Reviewing Data Relationship Management Deployment Best Practices

This section outlines DRM deployment best practices.

Review the following best practices when configuring DRM deployments:

• Use dedicated domain service accounts or dedicated domain groups for Oracle Data Relationship Management Engine callers.
• Configure the IIS application pool identity for the Data Relationship Management Web Client explicitly instead of relying on default settings.
• Configure the Oracle Data Relationship Management Service Log On account explicitly.
• Ensure all server-side Data Relationship Management tools that call the Data Relationship Management Engine run under approved identities.
• For distributed deployments, ensure every host that communicates with the Data Relationship Management Engine authenticates using an approved identity.
• For load-balanced deployments, ensure all web server nodes are covered by the allowed-principals configuration.
• Avoid broad groups such as Domain Users, Authenticated Users, or personal administrator accounts for production access.