I'm just curious if OEM explicitly checks for that role or whether it just needs certain access that this role allows. If the latter, then you might consider tracing a "typical" OEM session and then creating a role that allows access to just those elements. hth Connor -- Connor McDonald =========================== email: connor_mcdonald@xxxxxxxxx web: http://www.oracledba.co.uk "Semper in excremento, sole profundum qui variat"