Deploy Oracle Analytics Cloud on US Government Cloud

2 Deploy Oracle Analytics Cloud on US Government Cloud

Let's explore how to deploy Oracle Analytics Cloud on Oracle Cloud Infrastructure in US Government Cloud.

Topics

Understand Oracle Analytics Cloud on US Government Cloud

Oracle Analytics Cloud is available on Oracle Cloud Infrastructure in several US government regions. Your Oracle Analytics Cloud experience on US government regions is slightly different to commercial regions. This topic highlights any differences or restrictions.

Topics

Tenancies on US Government Cloud Created Before January 2023

Oracle Analytics Cloud uses identity domains in Oracle Cloud Infrastructure Identity and Access Management (IAM) to manage users. Identity domains are available in all US government tenancies created after January 17 2023.

If you want to use Oracle Analytics Cloud in a tenancy created before this date, do one of the following:

Wait until your tenancy is upgraded to include identity domains.
Create a new child tenancy (which includes identity domains) and use Oracle Analytics Cloud in the new child tenancy. See Creating a New Child Tenancy.

How do I know whether my tenancy includes identity domains?

It's easy to determine whether or not your tenancy offers identity domains. In Oracle Cloud Infrastructure Console, navigate to Identity & Security. Under Identity, check for Domains.

If you see the Domains option, identity domains are available in the tenancy so you can use Oracle Analytics Cloud. See Set Up Users, Groups, and Application Roles (US Government).
If the Domains doesn’t appear in the list, identity domains aren't available in the tenancy.

Description of oci_console_iam-domains.png follows

Description of the illustration oci_console_iam-domains.png

Identity Management on US Government Cloud

In US Government Cloud, administrators must use identity domains in Oracle Cloud Infrastructure Identity and Access Management (IAM) to manage users and groups for Oracle Analytics Cloud.

Refer to the IAM documentation to learn how to add users and groups using the Oracle Cloud Infrastructure Console. See IAM with Idenity Domains.

When users and groups are set up, administrators can use the Application Roles page in Oracle Analytics Cloud to give individuals and groups permissions in Oracle Analytics Cloud. See Configure What Users Can See and Do.

Note:

As a US Government customer, you can ignore all references to Oracle Identity Cloud Service in Oracle Analytics Cloud documentation. Only Commercial and UK Government regions use Oracle Identity Cloud Service.

Users and Roles Pages in Oracle Analytics Cloud Console

Administrators determine what users can see and do in Oracle Analytics Cloud by assigning various application roles from the Users and Roles page in the Console.

This page presents user information in three different views:

Users and Roles Page	Description
Users	Lists users from the identity domain associated with your Oracle Analytics Cloud instance. From the Users tab, you can: Discover the groups and application roles that each user directly belongs to. Add or remove application roles assigned to a user. Generate a report that lists the groups or application roles assigned to a user, either directly or indirectly. You can’t add or remove user accounts through the Users tab. Use Oracle Cloud Infrastructure Identity and Access Management to manage user accounts.
Roles	Lists user groups from the identity domain associated with your Oracle Analytics Cloud instance. From the Groups tab, you can: Discover the members (users or groups) directly assigned to each group. Discover the application roles or any other groups that a group directly belongs to. Add or remove application roles assigned to a group. Generate a report that lists the users assigned to a group, either directly or indirectly. Generate a report that lists the application roles (or other groups) a group belongs to, either directly or indirectly. You can’t add or remove user groups through the Groups tab. Use Oracle Cloud Infrastructure Identity and Access Management to manage user groups.
Application Roles	Displays the predefined application roles for Oracle Analytics and any user-defined application roles that you add. From the Application Roles tab, you can: Discover the members (users, groups, application roles) directly assigned to each application role. Add members or remove members from each application role. Discover whether an application role inherits permissions from other application roles. Add or remove memberships for each application role. Displays the predefined application roles for Oracle Analytics and any user-defined application roles that you add.

Users and Roles Page

Description

Users

Lists users from the identity domain associated with your Oracle Analytics Cloud instance.

From the Users tab, you can:

Discover the groups and application roles that each user directly belongs to.
Add or remove application roles assigned to a user.
Generate a report that lists the groups or application roles assigned to a user, either directly or indirectly.

