2 Deploy Oracle Analytics Cloud on US Government Cloud
Let's explore how to deploy Oracle Analytics Cloud on Oracle Cloud Infrastructure in US Government Cloud.
Topics
- Understand Oracle Analytics Cloud on US Government Cloud
- Typical Workflow for Oracle Analytics Cloud on US Government Cloud
- Create an Oracle Analytics Cloud Instance (US Government)
- Set Up Users, Groups, and Application Roles (US Government)
- Give Users Permissions to Manage Oracle Analytics Cloud (US Government)
Understand Oracle Analytics Cloud on US Government Cloud
Oracle Analytics Cloud is available on Oracle Cloud Infrastructure in several US government regions. Your Oracle Analytics Cloud experience on US government regions is slightly different to commercial regions. This topic highlights any differences or restrictions.
Topics
- Tenancies on US Government Cloud Created Before January 2023
- Identity Management on US Government Cloud
- Users and Roles Pages in Oracle Analytics Cloud Console
- Data Source Support on US Government Cloud
- Oracle Analytics Publisher on US Government Cloud
- Desktop Tools on US Government Cloud
- Features Not Available on US Government Cloud
- Useful Resources for Oracle Analytics Cloud on US Government Cloud
Tenancies on US Government Cloud Created Before January 2023
Oracle Analytics Cloud uses identity domains in Oracle Cloud Infrastructure Identity and Access Management (IAM) to manage users. Identity domains are available in all US government tenancies created after January 17 2023.
-
Wait until your tenancy is upgraded to include identity domains.
-
Create a new child tenancy (which includes identity domains) and use Oracle Analytics Cloud in the new child tenancy. See Creating a New Child Tenancy.
How do I know whether my tenancy includes identity domains?
It's easy to determine whether or not your tenancy offers identity domains. In Oracle Cloud Infrastructure Console, navigate to Identity & Security. Under Identity, check for Domains.
- If you see the Domains option, identity domains are available in the tenancy so you can use Oracle Analytics Cloud. See Set Up Users, Groups, and Application Roles (US Government).
- If the Domains doesn’t appear in the list, identity domains aren't available in the tenancy.
Identity Management on US Government Cloud
In US Government Cloud, administrators must use identity domains in Oracle Cloud Infrastructure Identity and Access Management (IAM) to manage users and groups for Oracle Analytics Cloud.
Refer to the IAM documentation to learn how to add users and groups using the Oracle Cloud Infrastructure Console. See IAM with Idenity Domains.
When users and groups are set up, administrators can use the Application Roles page in Oracle Analytics Cloud to give individuals and groups permissions in Oracle Analytics Cloud. See Configure What Users Can See and Do.
Note:
As a US Government customer, you can ignore all references to Oracle Identity Cloud Service in Oracle Analytics Cloud documentation. Only Commercial and UK Government regions use Oracle Identity Cloud Service.Users and Roles Pages in Oracle Analytics Cloud Console
Administrators determine what users can see and do in Oracle Analytics Cloud by assigning various application roles from the Users and Roles page in the Console.
This page presents user information in three different views:
Users and Roles Page | Description |
---|---|
Users |
Lists users from the identity domain associated with your Oracle Analytics Cloud instance. From the Users tab, you can:
You can’t add or remove user accounts through the Users tab. Use Oracle Cloud Infrastructure Identity and Access Management to manage user accounts. |
Roles |
Lists user groups from the identity domain associated with your Oracle Analytics Cloud instance. From the Groups tab, you can:
You can’t add or remove user groups through the Groups tab. Use Oracle Cloud Infrastructure Identity and Access Management to manage user groups. |
Application Roles |
Displays the predefined application roles for Oracle Analytics and any user-defined application roles that you add. From the Application Roles tab, you can:
|
Data Source Support on US Government Cloud
Federal Information Processing Standards (FIPS) mandate specific security requirements to ensure secure communication and protect sensitive data. When you deploy Oracle Analytics Cloud on US Government Cloud, you can connect to several data sources that comply with FIPS.
FIPS-Compliant Data Source | Version | More Information |
---|---|---|
Oracle Autonomous Data Warehouse | 18.2.4-20 and later
19c |
Connect to Oracle Autonomous Data Warehouse |
Oracle Autonomous Transaction Processing | 19c | Connect to Oracle Autonomous Transaction Processing |
Oracle Fusion Cloud Applications Suite | 11.1.1.9+ or Oracle Fusion Cloud Applications Release 8 and later * |
Connect to Oracle Fusion Cloud Applications Suite *FIPS requires SSL |
Oracle Database |
12.1+ 12.2+ 18+ 19+ |
Connect to an Oracle Database |
Oracle Essbase | 11.1.2.4.0+
21c |
Connect to Essbase |
CSV File | - | Create a Dataset from a File Uploaded from Your Computer |
Local Subject Area (in Oracle Analytics Cloud) | - | Create a Dataset from a Local Subject Area |
Microsoft Excel File | - | Create a Dataset from a File Uploaded from Your Computer |
Oracle Analytics Publisher on US Government Cloud
Oracle Analytics Cloud offers pixel-perfect reporting using Oracle Analytics Publisher.
Requirements for Analytics Publisher on US Government Cloud
Feature in Analytics Publisher | Special Security Requirements on US Government Cloud |
---|---|
REST Service |
You must use an Auth Token to connect to Oracle Analytics Publisher’s REST service. You can’t use Basic authentication. |
SOAP Web Services |
You can’t use login credentials to connect to Oracle Analytics Publisher’s SOAP web services. As an alternative, connect to SOAP web services using an Auth Token.
|
Oracle Content Server Connectivity |
You can’t connect to Oracle Content Server over Remote Intradoc Client (RIDC) using HTTPS. As an alternative, you can use a generic HTTPS connection but with this method the data size is limited.
|
Printer, Fax Server, HTTP Server, Proxy Server (Delivery Destinations) |
You must use Basic authentication to connect to Printer, Fax Server, HTTP Server, Proxy Server. You can’t use Digest authentication on these delivery channels. |
Secure FTP (Delivery Destination) |
You must use Password authentication to connect to SFTP. You can use Private Key authentication but you can’t use passphrase protected Private Key authentication. |
Not Supported on US Government Cloud (Analytics Publisher)
Feature Not Supported on US Government Cloud | Alternative |
---|---|
Desktop Tool | None. |
Desktop Tools on US Government Cloud
Oracle Analytics Cloud offers tools that you can run from your desktop.
Requirements for Desktop Tools on US Government Cloud
Desktop Tools | Security Requirements on US Government Cloud |
---|---|
Oracle Analytics Client Tools (including Model Administration Tool, and Catalog Manager) |
You must use login credentials (basic HTTP authentication) to sign-in and use these tools. |
BIJDBC Application |
You must use OAuth2 client credentials to sign-in and use these tools. You can't sign-in with login credentials (basic HTTP authentication). |
Features Not Available on US Government Cloud
Some features aren't available when you deploy Oracle Analytics Cloud on US Government Cloud.
Not Supported on US Government Cloud
Feature Not Supported on US Government Cloud | Alternative |
---|---|
Content delivery by email | None. |
Preview: Workbook email scheduler | None. |
Baidu maps | Use another Web Map Service (WMS) provider such as Google Maps to provide map backgrounds in your projects. See About Map Backgrounds. |
Oracle Analytics Mobile apps | Use any mobile web browser. Oracle Analytics Cloud is adaptive and responsive on mobile browsers. |
Useful Resources for Oracle Analytics Cloud on US Government Cloud
Here are some documentation links that you might find useful.
Documentation | Main Differences in US Government Cloud |
---|---|
Administering Oracle Analytics Cloud on Oracle Cloud Infrastructure (Gen 2) |
Ignore references to Oracle Identity Cloud Service. In US Government Cloud, you use identity domains in IAM to manage users and groups. |
Configuring Oracle Analytics Cloud |
Ignore references to Oracle Identity Cloud Service. In US Government Cloud, you use identity domains in IAM to manage users and groups. |
Connecting Oracle Analytics Cloud to Your Data |
For a list of FIPS-compliant data sources you can connect to, see Data Source Support on US Government Cloud. |
Modeling Data with Oracle Analytics Cloud |
There are a few differences in the way you connect and model data for pixel-perfect reports in US Government Cloud. See Requirements for Analytics Publisher on US Government Cloud. |
Visualizing and Reporting Data with Oracle Analytics Cloud |
There are a few feature differences in US Government Cloud. See Features Not Available on US Government Cloud. |
Pixel-perfect Reporting with Oracle Analytics Cloud |
There are a few differences in the way you connect to Oracle Analytics Publisher in US Government Cloud. See Requirements for Analytics Publisher on US Government Cloud. |
Typical Workflow for Oracle Analytics Cloud on US Government Cloud
If you’re setting up or using Oracle Analytics Cloud on a US government region for the first time, follow these tasks as a guide.
Task | Description | More Information |
---|---|---|
Place an order for Oracle Analytics Cloud or sign up for a free Oracle Cloud promotion |
Sign up for a free credit promotion or subscribe to Oracle Analytics Cloud through Universal Credits. |
|
Activate your Oracle Cloud account and sign in for the first time |
You receive a welcome email when your account is ready. To activate your account, you must sign in with the credentials provided in the email. As the Cloud Account Administrator, you can complete all the setup tasks for Oracle Analytics Cloud. |
|
Understand what's different in US Government Cloud |
Familiarize yourself with Oracle Analytics Cloud on US Government Cloud and appreciate any differences with commercial regions. |
Understand Oracle Analytics Cloud on US Government Cloud |
Determine your service requirements |
Plan your Oracle Analytics Cloud deployment. Think about what you need before you start. |
|
(Optional) Enable other users to set up services |
If you don’t want to set up Oracle Analytics Cloud yourself, give other users permissions to create services. |
Give Users Permissions to Manage Oracle Analytics Cloud (US Government) |
(Recommended) Create a compartment for your service |
Create a compartment for your Oracle Analytics Cloud deployment. |
|
Create a service |
Deploy a new service with Oracle Analytics Cloud. |
|
Verify your service |
When your service is ready, check that you can sign in and your service is up and running. |
|
Set up users and groups |
Set up users and groups for Oracle Analytics Cloud in your Oracle Cloud Infrastructure Identity and Access Management (IAM) identity domain and assign them to application roles. |
|
Set service-level options |
Configure service-level options in Oracle Analytics Cloud Console. |
|
Migrate content |
Leverage your existing content in Oracle Analytics Cloud. |
|
Administer services |
Monitor services through Oracle Cloud Infrastructure Console and perform administrative tasks such as pause, resume, scale, delete, and so on. Delegate administrative responsibilities to others through security policies. |
Give Users Permissions to Manage Oracle Analytics Cloud (US Government) |
Create an Oracle Analytics Cloud Instance (US Government)
To set up an Oracle Analytics Cloud instance on US Government Cloud, you must sign-in to your Oracle Cloud account as an IAM user and belong to an IAM group that is granted the required policies to create an Oracle Analytics Cloud instance.
As Cloud Account Administrator, you have full administration privileges in Oracle
Cloud Infrastructure so you can complete all aspects of Oracle Analytics Cloud setup
and much more. There’s no need to delegate this responsibility but, if you want to,
you can give someone else privileges to create and manage Oracle Analytics Cloud
instances through the manage analytics-instances
permission. See
Add Users and Groups (US Government) and Give Users Permissions to Manage Oracle Analytics Cloud (US Government).
Set Up Users, Groups, and Application Roles (US Government)
One of the first jobs you do after setting up a service with Oracle Analytics Cloud is to add user accounts in Oracle Cloud Infrastructure Identity and Access Management (IAM) for everyone you expect to use the service and then assign them suitable permissions in Oracle Analytics Cloud (also known as application roles).
-
Add users and groups.
You use Identity Domains pages (under Identity and Security) in Oracle Cloud Infrastructure Console to add users and groups. See Add Users and Groups (US Government).
- Assign users and groups to application roles in
Oracle
Analytics Cloud.
You use the Console (Users and Roles page) in your Oracle Analytics Cloud service to give users and groups suitable permissions through application roles. See Give Users and Groups Application Roles in Oracle Analytics Cloud (US Government).
Add Users and Groups (US Government)
In US Government Cloud, you use identity domains in IAM to manage users and groups for Oracle Analytics Cloud.
To learn how to create users in your identity domain and put them into one or more user groups, refer to the IAM documentation Working with Users and Working with Groups.
Give Users and Groups Application Roles in Oracle Analytics Cloud (US Government)
After setting up users and groups in IAM, you assign them suitable permissions in Oracle Analytics Cloud through application roles. Oracle Analytics Cloud provides several predefined application roles to get you started. In many cases, these predefined application roles are all that you need. See Predefined Application Roles.
To learn how to assign application roles, see Configure What Users Can See and Do.
Give Users Permissions to Manage Oracle Analytics Cloud (US Government)
In Oracle Cloud Infrastructure, you use security policies to control access to resources in your tenancy. For example, you can create a policy that authorizes users in Oracle Cloud Infrastructure Identity and Access Management (IAM) to create and manage Oracle Analytics Cloud instances on US Government Cloud.
The way you create policy statements for Oracle Analytics Cloud is the same on government and commercial regions. For details, read these topics in Administering Oracle Analytics Cloud on Oracle Cloud Infrastructure (Gen 2).
Migrate Content from Non-US Government Regions
You can migrate content and settings from one Oracle Analytics Cloud environment to another using a snapshot. For example, if you currently use Oracle Analytics Cloud in a commercial region, you might plan to migrate this content to your US Government region. Before you do so, take some time to understand any differences between the two environments and any impact on your content. For example, visualizations that use Baidu maps won't work in US Government regions.