6 Setting Up Management Users

This chapter explains how to set up system administrators with access to the Oracle Communications Marketing and Advertising Administration console.

System Administrator Overview

Marketing and Advertising system administrators have privileges to manage the product at the server level. They are known as management or administrative users. They use the Administration console or other JMX-based tools. They have permission to perform management and administrative functions.

Organizational users within the Marketing and Advertising system are set up inside the application by someone who is logged in as an organizational user, such as a system owner user. For information about setting up organizational users such as system owner users, network provider users, ad service provider users, ad space owner users, and advertiser users, see the online help within Marketing and Advertising.

The default administrative user, created during the domain configuration phase following product installation, is by default a member of the Administrators user group. Users in this group have a user level of 1000, which provides the most privileged level of access. This level grants permission to:

• View, modify and administer server configuration; includes permission to list, add, and delete users and to change passwords.

• Deploy applications.

• Start, resume, and stop servers.

• Create users in the Administrative user group and in groups that have lesser privileges.

Marketing and Advertising management users are created and managed using standard Oracle WebLogic Server mechanisms.

For an overview of those mechanisms, see "Manage users and groups" from Oracle Fusion Middleware Oracle WebLogic Server Administration Console Online Help at:

http://download.oracle.com/docs/cd/E12839_01/apirefs.1111/e13952/taskhelp/security/ManageUsersAndGroups.html

The default administrative user must also be a user in the Marketing and Advertising system owner organization. This is so that the administrative user username and password can be used for the initial login to Marketing and Advertising. After this initial login, the administrative user should create additional separate system owner users. In a standard installation/domain configuration, this is taken care of automatically, but if you are setting up an overlay installation, this will require an additional step. You can do one of the following:

• From the Administration console, add the main administrative user from a previous Oracle Communications Services Gatekeeper installation to the systemowner group.

• Run a special script called ocma-update-user-group.py found in your Marketing and Advertising installation in Middleware_Home/wlserver_10.3/common/templates/scripts/wlst.

Creating Management Users

To create a management user:

1. In the Domain Structure panel, select Security Realms.

   The Summary of Security Realms pane opens.

2. Click myrealm.

   The Settings for myrealm pane opens.

3. Click the Users and Groups tab.

   The tab opens.

4. Select the Users tab if it is not selected.

   Note:

   The list of users on the Users tab includes both management users and organization users from the application. Creating and managing Marketing and Advertising organization users should be done through the application or the Marketing and Advertising provisioning Web Services. Do not use the Administration console for this purpose.

5. Click the New button.

   The Create a New User screen appears.

6. Fill in the form fields. The Provider field should be left at DefaultAuthenticator.

7. Click OK.

   The User created successfully message appears at the top of the page.

Adding Management Users to Groups

To add a management user to a group:

1. In the Domain Structure panel, select Security Realms.

   The Summary of Security Realms panel opens.

2. Click myrealm.

   The Settings for myrealm page opens.

3. Click the Users and Groups tab.

   The tab opens.

4. Select the Users tab if it is not selected.

5. Click the name of the management user you wish to associate with a management user group. The Settings for username page opens.

6. Select the Groups tab if it is not selected.

7. Under the Available list on the left, select the name of the management group you to which you wish to assign this user. For example, to add this user to the Administrators group, select Administrators.

   Note:

   Do not use this method to assign Marketing and Advertising organization users to organization type groups, even though you can see these groups in the Available list. Management users should belong to one of the following standard WLS management groups:

   • Administrators

   • AppTesters

   • Deployers

   • Monitors

   • Operators

   See the Administration console online help for information on these groups or on setting up your own groups.

8. Click the right pointing arrow to move the selected group name from the Available list to the Chosen list to the right.

9. Click Save.

   The User created successfully message appears at the top of the page.