Users and roles

Add users and give each one a role, and keep the credentials, groups, environments and owners of your databases.

Before you begin

• Open Settings › Security. You need View Security.
• To change a tab, you need its Manage permission, for example Manage users.

Add a user

1. On the Users tab, click Add User.

   

2. Type the Username as the user types it at sign-in.

3. For a local user, type a Password. For a directory user, turn on Sign in with LDAP.

4. Select a Role. For a directory user, you can turn on Role from the LDAP group: the group mappings then set the role.

5. Click Add User.

A user with the READONLY role cannot sign in. Scops also adds a directory user at the first sign-in, with READONLY if no group mapping matches.

Change or delete a user

1. Double-click the user.

2. Change the fields. To reset the password, type a new one, also while the account is locked.

3. For a directory user, turn off Role from the LDAP group to keep the role that you select.

4. Click Save.

To delete a user, select the user and click the bin. You cannot undo this. The sessions of the user end at once. You cannot delete the last local ADMIN user. If no one can sign in as admin, see Forgotten admin password.

Build a role

1. On the Roles tab, click Add Role.

2. Type a Role name, for example DBA_TEAM.

3. Select the permissions. The box beside an area name selects the full area.

4. Click Add Role.

Then give the role to users, or to a directory group in LDAP.

Change or delete a role

1. On the Roles tab, select the role.

2. Change the permissions and click Save.

3. To delete the role, click the bin.

You can delete a role only when no user has it. A change reaches users at their next sign-in, or at once if you sign out all users.

Credentials

A credential is an account that Scops signs in with. You select it by name when you add a database.

1. On the Credentials tab, click Add Credential.

2. Select the Type: Database, or Operating system (SSH) to read the OS logs.

3. Type the Credential name, the DB user or OS user, and the Password. The default SSH port is 22.

4. Click Add Credential.

• A database account needs the grants. An SSH account is oracle or grid, not root.
• With Reveal passwords, the eye button shows a saved password for 30 seconds. Scops logs your name.

Groups, environments and owners

1. On the tab, click Add Group, Add Environment or Add Owner.

2. Fill in the fields, then click the same button in the dialog.

A lower List position shows first. With Needs attention on, the databases of the environment can go red on the Databases page.

A new installation has the groups Transactional (OLTP), Data Warehouse and Reporting, and the environments Production, Test and Data Guard. Test has Needs attention off.

How access works

• Each user has one role. A user sees only the pages and buttons that the role allows.
• Each user sees all databases. Groups and environments do not limit access.
• ADMIN has all permissions. You cannot change or delete it.

Roles of a new installation

Setup writes these roles one time. An upgrade does not change a role, so your changes stay.

Related

Updated November 5, 2026