Manage Users, Groups, and Access in a Region with Identity Domains

If your Oracle Cloud Infrastructure (OCI) region has been updated and you see Domains under Identity in the Identity & Security section, use the topics in this section. If you don't see Domains, follow the steps in Manage Users, Groups, and Access in a Region without Identity Domains.

• Enable Single Sign-On (SSO)
• Manage Users with IAM
• Manage Groups with IAM

Manage Users with IAM

Before using your system, you need to add users. As you continue to use your system, you’ll need to add and remove users or change some of their settings. For example, if someone changes departments, you might need to change their role, or if someone leaves your organization, you need to remove them from the system.

If you need to manage Oracle Content Management specific user settings, you can do so on the Users page in System administration.

Note:

If you're using Oracle Content Management Starter Edition, you're limited to only five users. To increase the number of users and take advantage of the full feature set, upgrade to the Premium Edition.

To manage users:

1. Sign in to Oracle Cloud as the cloud account administrator. You can find your account name and login information in your welcome email.
2. In the Oracle Cloud Console, click Identity & Security, then, under Identity, click Domains.
3. On the Domains page, open your identity domain.
4. In the navigation menu on the left, click Users.
5. Perform any of the following tasks, described in Managing Users.
   • To create a user, click Create user.

     When you add users, they'll receive two emails—one asking them to activate their Oracle Cloud account, and one welcoming them to Oracle Content Management. The Oracle Cloud user account must be activated before the link expires so it can be used. You can send another invitation if necessary. See "Resending Invitations to Users to Activate their Accounts" in Using the Console.

     Note:

     Make sure to only use printable ASCII characters (with character codes 32-126) in users' first and last names.
   • To import users, you need to a create comma-separated values (CSV) file, and then import the file by clicking Import users.
   • To export users, click Export users.
   • To activate a user, select the user, and then click Activate.
   • To deactivate a user, select the user, and then click Deactivate.
   • To resend an invitation to a user, select the user, and then click Resend invitation.
   • To reset a user’s password, select the user, and then click Reset password.
   • To reset all users' passwords, click Reset all passwords.
   • To deprovision a user, select the user, and then click Delete.

Manage Groups with IAM

As a best practice, you should create groups for your organization roles in Identity and Access Management (IAM) and assign the appropriate application roles to those groups. Then you can add users to those groups to automatically assign them the appropriate application roles.

Note:

If you're using Oracle Content Management Starter Edition, IAM groups aren't supported (only Oracle Content Management groups). To take advantage of the full feature set, upgrade to the Premium Edition.

If you need to manage Oracle Content Management groups, you can do so on the Groups page in your user menu, and you can manage group settings in System administration.

• Manage Groups with IAM
• Assign Roles to Groups with IAM
• Assign Users to Groups IAM

Manage Groups with IAM

As you use your system, you'll want to add, import, export, or remove groups.

To manage groups:

1. Sign in to Oracle Cloud as the cloud account administrator. You can find your account name and login information in your welcome email.
2. In the Oracle Cloud Console, click Identity & Security, then, under Identity, click Domains.
3. On the Domains page, open your identity domain.
4. In the navigation menu on the left, click Groups.
5. Perform any of the following tasks, described in Managing Groups:
   • To create a group, click Create group.
   • To import groups, click Import groups.
   • To export groups, click Export groups.
   • To remove a group, select it, and then click Delete.

Assign Roles to Groups with IAM

After creating groups for your organization roles, assign the appropriate application roles to those groups to give them access to the Oracle Content Management features they need.

To assign roles to groups:

1. Navigate to your identity domain:
   • If you're viewing the group you just created, click your identity domain in the breadcrumb.
   • If you're not already in the Oracle Cloud Console:
     1. Sign in to Oracle Cloud as the cloud account administrator. You can find your account name and login information in your welcome email.
     2. In the Oracle Cloud Console, click , click Identity & Security, then, under Identity, click Domains.
     3. Open the identity domain you're using for Oracle Content Management.
2. In the navigation menu on the left, click Oracle Cloud Services.
3. On the Oracle Cloud Services page, find the CECSAUTO_instanceCECSAUTO application (where instance is the name of the Oracle Content Management instance you created), and open it.
4. On the CECSAUTO_instanceCECSAUTO application details page, in the navigation menu on the left, click Application Roles.
5. Next to the role you want to assign, click , and then select Assign Groups.
6. Find and select the group you want, and then click Assign.

   For a list of typical organization roles and the application roles they need, see Typical Organization Roles. For a description of the predefined roles in Oracle Content Management, see Application Roles.

Assign Users to Groups IAM

Assign users to groups to automatically give them the appropriate roles and permissions for Oracle Content Management.

To assign users to groups:

1. Navigate to the Groups page:
   • If you're viewing users, in the navigation menu on the left, click Groups.
   • If you're not already in the Oracle Cloud Console:
     1. Sign in to Oracle Cloud as the cloud account administrator. You can find your account name and login information in your welcome email.
     2. In the Oracle Cloud Console, click , click Identity & Security, then, under Identity, click Domains.
     3. Open the identity domain you're using for Oracle Content Management.
     4. In the navigation menu on the left, click Groups.
2. Open the group you want to assign users to.
3. Click the Users tab.
4. On the Users tab, click Assign user to groups.
5. Select the users you want to add, and then click Add.