Oracle® Fusion Middleware Administrator's Guide for Oracle WebCenter Interaction 10g Release 4 (10.3.3.0.0) Part Number E14107-04 |
|
|
View PDF |
This chapter describes the Administration area and the Administrative Objects Directory, which enable you to create and manage administrative objects, and access the portal utilities.
This chapter describes the following tasks:
The Administrative Object Directory is a hierarchical folder structure that stores administrative objects such as content sources, portlets, and users.
The following guidelines can assist you in planning an administrative object hierarchy:
Start with the end-user hierarchy rather than an organizational or management structure. End-users can see the administrative hierarchy in a few places in the portal. For example, by default, the Add Portlets and Join Communities pages search the administrative hierarchy for available portlets and communities and display a list of objects without showing their parent folders.
Start by creating the hierarchy for communities and portlets (including portlet bundles) only and hide the administrative objects created during installation. For example, move all objects meant for administrators to a particular folder and restrict access to the folder so that end-users will not see it if they browse the hierarchy.
The organization of the objects meant for administrators should be based on administrative structure or topic.
Organize objects by topic rather than by object type. Objects are automatically grouped by type within each folder.
Set ACLs for folders as early as possible. Objects created in a folder inherit the ACL of the folder. By planning access control early, you simplify managing object security.
Manage user access by managing groups. Assigning a user to a group with permissions to a set of objects is easier than assigning each user to each object in the set.
You can view objects through the Administrative Objects Directory and through some portal utilities.
Note:
To view an object you must have the Access Administration activity right and at least Read access to the object.
To display the Administrative Objects Directory and access portal utilities, click Administration.
To view the contents of a folder, click its name.
To view all objects of a particular type stored in the folder, click the object type (for example, crawler, portlet, or user). To hide these objects, click the object type again.
To expand all the object types so you can view all objects stored in this folder, click the Expand All icon.
While viewing a subfolder, to navigate up to the parent folder, click Up, or click the parent folder name in folder path.
By default, only the first 50 objects display. To view the next 50 objects, click Next >>, or to view another set of 50 objects, click a number range.
To view default profiles, in the Select Utilities list, select Default Profiles.
You can search for objects in the Administrative Objects Directory.
Click Administration.
Specify your criteria in the Object Search boxes:
To limit your search to particular types of objects (for example, crawler, portlet, or user), in the first list, select the object type.
To limit your search to particular folders, in the second list, choose whether to search all administrative folders, only the folder you are currently viewing, or the folder you are viewing plus its subfolders.
In the text box, type the text you want to search for and click the Search icon.
You can use the text search rules described in Using Text Search Rules.
You can perform an advanced search, using metadata properties and location, to find objects or documents.
In the portal banner or in the Administrative Objects Directory, click Advanced Search.
Specify how you want your search criteria handled:
To meet all the conditions you define, select All Criteria.
Selecting All Criteria is equivalent to using AND.
If you want your search results to meet at least one of the conditions you define, select Any Criterion.
Selecting Any Criterion is equivalent to using OR.
To search for text in the name or description of an object or document, type the text you want to search for in the Search for text box.
You can use the text search rules described in Using Text Search Rules.
To search for property values, click Add Criteria, and specify the property criteria in the boxes that appear:
In the first list (property), select the searchable property for which you want to filter the values.
In the second list (operator), select the operator to apply to this condition.
This list will vary depending on the property selected:
For any text property you can search for a value that contains your search string (Contains), or you can search for properties that are blank (Contains No Value).
Note:
To exclude results with particular values, select Contains, then type “not” followed by words to exclude from your search. For example, if you want to search for jobs, excluding database update jobs, type "jobs" in the Search for text box, select Contains from the drop-down list, and type "not database update" in the text box.
For any date property you can search for a value that comes after, comes before, is, or is not the date and time you choose or for a value that occurs in the last number of minutes, hours, days, or weeks that you specify.
For any number property you can search for a value that is greater than, is less than, is, is not, is greater than or equal to, or is less than or equal to the number you enter in the text box.
In the Value text box, enter the value the property must have, or not have, depending on which operator you selected.
Note:
If you are searching for a text property, you can use the text search rules.
To remove a property condition, select the condition and click the Remove icon (next to Add Criteria).
