About Setting Up Users and Groups

The way you manage users for Oracle Analytics Cloud (and Oracle Cloud Infrastructure) depends whether identity domains are available in your cloud account.

Oracle Cloud Infrastructure Identity and Access Management (IAM) Identity Domains: Some Oracle Cloud regions have been updated to use identity domains. If you have a new cloud account in one of these regions, you use identity domains to manage the users who perform tasks in both Oracle Analytics Cloud and Oracle Cloud Infrastructure.
Oracle Identity Cloud Service: If you have an existing cloud account or you deploy Oracle Analytics Cloud in a region that doesn't currently offer identity domains, you use a federated Oracle Identity Cloud Service to manage the users who perform tasks in Oracle Analytics Cloud. In addition, you use Oracle Cloud Infrastructure Identity and Access Management to manage the users who create and manage your Oracle Analytics Cloud deployments using the Oracle Cloud Infrastructure Console.

It's easy to determine whether or not your cloud account offers identity domains. In Oracle Cloud Infrastructure Console, navigate to Identity & Security. Under Identity, check for Domains.

Identity & Security category showing Domains

If you see Domains, you use identity domains to manage users and groups for Oracle Cloud Infrastructure and your Oracle Analytics Cloud deployments. See Use Identity Domains to Set Up Users and Groups for Oracle Analytics Cloud.
If Domains isn't listed, you use a federated Oracle Identity Cloud Service to manage Oracle Analytics Cloud users and IAM to manage Oracle Cloud Infrastructure users. See Use Oracle Identity Cloud Service to Set Up Users and Groups for Oracle Analytics Cloud.

The following table outlines the differences between the two configurations.

Cloud Accounts That Use Identity Domains	Cloud Accounts That Don't Use Identity Domains
Users and groups are configured in IAM.	Users and groups are configured in both IAM and Oracle Identity Cloud Service, and are linked through federation.
Provides a single, unified console for managing users, groups, dynamic groups, and applications in domains.	Oracle Cloud Infrastructure Identity and Access Management must be federated with Oracle Identity Cloud Service.
Provides Single Sign-On to more applications using a single set of credentials and a unified authentication process.	Requires separate federated credentials for Oracle Identity Cloud Service.
The Federation page doesn't list any entries for Oracle Identity Cloud Service.	The Federation page lists oracleidentitycloudservice, the primordial Oracle Identity Cloud Service automatically federated in your cloud account.