Understanding Minimum Access Required by the User Starting Domains

The bare minimum that needs write access at the time a domain boots includes:

• The domain directory: it must be possible to write content to the domain directory although most of the configuration files in this directory can be read-only.

• The domain LOGS directory: by default this is the LOGS directory beneath the domain directory. If this location is overridden in the configuration file, the relevant location must also be read-write.

• The .adm directory: this subdirectory within the domain (if present) must also be read-write. This is required by Oracle Tuxedo.

• The Archive directory: located within the domain directory, a copy of the .cfg is archived to this directory each time it is updated. This directory is also used by the Purge Cache PSADMIN option for application servers.

All other files in the PS_CFG_HOME directory tree can be made read-only to the user starting the domain.