAC and click Add.
- Select Custom role and click Next.
- Provide a Role name and a description.
For example, include a description that the role allows users to perform a database cloning.
- Under Permissions, click Assign.
- On the Global tab, expand the NetBackup management section. Locate Jobs and select the View permission.
- On the Assets tab, locate Oracle assets. Select the following permissions.
Permission
Description
View
View Oracle databases and pluggable databases.
Restore
List recovery points for Oracle backups. Clone a database or pluggable database from a recovery point to the original host. Create an instant access database from a recovery point.
Restore to alternate location
(Optional) Clone a database or pluggable database from a recovery point to an alternate host.
- Click Assign.
- Under Workloads, click Assign.
- On the Oracle tab, choose from the following.
To apply the same permissions to all Oracle assets, select Apply selected permissions to all existing and future Oracle assets.
To make only specific Oracle assets available to users with this RBAC role, click Add. Then add each of the databases or pluggable databases that you want to add to the role.
- Click Assign.
- Under Users, click Assign. Then add the users that you want to have this RBAC role.
- When you are done configuring the role, click Add role.
- Configure the credential that users need to perform cloning and assign the role that you created in this procedure or another role to that credential.