How to Map SOA monitor role to weblogic Global Role
If you are getting below error for your composite it might be due to the mapping issue of soa monitor to global role.
Error:
Unable to retrieve composite details.
The composite is not available. This could happen because either the composite has been undeployed or soa-infra has not yet loaded this composite.
Collapse Hide Additional Trace Information Hide Additional Trace Information
oracle.sysman.emSDK.app.exception.EMSystemException at
oracle.sysman.emai.model.sca.composite.core.impl.EMCompositeModel.handleError(EMCompositeModel.java:72) at
oracle.sysman.emai.model.sca.share.composite.CompositeCoreModel.initialize(CompositeCoreModel.java:116) at
oracle.sysman.emai.model.sca.composite.core.impl.CompositeModel.initialize(CompositeModel.java:46) at
oracle.sysman.emai.model.sca.EMEntityModel._initializeEntityData(EMEntityModel.java:28) at
oracle.sysman.emai.model.sca.common.SCAEntityObject.initializeSCAData(SCAEntityObject.java:124) at
oracle.sysman.emai.model.sca.composite.core.impl.EMCompositeModel.initializeSCAData(EMCompositeModel.java:31) at oracle.sysman.emai.model.sca.SCAObject.initializeData(SCAObject.java:74) at
oracle.sysman.core.model.util.ModelUtil$EMObjectResetter.initOrResetEMObject(ModelUtil.java:319) at
oracle.sysman.core.model.util.ModelUtil$EMObjectResetter.access$000(ModelUtil.java:280) at
You can follow below steps to fix the issue:
1. Log in to Oracle Enterprise Manager Fusion Middleware Control Console as a user with the Admin role.
2. right click on SOA/soa-infra(soa_server1) on the left panel and select Security => Application Roles.
Application Roles Path in EM Console
3. click on the “play button” to select “Role Name”. A list will appear and you select SOAMonitor. The page “Application Roles > Edit Application Role” appears.
4. Here click on Add role option and select role Type as Group. Click on play button
Edit/Add Application Role
5. Select Monitors and Operators as the groups and click move to the selected area
7. On Application Roles > Edit Application Role, click ok to save the changes.
Usually this solves the issue but sometimes a bounce of soa-server makes the changes take effect.
More TIPS:
You can also add a user to have the same mapping and privileges like below screenshots
By doing like above you can add a user the privileges or a group privileges to view and monitor/operate the composite instances to avoid the error.
Even using WLST you can add roles to a particular user so that the user will have access to monitor SOA role.
Here we are giving SOA monitor role to weblogic readonly user:
grantAppRole(appStripe=”soa-infra”, appRoleName=”SOAMonitor”, principalClass=”weblogic.security.principal.WLSUserImpl”, principalName=”weblogic_read_only”);
In case of any ©Copyright or missing credits issue please check CopyRights page for faster resolutions.
once i select add button i am searching for a user but the user is not in the list…but the user is present in weblogic console..(i am using 11.1.1.7 i think you are also using same version)
Hi Rajesh,
I hope you have selected the type as User before searching. I have added a section for adding a particular user also. Have a look at it. If you are still facing the issue then please paste the error messages and logs you are seeing in backend.
Hi, thank you.
It work for my.
Glad it helped!
I just upgraded one of our environments from Fusion Middleware 11.1.1.5 to 11.1.1.7, and amongst other things the upgrade wiped out the majority of my custom roles and policies. Your blog post helped me to root cause the issue,so thank you for taking the time to document the solution!