10 Creating Database Accounts

This section contains the following topics:

• About Database Accounts

• Creating Database Accounts

• Setting Up TMS Security for Users

• Resetting the Password

• Removing a Database Account

You must have the LSH System Admin functional role to do all the tasks described in this section.

About Database Accounts

You must create an Oracle Life Sciences Data Hub (Oracle LSH) database account for users who need access to the Oracle LSH database through an external system or remote database, including:

• Database Accounts for Use in Definition

• Database Accounts for Message-Based Submissions

Database Accounts for Use in Definition

You must create an Oracle Life Sciences Data Hub (Oracle LSH) database account for Definers who need to use an integrated development environment (IDE) that requires logging back into the Oracle LSH database to view Oracle LSH data. These IDEs include:

• SAS in Connected mode (read-only access)

• Oracle Reports (read-only access)

• SQL*Plus (read and write access)

• Informatica (read-only access)

• Oracle Business Intelligence (read-only access)

When the Definer launches the IDE, he or she is typically prompted to enter an Oracle LSH database account username and password.

Oracle LSH database accounts maintain a mapping between a Definer's regular Oracle LSH application user account and his or her database account. If the Definer enters the same database account information that is mapped to his or her Oracle LSH user account, the system grants access to the data required by the Program the Definer is working on.

Note:

A database account is not required to use Oracle Business Intelligence Enterprise Edition or Oracle Discoverer Plus to create visualizations of Oracle LSH data.

Database Accounts for Message-Based Submissions

It is possible to trigger the execution of a job in Oracle LSH by sending an XML message from an external system on a remote database. To set this up, do the following:

• Create an Oracle LSH user account and database account

• Create a database link on the remote database to the Oracle LSH database using the Oracle LSH database account ID and password

• In the XML messages, embed the Oracle LSH user account ID in the appropriate place in the XML message. See "XML Message Requirements" in the Oracle Life Sciences Data Hub Application Developer's Guide for information on the required XML schema for these messages.

  An Oracle LSH API called CDR_EXE_MSG_API with the procedure Submit Message is available for use in enqueuing messages. See "Using Message-Triggered Submission from External Systems" in the Oracle Life Sciences Data Hub Application Developer's Guide for further information.

  For general information about enqueuing messages, see the Oracle Streams Advanced Queuing User's Guide and Reference at http://download-west.oracle.com/docs/cd/B19306_01/server.102/b14257.pdf (part number B14257-01). See "Finding Documentation on Oracle Technology Network".

Creating Database Accounts

To create a database account for a Definer, do the following:

1. Click the Database Account subtab under the Administration tab. The Database Account screen opens.

2. Click Create. The Create Database Account screen opens.

3. Enter values in the following fields:

   • User Name. Click the Search icon and enter search criteria for the Oracle LSH user for whom you are creating a database account.

   • Database Account Name. Enter a username for the database account. The text you enter is stored in uppercase.

   • Password. Enter a password of 8 characters or more for the Definer to use with the database account.

   • Confirm Password. Reenter the password.

     Note:

     For security reasons, the user should reset the password in his or her Preferences screen.

4. Click Apply. The system returns you to the Database Account screen.

Setting Up TMS Security for Users

Users who will run Oracle LSH APIs that insert, delete, or modify Oracle LSH classification hierarchies and terms (LSH Classification Admin tasks) need security access for their Oracle LSH database account to the Oracle Thesaurus Management System (TMS) instance that is installed as part of Oracle LSH.

Use the script tmsadduser.sql to add users to the TMS_ACCOUNTS and OPA_ACCOUNTS tables with TMS superuser privileges:

1. Open a command window on the TMS Middle tier server.

2. Set local=database

3. Change directory to the install directory of the TMS 4.6 installation.

4. Log on to your LSH database in SQL*Plus as the system account.

5. Run the script to add TMS superusers:

   start tmsadduser

6. The system prompts you for the following information:

   • User ID. Enter the user's LSH database account ID.

   • User Password. Enter the user's LSH database account password.

   • First Name. Enter the user's given name.

   • Last Name. Enter the user's family name.

   • TMS Password. Use the password you entered in when you installed the TMS database; see "Installing Oracle Thesaurus Management System" in the Oracle Life Sciences Data Hub Installation Guide.

7. Repeat Step 3 for each user.

Resetting the Password

You can reset the password for any account as necessary; for example, if a user forgets his or her password.

To reset a password for a database account, do the following:

1. Click the icon in the Reset Password column for the account.

2. In the Password field, enter the new password at least 8 characters long.

3. In the Confirm Password, enter the new password again.

4. Click Apply.

   Note:

   For security reasons, the user should reset the password in his or her Preferences screen.

Removing a Database Account

You can delete an Oracle LSH database account and its underlying database account; for example, when the user associated with the account leaves the company.

To delete one or more database accounts, do the following:

1. Select the checkbox in the Select column for each account you want to delete.

2. Click the Remove button. A confirmation message appears.

3. Click Yes to continue with the deletion. The system deletes the account and the underlying database account/user schema.