Creating a Read Only Role for EM Console

Create a New User  to access em console.

create user oem identified by oem1  default tablespace users temporary tablespace temp;

Then that user have to have oem_monitor role.

grant create session, oem_monitor to oem;