Tags

,

Create a Privilege Delegation Template

The Privilege Delegation mechanism in OEM 12c allows you to execute root commands during deployment and patching through a centrally managed privilege template.

To create a template through the Manage Privilege Delegation Setting Templates page.  This page is accessible through a link at the bottom of the Manage Privilege Delegations page, available through Setup | Security | Privilege Delegation.

Click on Manage Privilege Delegation Templates at the bottom-left of the page, as shown below.

 

 Image

 

On that page, press the Go button to a new Sudo template

Image

Enter sudo string shown, substituting the location of your sodu binary.  Do not embellish the string shown. The example on the configuration page is incorrect and there are misleading (wrong) notes on Oracle Support.  Just use the simple string

/usr/bin/sudo -u %RUNAS% %COMMAND%

Image

 

Apply the Delegation Template

Return to the Manage Privilege Delegation Setting Templates page to apply the template to your hosts

Image

 

Select the hosts to update

Image

Press the Go button and click-down the Details to verify the settings

Image