6 Manage Users, Roles, and Groups

As the service administrator or security administrator, you create users and groups, and manage their access to Oracle Energy and Water Data Intelligence content, such as subject areas and workbooks. All users must be assigned to a system group and role, as well as one or more functional groups and roles based on your requirements.

About Users, Roles, and Groups

There are two types of roles in Oracle Energy and Water Data Intelligence: system and functional roles.

• System roles control if users have read or write access to content.
• Functional roles control what types of content (such as catalog folders, subject areas, and workbooks) users can access.

Groups are mechanisms to organize users with common permissions. Groups are assigned to roles so that all the users who are added to the group inherit the permissions associated with the role.

• System groups are assigned to system roles that control read or write access.
• Functional groups are assigned to functional roles that control what types of content the group can access.

All users must be assigned to a system group and one or more functional groups.

Manage Users

Users accessing Oracle Energy and Water Data Intelligence must exist in Oracle Cloud Infrastructure Identity and Access Management.

You can manually create new users through the Oracle Cloud Infrastructure Console. See Creating a User.

Manage Groups

Oracle Energy and Water Data Intelligence uses groups to provide users access to subject areas, objects, and data. Users must be assigned to a system group and one or more functional groups based on your requirements.

• System groups provide users with Author or Consumer access to content (such as subject areas) in Oracle Energy and Water Data Intelligence.
• Functional groups provide users with access to different types of content (such as Customer Analytics or Device Analytics) in Oracle Energy and Water Data Intelligence.

The table below shows the system groups and functional groups available, and the permissions that come with each.

System Group	Functional Group	Permissions
Author	Data Intelligence Customers	Provides Read & Write access to Customer and Common subject areas and workbooks.
	Data Intelligence Digital Assets	Provides Read & Write access to Digital Asset subject areas and workbooks.
	Data Intelligence Grid Insights	Provides Read & Write access to Grid Insights subject areas and workbooks.
	Data Intelligence Meters	Provides Read & Write access to Meter, AMI, and Common subject areas and workbooks.
	Data Intelligence Work Assets	Provides Read & Write access to WorkAsset subject areas and workbooks.
Consumer	Data Intelligence Customers	Provides Read Only access to Customer and Common subject areas and workbooks.
	Data Intelligence Digital Assets	Provides Read Only access to Digital Asset subject areas and workbooks.
	Data Intelligence Grid Insights	Provides Read Only access to Grid Insights subject areas and workbooks.
	Data Intelligence Meters	Provides Read Only access to Meter, AMI, and Common subject areas and workbooks.
	Data Intelligence Work Assets	Provides Read Only access to WorkAsset subject areas and workbooks.

Create System Groups

1. Sign in to the Oracle Cloud Infrastructure Console Identity and Access Management.
2. Create a group with the name "Data Intelligence Licensed Authors". This will be used for users who need "Author" (read and write) access to content. See Creating a Group for detailed steps.
3. Create a group with the name "Data Intelligence Licensed Consumers". This will be used for users who need "Consumer" (read only) access to content. See Creating a Group for detailed steps.

Add Users to System Groups

After you have created the necessary system groups, you add users to them. If you have not created users yet, see Manage Users.

1. Sign in to Oracle Cloud Infrastructure Identity and Access Management.
2. Add Author users to the "Data Intelligence Licensed Authors" group.

   See Adding Users to a Group.

3. Add Consumer users to the "Data Intelligence Licensed Consumers" group.

   See Adding Users to a Group.

Create Functional Groups

1. Sign in to Oracle Cloud Infrastructure Identity and Access Management.
2. Create the following groups for users who need access to the corresponding content. See Creating a Group for detailed steps.

   • “Data Intelligence Customers” group for users who need to access Customer Analytics content.

   • “Data Intelligence Digital Assets” group for users who need access to Digital Asset content.

   • “Data Intelligence Grid Insights” group for users who need access to Grid Insights content.

   • “Data Intelligence Meters” group for users who need to access Device Analytics content.

   • “Data Intelligence Work Assets” group for users who need access to Work and Asset content.

Add Users to Functional Groups

After you have created the necessary functional groups, you add users to them. If you have not created users yet, see Manage Users.

1. Sign in to Oracle Cloud Infrastructure Identity and Access Management.
2. Add users who need to access to specific types of content to the corresponding functional groups. For example, add users who need access to Customer Analytics content to the “Data Intelligence Customers” group, or add users who need to access to Digital Asset content to the “Data Intelligence Digital Assets” group. See Adding Users to a Group for detailed steps.

Map System Groups to System Roles

After you create the system groups and add users to them, you must assign the system groups to system roles in the Oracle Energy and Water Data Intelligence Admin Console.

1. Sign in to the Oracle Energy and Water Data Intelligence Admin Console.
2. Click Security under Service Administration.
3. On the Security page, click the Application Roles tab.
4. In the Application Roles list, search for and select the Data Intelligence Licensed Author Role.
5. Click Assign Groups.
6. In the Add Group Mapping window that displays, search for and select Data Intelligence Licensed Authors and click Save.
7. Return to the Application Roles list.
8. Search for and select the Data Intelligence Licensed Consumer Role.
9. Click Assign Groups.
10. In the Add Group Mapping window that displays, search for and select Data Intelligence Licensed Consumers and click Save.

Map Functional Groups to Functional Roles

If you created your functional groups with the prescribed names (such as “Data Intelligence Customers” and “Data Intelligence Meters”), then you do not need to map the groups to a functional role. This mapping is done automatically.

However, if you create functional groups with names different from the prescribed names, then you must map the functional groups to the corresponding functional roles through the Oracle Energy and Water Data Intelligence Admin Console.

1. Sign in to the Oracle Energy and Water Data Intelligence Admin Console.
2. Click Security under Service Administration.
3. On the Security page, click the Application Roles tab.
4. In the Application Roles list, search for and select Data Intelligence Customers.
5. Click Assign Groups.
6. In the Add Group Mapping window that displays, search for and select the group you created to only have access to Customer Analytics content, and click Save.
7. Return to the Application Roles list.
8. Repeat the above steps for any other functional groups you created that have names different from the prescribed names.