You can’t add or remove user accounts through the Users tab. Use Oracle Cloud Infrastructure Identity and Access Management to manage user accounts.

Roles

Lists user groups from the identity domain associated with your Oracle Analytics Cloud instance.

From the Groups tab, you can:

Discover the members (users or groups) directly assigned to each group.
Discover the application roles or any other groups that a group directly belongs to.
Add or remove application roles assigned to a group.
Generate a report that lists the users assigned to a group, either directly or indirectly.
Generate a report that lists the application roles (or other groups) a group belongs to, either directly or indirectly.

You can’t add or remove user groups through the Groups tab. Use Oracle Cloud Infrastructure Identity and Access Management to manage user groups.

Application Roles

Displays the predefined application roles for Oracle Analytics and any user-defined application roles that you add.

From the Application Roles tab, you can:

Discover the members (users, groups, application roles) directly assigned to each application role.
Add members or remove members from each application role.
Discover whether an application role inherits permissions from other application roles.
Add or remove memberships for each application role.
Displays the predefined application roles for Oracle Analytics and any user-defined application roles that you add.

Data Source Support on US Government Cloud

Federal Information Processing Standards (FIPS) mandate specific security requirements to ensure secure communication and protect sensitive data. When you deploy Oracle Analytics Cloud on US Government Cloud, you can connect to several data sources that comply with FIPS.

FIPS-Compliant Data Source	Version	More Information
Oracle Autonomous Data Warehouse	18.2.4-20 and later 19c	Connect to Oracle Autonomous Data Warehouse
Oracle Autonomous Transaction Processing	19c	Connect to Oracle Autonomous Transaction Processing
Oracle Fusion Cloud Applications Suite	11.1.1.9+ or Oracle Fusion Cloud Applications Release 8 and later *	Connect to Oracle Fusion Cloud Applications Suite *FIPS requires SSL
Oracle Database	12.1+ 12.2+ 18+ 19+	Connect to an Oracle Database
Oracle Essbase	11.1.2.4.0+ 21c	Connect to Essbase
CSV File	-	Create a Dataset from a File Uploaded from Your Computer
Local Subject Area (in Oracle Analytics Cloud)	-	Create a Dataset from a Local Subject Area
Microsoft Excel File	-	Create a Dataset from a File Uploaded from Your Computer

Oracle Analytics Publisher on US Government Cloud

Oracle Analytics Cloud offers pixel-perfect reporting using Oracle Analytics Publisher.

Requirements for Analytics Publisher on US Government Cloud

Feature in Analytics Publisher	Special Security Requirements on US Government Cloud
REST Service	You must use an Auth Token to connect to Oracle Analytics Publisher’s REST service. You can’t use Basic authentication.
SOAP Web Services	You can’t use login credentials to connect to Oracle Analytics Publisher’s SOAP web services. As an alternative, connect to SOAP web services using an Auth Token.
Oracle Content Server Connectivity	You can’t connect to Oracle Content Server over Remote Intradoc Client (RIDC) using HTTPS. As an alternative, you can use a generic HTTPS connection but with this method the data size is limited.
Printer, Fax Server, HTTP Server, Proxy Server (Delivery Destinations)	You must use Basic authentication to connect to Printer, Fax Server, HTTP Server, Proxy Server. You can’t use Digest authentication on these delivery channels. See Set Up Delivery Destinations.
Secure FTP (Delivery Destination)	You must use Password authentication to connect to SFTP. You can use Private Key authentication but you can’t use passphrase protected Private Key authentication. See Add an FTP or SFTP Server.

Not Supported on US Government Cloud (Analytics Publisher)

Feature Not Supported on US Government Cloud	Alternative
Desktop Tool	None.

Desktop Tools on US Government Cloud

Oracle Analytics Cloud offers tools that you can run from your desktop.

Requirements for Desktop Tools on US Government Cloud

Desktop Tools	Security Requirements on US Government Cloud
Oracle Analytics Client Tools (including Model Administration Tool, and Catalog Manager)	You must use login credentials (basic HTTP authentication) to sign-in and use these tools.
BIJDBC Application	You must use OAuth2 client credentials to sign-in and use these tools. You can't sign-in with login credentials (basic HTTP authentication).

