"Only super users can grant 'Full' permission to a role" Error Message is Returned when Attempting to Grant Deployment Procedure 'Launch' Privileges to a Role (Doc ID 2062019.1)

Last updated on OCTOBER 26, 2015

Applies to:

Enterprise Manager Base Platform - Version 12.1.0.4.0 to 12.1.0.5.0 [Release 12.1]
Information in this document applies to any platform.

Symptoms

When attempting to give a role 'Launch' privileges on a deployment procedure in Enterprise Manager 12.1.0.4, the following error is returned.

Error
Only super users can grant 'Full' permission to a role.

This can be demonstrated as follows:

Create a test role "TestProvRole" which has the following roles:

EM_PROVISIONING_DESIGNER
EM_PROVISIONING_OPERATOR

Attempt to add the 'Launch' privilege to the test role for a particular deployment procedure, for example:

  1. Log into the console as 'SYSMAN'
  2. Go to enterprise/provisioning & patching/database provisioning
  3. under "Deployment Procedures", highlight "Create Oracle Database"
  4. click on 'create like'
  5. Give the new deployment procedure a new name eg. "Create Oracle Database Copy"
  6. Go to enterprise/provisioning & patching/database provisioning
  7. under "Deployment Procedures", highlight "Create Oracle Database Copy"
  8. click on "edit permissions"
  9. click on "add"
  10. change "type" from "Administrators or Roles" to "Role"
  11. tick "TestProvRole" and click 'select'
  12. This returns to the screen "edit permissions:'Create Oracle Database Copy'"
  13. under the section "Manage Target Privilege Grants" select 'Launch'
  14. click on 'ok'
  15. the error "Only super users can grant 'Full' permission to a role" is generated.

Note* this error is returned regardless of whether a super-administrator or non-super administrator is logged into the console, and regardless of whether 'Full' or 'Launch' is selected 

This behaviour was not seen in previous releases of Enterprise Manager.

The emoms.log shows the following error:

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms