Administration User Id and Group
Prior to installing Oracle Utilities Operational Device Management, you create a UNIX administration user ID and administration group. This account is used to install and operate the product. The administration user ID and product group are provided as parameters during the installation process. By default, the product administration user ID is splsys (SPLADMIN parameter and environment variable) and the group is splusr (SPLADMINGRP parameter and environment variable). However, alternative values can be used according to your site standards.
The administration userid is responsible for the following:
• It is the owner of all of the files installed for Oracle Utilities Operational Device Management.
• It is the only userid that should be used to run any of the administration tools provided with Oracle Utilities Operational Device Management.
• It is the userid that owns the UNIX resources used by Oracle Utilities Operational Device Management. When the product is running, this userid owns the processes associated with running the base software.
The administration userid should be protected from unauthorized use. If components of the responsibility of administration need to be delegated to other users on the machine, we recommend not giving out the administration userid. Instead, an alternative solution may be sought (such as using sudo or similar security tools).
The administration userid should not be used for any of the following:
• As a product end user. By default, the administration userid does not have access to the functionality of Oracle Utilities Operational Device Management.
• To run product background processes.
• To manipulate data files exported from or imported into Oracle Utilities Operational Device Management from any interfaces.
This technical document will refer to the administration userid as splsys. If your site uses an alternative userid as the administration userid, substitute that userid value for splsys.
Implementation Tip: It is possible to implement a different owner per environment in the product. Why would you want to do this? If you want to allow developers or testers to restart environments themselves, you can give access only to appropriate environments to distribute the administration. This can be achieved by installing Oracle Utilities Operational Device Management with different userids. You must log in and administrate each environment with its account only.