To restrict your search to specific Knowledge Directory folders, click Add Document Folder. In the Select folder for search dialog box, select the folders you want to search and click OK.
To restrict your search to specific Administrative Objects Directory folders, click Add Administration Folder. In the Select folder for search dialog box, select the folders you want to search and click OK.
To remove folders from your list, select the folders and click the Remove icon (next to Add Administration Folder).
To select or clear all folder boxes, select or clear the box next to Folder Names.
By default, the portal searches subfolders. To exclude subfolders from your search, clear the box next to Include subfolders.
To specify the number of results to display on a page, in the Results per page list, choose a value.
To restrict your search to a specific language, in the This language only list, choose a language.
To limit your search to specific object types, in the Result Types list, select the object types you want to search.
To select or clear all object type boxes, select or clear the box next to Object Type.
To set all search conditions back to the defaults, click Clear.
To perform your search, click Search.
You can use multiple property criteria to define complex property searches.For example, if you want to find administrative items created after a certain date by a specific branch of a company, you could set the property criteria to the following values:
First Criterion:
Property = Object Created
Operator = Comes After
Value = December 30, 2003
Your search results would be limited to objects created after December 30, 2003.
Second Criterion:
Property = Company
Operator = Contains
Value = Company A
Your search results would be limited to objects where the company property contains Company A.
Third Criterion:
Property = Address
Operator = Contains
Value = San Francisco
Your search results would be limited to objects that contain San Francisco in the address.
Administrative folders provide a hierarchical structure that make it easy to organize portal objects and manage security.
Note:
You might want to store all of the resources needed by a particular audience of users in the same folder in which you store those users. By securing the folder appropriately and applying experience definition settings to it you can create completely separate and discreet user experiences for each audience of users.
To create an administrative folder you must have the following rights and privileges:
Access Administration activity right
Create Admin Folders activity right
At least Edit access to the parent folder (the folder in which you are creating the new folder)
Creating an administrative folder is different than creating other administrative objects. To create an administrative folder:
Click Administration.
If necessary, open the folder in which you want to store the new folder.
In the Create Object list, click Administrative Folder.
The Create Administrative Folder dialog box opens.
In the Name box, type a name for the folder.
This name appears in lists of objects from which users will sometimes choose; therefore, the name should clearly convey the purpose of this folder.
In the Description box, type a description for the folder.
This description appears in the Administrative Objects Directory to provide other administrators further details on the purpose of this folder.
Click OK.
You can perform additional tasks when you edit this folder:
You can create objects such as folders, portlets, and users in the Administrative Objects Directory.
Note:
To create an object you must have the Access Administration activity right and the activity right associated with creating that type of object. You must also have at least Edit access to the parent folder (the folder that will store the object).
Click Administration.
If necessary, open the folder in which you want to store the object.
You can create folders in the root of the Administrative Objects Directory, but other objects must be created in a folder.
Note:
You can create default profiles only from the Default Profiles Utility: in the Select Utilities list, select Default Profiles.
In the Create Object list, select the type of object you want to create.
The list displays only those objects you have permission to create in the folder.
Depending on the type of object you are creating, either the object editor opens, or a dialog box opens prompting you to choose a content source, template, or Web service.
If necessary, select the appropriate content source, template, or Web service and click OK.
A remote authentication source, a remote content source, an outgoing federated search, or a profile source requires a Web service. A portlet requires a template or Web service. A content crawler requires a content source.
The object editor opens.
Perform tasks as necessary on the object-specific pages. For details on these settings, see the chapter associated with the object or click the help icon on the editor page.
If the object needs a job to run, perform tasks as necessary on the Set Job page:
Perform tasks as necessary on the Properties and Names page:
Perform tasks as necessary on the Security page:
Editing an administrative folder is different than editing other administrative objects. To edit an administrative folder you must have at least Edit access to the folder.
Click Administration.
Navigate to the folder you want to edit.
Select the folder you want to edit and click Edit Subfolder.
Perform tasks as necessary on the Experience Definition Settings page:
Perform tasks as necessary on the Properties and Names page:
Perform tasks as necessary on the Security page:
Perform tasks as necessary on the Migration History and Status page:
Note:
You must have at least Edit access to the object you want to edit. To edit an object from the Administrative Objects Directory, you must have the Access Administration activity right.
