Permissions

Find what each permission allows, area by area, as the role editor in Settings › Security shows it.

How permissions are named

  • View opens a page. Without it, the page and its links are hidden.
  • Manage lets you add, change and delete in one area. Also give the View permission of the page.
  • An action has its own permission, for example Kill sessions or Run Archiving.

All users see the Databases page. To make a role, see Build a role.

Databases

PermissionWhat it allows
Manage databasesAdd, edit and remove databases, their OS log settings and their monitoring switches. With Manage Settings, also Import & Export.

Security

PermissionWhat it allows
View SecurityOpen Settings › Security, read only.
View Audit TrailOpen the Audit Trail.
Manage usersAdd, edit and delete users. Map LDAP groups and check a user in LDAP. Sign out all users.
Manage rolesAdd, edit and delete roles.
Manage credentialsAdd, edit and delete credentials. Put their passwords in an export.
Reveal passwordsShow a stored password for 30 seconds. Manage the key and the recovery code in Passwords.
Manage groups, Manage environments, Manage ownersAdd, edit and delete groups, environments or owners.

Alerts & Radar

PermissionWhat it allows
View IncidentsOpen Incidents, and see the alert marks of a database.
View alerts on DatabasesSee Issues and the alert dialog on the Databases page.
Manage alertsAdd, edit and delete alerts in the Alert Catalog.
Clear alertsClear an active alert on Incidents.
View Policies, Manage PoliciesOpen Policies, and change policies and their databases.
View RadarOpen Radar on Incidents, and act on its findings.
Manage RadarChange the Radar Engine settings.

Reports

PermissionWhat it allows
View ReportsOpen and run Reports.
Manage reportsAdd, edit and delete reports, their categories and their mails.
View OverviewOpen the Overview.

Monitoring

PermissionWhat it allows
View Dashboard, View Live Activity, View Metrics, View Memory, View HealthCheck, View Sizing, View Services, View Summary, View Multi-Activity, View LicenseOpen the page with that name.
View InsightsOpen Insights. With Scops AI on, also the Ask field, AI Analysis and Explain on the Databases page.
View ExadataOpen Exadata, on an Exadata database.
View ObjectsOpen Objects. The page shows your source code.
Manage LicenseMark the Oracle products that you have a license for.

Sessions & scripts

PermissionWhat it allows
Kill sessionsKill a session on a database.
Trace sessionsStart a trace on a session from Live Activity.
Run SQL Tuning AdvisorRun the SQL Tuning Advisor. The database needs the Diagnostics and Tuning Pack switch.
Manage SQL plansSet a plan, and set up the automatic plan fix. The database needs the Diagnostics and Tuning Pack switch.
Run scriptsOpen Multi-SQL and run scripts.
Manage datafilesApply a change from Scops AI that adds or resizes a datafile.

Add-ons

PermissionWhat it allows
View Statistics, View Compression, View ArchivingOpen Statistics, Compression or Archiving.
Manage StatisticsChange statistics profiles and databases. Empty the queue.
Manage CompressionChange the databases, tables and profiles of Compression.
Manage ArchivingChange archiving pairs and tables, and create objects on an archive database.
Run Statistics, Run Compression, Run ArchivingStart and stop the add-on. Gather statistics, or re-sync archiving.

AI

PermissionWhat it allows
Use AIAsk Scops AI and use its answers on the pages.
View AI Trace, View AI KnowledgeOpen AI Trace or AI Knowledge in Settings.
Manage AI settingsChange Settings › AI. It also needs Manage Settings.

When Scops AI is off for all users, the AI pages and the Ask field are hidden.

Settings

PermissionWhat it allows
Manage SettingsOpen Settings and change most sections. See Every section.
Manage edition keyActivate or remove the license key in Settings › About.
View DocsOpen Docs and the help buttons on the pages.

After an upgrade, every role has View Docs. On a new installation, only ADMIN has it, as with every permission.

Updated November 2, 2026