Set Up Users and Groups Using IAM

After your service instance is successfully created, use IAM to set up your users and groups so they have access to the Oracle Content Management instance that you created earlier.

When your account is created, a default identity domain is created. You can create your users and groups in this domain.

As a best practice, you should create groups based on the roles in your organization, which generally fall into typical organization roles. Then assign the appropriate application roles to those groups to give them access to the Oracle Content Management features they need. Finally, add users to those groups to automatically assign users the appropriate application roles.

Note:

If you're using Oracle Content Management Starter Edition, you're limited to only 5 users. To increase the number of users and take advantage of the full feature set, upgrade to the Premium Edition.

If your company uses single sign-on (SSO), you’ll want to enable SSO before you start adding users.

To set up users and groups:

  1. Create groups for your organization
  2. Assign roles to groups
  3. Add users
  4. Assign users to groups

Create Groups for Your Organization

To create a group:

  1. If you're not already in the Oracle Cloud Console, navigate to it by returning to the window or signing in to Oracle Cloud.
  2. In the Oracle Cloud Console, click Navigation menu icon , click Identity & Security, then, under Identity, click Domains.
  3. Open the identity domain you're using for Oracle Content Management.
  4. In the navigation menu on the left, click Groups.
  5. To create a group, click Create group.
  6. Enter a name and description for the group that makes clear to others what the group is used for.
  7. To allow users to request access to this group, click User can request access.
  8. Click Create.

To create another group, click Groups in the breadcrumb, then repeat steps 5-8.

Assign Roles to Groups

After creating groups for your organization roles, assign the appropriate application roles to those groups to give them access to the Oracle Content Management features they need.

Although you can assign roles to users directly, it's easier to manage role assignment when you assign roles to groups and then add users to those groups.

To assign roles to groups:

  1. Navigate to your identity domain:
    • If you're viewing the group you just created, click your identity domain in the breadcrumb.
    • If you're not already in the Oracle Cloud Console:
      1. Sign in to Oracle Cloud as the cloud account administrator. You can find your account name and login information in your welcome email.
      2. In the Oracle Cloud Console, click Navigation menu icon , click Identity & Security, then, under Identity, click Domains.
      3. Open the identity domain you're using for Oracle Content Management.
  2. In the navigation menu on the left, click Oracle Cloud Services.
  3. On the Oracle Cloud Services page, find the CECSAUTO_instanceCECSAUTO application (where instance is the name of the Oracle Content Management instance you created), and open it.
  4. On the CECSAUTO_instanceCECSAUTO application details page, in the navigation menu on the left, click Application Roles.
  5. Next to the role you want to assign, click Actions icon, and then select Assign Groups.
  6. Find and select the group you want, and then click Assign.

    For a list of typical organization roles and the application roles they need, see Typical Organization Roles. For a description of the predefined roles in Oracle Content Management, see Application Roles.

Add Users

Before using your system, you need to add users, either by importing them or creating them individually.

To add users:

  1. Navigate to your identity domain:
    • If you're viewing application roles, click your identity domain in the breadcrumb.
    • If you're not already in the Oracle Cloud Console:
      1. Sign in to Oracle Cloud as the cloud account administrator. You can find your account name and login information in your welcome email.
      2. In the Oracle Cloud Console, click Navigation menu icon , click Identity & Security, then, under Identity, click Domains.
      3. Open the identity domain you're using for Oracle Content Management.
  2. In the navigation menu on the left, click Users.
  3. Add users using one of the following methods:
    • To import users, you need to a create comma-separated values (CSV) file, and then import the file. See Importing Users.
    • To create a user, click Create user. You can assign the user to a group during creation or assign users to groups at a later time. See "Creating Users" in Using the Console.

When you add users, they'll receive two emails—one asking them to activate their Oracle Cloud account, and one welcoming them to Oracle Content Management. The Oracle Cloud user account must be activated before the link expires so it can be used. You can send another invitation if necessary. See "Resending Invitations to Users to Activate their Accounts" in Using the Console.

Assign Users to Groups

Assign users to groups to automatically give them the appropriate roles and permissions for Oracle Content Management.

To assign users to groups:

  1. Navigate to the Groups page:
    • If you're viewing users, in the navigation menu on the left, click Groups.
    • If you're not already in the Oracle Cloud Console:
      1. Sign in to Oracle Cloud as the cloud account administrator. You can find your account name and login information in your welcome email.
      2. In the Oracle Cloud Console, click Navigation menu icon , click Identity & Security, then, under Identity, click Domains.
      3. Open the identity domain you're using for Oracle Content Management.
      4. In the navigation menu on the left, click Groups.
  2. Open the group you want to assign users to.
  3. Click the Users tab.
  4. On the Users tab, click Assign user to groups.
  5. Select the users you want to add, and then click Add.

Now that you've deployed Oracle Content Management, you might want to enable additional features. Then you need to perform other tasks to roll out the service.