To edit an object in the object editor:
Open the object editor:
To edit a community while viewing it, in the My Communities menu, select the community you wan to edit, then click Edit Page.
To edit an object from the search results page, perform a search and click the name of the object you want to edit.
To edit an administrative folder or community, click Administration, open the folder or community you want to edit, and click the Edit this Folder/Edit this Community icon.
To edit any other object, click Administration, navigate to the object you want to edit, and click the name of the object.
Edit settings as necessary on the object-specific pages. For details on these settings, see the chapter associated with the object or click the help icon on the editor page.
If the object needs a job to run, edit settings as necessary on the Set Job page:
Edit settings as necessary on the Properties and Names page:
Edit settings as necessary on the Security page:
Perform tasks as necessary on the Migration History and Status page:
To move objects to a different folder, select one or more objects and click the Move Folder icon. In the Target Folder dialog box, expand the folders as necessary, select a folder, and click OK.
To copy objects to a different folder, select one or more objects and click the Copy icon. In the Target Folder dialog box, expand the folders as necessary, select a folder, and click OK.
To delete objects, select one or more objects and click the Delete icon. In the confirmation dialog box, click Apply Now.
To modify the security settings for objects, select one or more objects and click the Security icon.
Object migration lets you copy resources from one portal to another. You might want to do this for several reasons. You might have multiple portals to handle a global deployment or you might want to create multiple portals to separate development, testing, and production.
For details, see Migrating, Backing-Up, and Restoring Your Portal.
On the Set Job page, you can associate an object with a new or existing job. You run jobs to import users with authentication sources, import content with content crawlers, run external operations, and import user information with profile sources.
Before you can run jobs, you must:
Confirm that the Oracle WCI Automation Service is running on the Automation Service computer. If it is not running, start it now, as described in Starting the Oracle WCI Automation Service.
Register the Automation Service with the portal, as described in Registering Automation Services.
Assign administrative folders to the registered Automation Services, as described in Registering Job Folders with Automation Services.
To associate an object with a job:
Open the object's editor by creating a new object or editing an existing object.
On the left, under Edit Object Settings, click Set Job.
Associate the object with one or more jobs:
To run this object with an existing job, click Add Job; then, in the Choose Jobs dialog box, select the jobs you want to add this object to and click OK.
To create a new job to run this object, click Create Job, then, in the Job Editor, schedule your job and click Finish.
To remove a job, select the job and click the Remove icon.
To select or clear all of the job check boxes, select or clear the check box to the left of Job Name.
To edit a job, click the job name.
If you added this object to an existing job, you might want to verify that the job is scheduled to run.
To change the order in which the jobs are sorted, click Job Name.
The owner of an object is displayed on the Set Job page. If you have Admin privileges to the object, you can change the owner.
You might want to change object owner for several reasons:
If the owner is deleted from the portal, you must assign an existing portal user as the object owner before you can run the job.
When a job runs, it might require access to portal objects that the current owner does not have access to. For example, a content crawler needs access to the folders into which it imports content. You might must change the owner to provide the proper access.
Open the object's editor by creating a new object or editing an existing object.
On the left, under Edit Object Settings, click Set Job.
To change the owner, click Change Owner; then, in the Choose User dialog box, choose the user whom you want to make the object owner and click OK.
Note:
If you do not have Admin privileges to the object, you see the name of the owner, but you cannot change it.
You can add or edit a name and description for an object.
Open the object's editor by creating a new object or editing an existing object.
On the left, under Edit Standard Settings, click Properties and Names.
In the Name box, type a name for this object.
The name should clearly convey what this object is or what it can be used for.
If you are naming an authentication-only authentication source, this name appears in the Authentication Partners list when you create the associated synchronization-only authentication source.
In the Description text box, type a description for this object.
The description should provide additional detail to convey what this object is or what it can be used for.
If you are naming an authentication source that synchronizes users, this description appears in the Authentication Source list when users log in. Users imported from an external source must choose the appropriate authentication source to log in to the portal.
If you did not set a mandatory object language in the portal configuration file, in the Primary Language list, select the language for the name and description you entered.
If you did set a mandatory object language in the portal configuration file, you see the mandatory language instead of a list. You cannot change this setting. The name and description you entered must be in the mandatory language.
