4 Working with Users

4.1 Understanding User Security Roles

Each person who uses Oracle GoldenGate Monitor must be granted a security role. This role controls which functions of the interface that user can perform. There are three security roles in Oracle GoldenGate Monitor, as described in Table 4-1:

Related Topics

Managing Users

Managing Your User Profile

Overview of the Monitoring Workspace

4.2 Managing Users

Managing users refers to editing a user's profile and administering Oracle GoldenGate instance access. If you are an Oracle GoldenGate Monitor Super Administrator (SuperAdmin) or an Administrator, you can use the User Management tab to view and manage information about the Oracle GoldenGate Monitor users. This tab displays the existing users, with columns that show the login name, the actual name of the person who owns that login name, that person's email address, and that person's security role within Oracle GoldenGate Monitor. It also displays the instances assigned to the users.

While you can use the User Management tab to edit user information, such as name and email address, and to assign instances, you can only add and delete users, assign and change their passwords, and assign them to groups from the Oracle WebLogic Server Administration Console.

This section describes how to:

• Add a user; see To add a user:

• Add a user to a group; see To add a user to a group:

• Edit user information; see To change user properties:

• Delete a user; see To remove a user:

Related Topics

Understanding User Security Roles

4.3 Adding, Changing, and Removing Users

Weblogic administrators can use the Oracle WebLogic Server Administration Console to do the following:

• Create new users.

• Delete existing users.

• Update the user names and passwords

An Oracle GoldenGate Monitor Super Administrator or Administrator can edit user information by using User Management tab in Oracle GoldenGate Monitor Server Console.

To add a user:

1. Log into the Oracle WebLogic Server Administration Console.

2. In the Domain Structure panel (left side of console), select Security Realms.

   
   Description of the illustration ''wls_dom_strct.gif''
   
   

3. On the Summary of Security Realms page select the name of the realm (for example, myrealm).

   
   Description of the illustration ''wls_realms.gif''
   
   

4. On the Settings for Realm Name page select Users and Groups then Users.

   The User table displays the names of all users defined in the Authentication provider.

5. Click New.

   The Create New User screen appears.

   
   Description of the illustration ''wls_crt_nu_usr.gif''
   
   

6. In the Name field of the Create New User page enter the name of the user.

   User names must be unique. For the WebLogic Authentication provider (DefaultAuthenticator), user names are case insensitive. User names must not include tabs or any of the following characters:

   • Semicolons: ;

   • Commas: ,

   • Plus signs: +

   • Equal signs:=

   • Single backslash character: \ (note that two consecutive backslashes may be used; for example smith\\)

   In addition, user names must not begin with either of the following characters:

   • Pound sign: #

   • Double quotations: "

   Important:

   If a user is created with any of the preceding invalid characters, the WebLogic domain can become corrupted.

7. (Optional) In the Description field, enter a description. The description might be the user's full name.

8. In the Provider drop-down list, select the Authentication provider for the user.

   If multiple Authentication providers are configured in the security realm, they will appear in the list. Select the Authentication provider that corresponds to the database in which the information for the new user is to be stored.

9. In the Password field, enter a password for the user.

   The minimum password length for a user defined in the WebLogic Authentication provider is 8 characters. Do not use the username/password combination weblogic/welcome1 in production.

   Note:

   Oracle recommends that you configure the Password Validation provider in the security realm after you create a domain. The Password Validation provider can be configured to impose additional password composition rules. For more information, see Configure the Password Validation provider.

10. Re-enter the password for the user in the Confirm Password field.

11. Click OK to save your changes.

    The user name appears in the User table. You can now add this user to a group.

To add a user to a group:

1. In the Users table select the user you want to add to a group.

2. On the Settings for User Name page select Groups.

   The Groups tab appears:

   
   Description of the illustration ''cons_groups.gif''
   
   

3. Select a group or groups from the Available list box:

   • To select multiple groups, Ctrl-click each group and then click the double right arrow to move the selection to the Chosen list box.

   • To add a user to a group, click the right arrow to move the selection to the Chosen list box.

   • To remove a user from a group, select the group in the Chosen list box and click the left arrow. You can remove multiple groups by selecting them and clicking the double left arrow.

4. Click Save.

To change user properties:

1. In the Manage Users list of the User Management tab, click the name of the user that you want to change. The Edit User screen appears.

   
   Description of the illustration ''edit_user.gif''
   
   

2. Change the properties as needed. You can change the following properties:

   • User's proper name (first and/or last)

   • User's email address.

   • The instances to which the user has access (see Assigning Instances to a User).

3. Click Submit.

To remove a user:

1. Log in (or remain logged in) to the Oracle WebLogic Server Administration Console.

2. In the left pane select Security Realms.

3. On the Summary of Security Realms page select the name of the realm (for example, myrealm).

4. On the Settings for Realm Name page select Users and Groups then Users.

5. In the Users table select the check box next to each user name you want to delete.

   If you have a large number of users, use the Customize this table link to retrieve and list only the users that match your search criteria. The Filter By field uses the asterisk (*) as the wild card character.

   Note:

   The Administration Console displays a maximum of 1000 users. If the number of users that are defined exceeds 1000, you can apply a search filter to limit the display.

6. Click Delete.

7. Click Yes to confirm.

Related Topics

Managing Users

4.4 Assigning Instances to a User

As described in Understanding User Security Roles, all Oracle GoldenGate Monitor users are granted a security role. The Super Administrator or Administrator can assign or un-assign the instances to other users on the Edit Users screen, accessed from the User Management tab. This is referred to as "instance level security" and allows one to restrict the access different users have to different hosts/instances. Before attempting this procedure, you should familiarize yourself with how instance level security is managed. See Chapter 6, "Understanding Instance Level Security" in Administering Oracle GoldenGate Monitor.

To assign instances to a user:

1. In the Manage Users list of the User Management tab, click the name of the user that you want to change. The Edit User screen appears. The instances to which that user can be assigned will appear in the Instances list box. Note that Role is a non-editable column in the Edit Users screen for all the users.

2. Select the check box next to each instance you want to assign to t hat user. If you want to assign all available instances, select All.

3. Click Submit.

To delete an instance assignment, deselect the specific instance(s) or All and click Submit.

4.5 Managing Your User Profile

Use the User Profile to change your log-in password and select the kinds of notifications that you want to receive.

To manage your User Profile:

1. In the Utility Bar, click User Profile. The User Profile dialog box appears.

   
   Description of the illustration ''user_profile.gif''
   
   

2. Under Notification Type for different Alert Severities, specify the notification method that you want to use for each level of alert severity. This option is visible only if alerts are enabled by an administrator. An alert can have a severity of either Warning or Error, depending on how it was defined. You might want to receive Error alerts by email, SNMP, and CLI (only options that were enabled by an administrator are shown). Conversely, you might only need to receive Warning alerts by email, depending on your business protocols. The following status indicators appear in the status bar and workspaces for triggered alerts. See About the Status Indicators.

   	Warning-level alert
   	Error-level alert

   
   

3. For Accessibility Mode, set the accessibility mode for users with disabilities.

   • None: Accessibility features are excluded.

   • Standard Accessibility: Supports standard accessibility features provided by supported browsers.

   • Screen Reader Optimized: Enables accessibility features that improve usability with a screen reader, but may affect other users negatively.

4. Submit: Click to save the changes that you made to your profile, or click Reset to cancel any changes that you made to your profile.

Related Topics

Working with Alerts