I don’t really like what Oracle did with BAM user/roles and authentication.

I think they took Microsoft tables and just slapped them into Oracle (having to put quotes around tables and columns). I assume this process will change in the upcoming releases, but here is a quick SQL statement you can use to get a look at your users and their roles as BAM understands them:

SELECT iu."SysIterName" username, iur."RoleName" userrole
FROM orabam."SysIterUser" iu, orabam."SysIterRoleUserMapping" iur
WHERE iur."UserID" = iu."SysIterID"
ORDER BY iu."SysIterName"