If a localized name and description is not available in a user's selected language, the user will see the name and description in the specified primary language.
If you want to add names and descriptions for other languages, see Localizing Object Names and Descriptions.
You can localize object names and descriptions, so that users see the names and descriptions in their chosen language. For example, if you have an object called “Engineering,” you could add “Ingénierie” as the localized entry for French. A user viewing the French user interface would see the Ingénierie as the object name, as well as any other names and descriptions localized into French.
Note:
Open the object's editor by creating a new object or editing an existing object.
On the left, under Edit Standard Settings, click Properties and Names.
Select Supports Localized Names.
The Localized Names and Descriptions section appears.
Add or edit the localized names and descriptions:
To remove existing entries, select the entries you want to remove and click.
To select or clear all entries, select or clear the check box to the left of Name.
To edit an existing entry, click the entry you want to change, then, in the Name and Description dialog box, edit the entry as necessary, and click Finish.
To remove existing entries, select the entries you want to remove and click the Remove icon.
To select or clear all entries, select or clear the check box to the left of Name.
The Properties and Names page displays the top best bet terms set for this object. When users do a top best bet search on these terms, they go directly to this object instead of seeing the normal search results.
To link to the end user view of this object, click the link under URL.
You can use this URL to go directly to a top best bet. This can be useful if you want to direct users to an object or document related to a particular issue, but the object or document changes frequently. For example, you might want to direct customers to your current privacy statement, but you must keep copies of older privacy statements in your portal for internal reference. You could create a top best bet that points to the current privacy statement and add a link to that top best bet on your customer account page. When your privacy statement is updated, you can change the top best bet without having to change any links you made to the privacy statement.
You can add or edit properties for an object.
Open the object's editor by creating a new object or editing an existing object.
On the left, under Edit Standard Settings, click Properties and Names.
Under Object Properties, change the properties and values:
To add or delete properties for all objects of this type, click Open Properties Map.
This displays the Global Object Property Map.
To enter values for properties, type the value in the box to the right of the property.
Note:
The Object Properties section does not display if you are creating or editing a property.
By default, a new object inherits the security of the parent folder, but you can override the inherited security.
Note:
You cannot override the inherited security for users; user security is always the same as the folder in which the user is stored. If you do not want a user to be returned in some users' searches, ensure that those users are not allowed access to the folder in which the user is stored.
Open the object's editor by creating a new object or editing an existing object.
On the left, under Edit Standard Settings, click Security.
Specify which users and groups can access this object and what type of access they have:
To allow additional users or groups access to this object, click Add Users/Groups.
To specify the type of access a user or group has, in the list under the Privilege column, select the access type.
For a description of the available privileges, see About Access Controls Lists and Access Privileges.
Note:
If a user is a member of more than one group included in the list, or if they are included as an individual user and as part of a group, that user gets the highest access available to her for this object. For example, if a user is part of the Everyone group (which has Read access) and the Administrators Group (which has Admin access), that user gets the higher privilege to the community: Admin.
To delete a user or group, select the user or group and click the Remove icon.
To select or clear all of the user and group check boxes, select or clear the check box to the left of Users/Groups.
To see what users are included in a group, click the group name.
To change the column used for sorting or to toggle the sort order between ascending and descending, click the column name.
You see an the Sort Ascending icon or the Sort Descending icon to the right of the column name by which the objects are sorted.
You can see if an object was imported from another portal or if it has been requested for migration.
Open the object's editor by editing an existing object.
On the left, under Edit Standard Settings, click Migration History and Status.
If this object was imported from another portal, information displays under Import History:
Column | Description |
---|---|
Migration Date |
Displays the date the object was copied into this portal. |
Migration Comment |
Displays the comment entered by the user who requested migration of the object. |
Source Portal UUID |
Displays the unique identifier of the originating portal. |
If this object has been requested for migration, under Migration Status, you see whether the request is waiting for approval, has been approved, or has been rejected, as well as the requesting user's comments and any comments from the portal administrator approving or rejecting the request.
If you are a member of the Administrators group and the object is waiting for migration approval, you can approve the request on this page. Select Approve this object for migration.
Note:
Users who are not members of the Administrators group do not see this option.
For more information on migrating objects, see Chapter 12, "Migrating, Backing-Up, and Restoring Your Portal."