Had a great few days in Raleigh presenting and attending at the East Coast Oracle Users Group! We ran out of time in the hand on lab, so if you’re looking for the metric and monitoring labs, you can find those in this post. I’ve added my slides to slide share below
In the days past, everybody in EM used to end up with Super Administrator privileges due to lack of granularity in permissions. Not any more! Now we have more permissions than you know what to do with, but that’s another blog topic all together!
Here’s a quick list of activities that one might still need Super Administrator for – note these are all considered EM administration activities and most are accessed through the Setup menu:
- Create Administrators – can get around this by using LDAP integration and auto-provisioning
- Access EM Audit
- Access Security Console
- License Management
- Connector Setup
- Data Exchange
- Add/Edit Registration Password
- Configure Notification Mail Server
- Configure Notification Mail Customization
- Configure SNMP
- Configure Global Repeat Notifications
- Setup Privilege Delegation Templates (sudo/pbrun)
- Decommission Agent (bug fix 19430853 will allow users with Full privileges to perform again)
If your user is not responsible for users and security, and doesn’t get paged when EM stops working, then they have no business with Super Administrator privileges or SYSMAN.
Unless you’re in a cave asleep, you’ve seen the recent Oracle PSUs and patches that were released in January. This has many of my customers patching their agents, and a few have noticed a problem with some previously applied patches. Thanks to Brian for pointing this out!
If you applied the recommended Java patches sometime last year (18502187, 18721761), and you go to apply the 188.8.131.52.5 agent patch 20282974 (or an earlier bundle), the analyze step will fail as the Java patches are included in the agent bundle, but for some reason it can’t “ignore” them. Checking the detailed results of the failed Analyze job will show which step failed. In this specific case, the step PrerequisiteCheckForApply will be marked Failed and the error will look like this:
To remedy this with EM, you can create a patch plan with the Java patches (18502187, 18721761) and select Rollback in the Deployment Options. This will run the rollback for these patches.
Once rolled back, re-analyze your 184.108.40.206.5 patch plan and it should be successful and allow you to deploy!
When you update Agents, keep these things in mind:
- Be sure to update any Agent clones/gold images with the newly updated patch and plug-ins if they’ve been upgraded or patched.
- If you staged patches for auto-deployment in the OMS $ORACLE_HOME/install/oneoffs, remove the old patches and you should just need the 220.127.116.11.5 patch now, or any current Discovery patches.
- Update your procedural documents to reflect the current patches required.
For more details on how to patch your agent using EM, see the Administrator’s guide.