Desktop Tools

Security Requirements on US Government Cloud

Oracle Analytics Client Tools

(including Model Administration Tool, and Catalog Manager)

You must use login credentials (basic HTTP authentication) to sign-in and use these tools.

BIJDBC Application

You must use OAuth2 client credentials to sign-in and use these tools. You can't sign-in with login credentials (basic HTTP authentication).

Features Not Available on US Government Cloud

Some features aren't available when you deploy Oracle Analytics Cloud on US Government Cloud.

Not Supported on US Government Cloud

Feature Not Supported on US Government Cloud	Alternative
Content delivery by email	None.
Preview: Workbook email scheduler	None.
Baidu maps	Use another Web Map Service (WMS) provider such as Google Maps to provide map backgrounds in your projects. See About Map Backgrounds.
Oracle Analytics Mobile apps	Use any mobile web browser. Oracle Analytics Cloud is adaptive and responsive on mobile browsers.

Useful Resources for Oracle Analytics Cloud on US Government Cloud

Here are some documentation links that you might find useful.

Documentation	Main Differences in US Government Cloud
Administering Oracle Analytics Cloud on Oracle Cloud Infrastructure (Gen 2)	Ignore references to Oracle Identity Cloud Service. In US Government Cloud, you use identity domains in IAM to manage users and groups.
Configuring Oracle Analytics Cloud	Ignore references to Oracle Identity Cloud Service. In US Government Cloud, you use identity domains in IAM to manage users and groups.
Connecting Oracle Analytics Cloud to Your Data	For a list of FIPS-compliant data sources you can connect to, see Data Source Support on US Government Cloud.
Modeling Data with Oracle Analytics Cloud	There are a few differences in the way you connect and model data for pixel-perfect reports in US Government Cloud. See Requirements for Analytics Publisher on US Government Cloud.
Visualizing and Reporting Data with Oracle Analytics Cloud	There are a few feature differences in US Government Cloud. See Features Not Available on US Government Cloud.
Pixel-perfect Reporting with Oracle Analytics Cloud	There are a few differences in the way you connect to Oracle Analytics Publisher in US Government Cloud. See Requirements for Analytics Publisher on US Government Cloud.

Typical Workflow for Oracle Analytics Cloud on US Government Cloud

If you’re setting up or using Oracle Analytics Cloud on a US government region for the first time, follow these tasks as a guide.

Task	Description	More Information
Place an order for Oracle Analytics Cloud or sign up for a free Oracle Cloud promotion	Sign up for a free credit promotion or subscribe to Oracle Analytics Cloud through Universal Credits. See Data Regions for Platform and Infrastructure Services.	Request and Manage Free Oracle Cloud Promotions Upgrade to a Paid Account
Activate your Oracle Cloud account and sign in for the first time	You receive a welcome email when your account is ready. To activate your account, you must sign in with the credentials provided in the email. As the Cloud Account Administrator, you can complete all the setup tasks for Oracle Analytics Cloud.	Signing in for the First Time
Understand what's different in US Government Cloud	Familiarize yourself with Oracle Analytics Cloud on US Government Cloud and appreciate any differences with commercial regions.	Understand Oracle Analytics Cloud on US Government Cloud
Determine your service requirements	Plan your Oracle Analytics Cloud deployment. Think about what you need before you start.	Plan Your Service
(Optional) Enable other users to set up services	If you don’t want to set up Oracle Analytics Cloud yourself, give other users permissions to create services.	Give Users Permissions to Manage Oracle Analytics Cloud (US Government)
(Recommended) Create a compartment for your service	Create a compartment for your Oracle Analytics Cloud deployment.	Create a compartment
Create a service	Deploy a new service with Oracle Analytics Cloud.	Create an Oracle Analytics Cloud Instance (US Government)
Verify your service	When your service is ready, check that you can sign in and your service is up and running.	Verify Your Service and Sign-In
Set up users and groups	Set up users and groups for Oracle Analytics Cloud in your Oracle Cloud Infrastructure Identity and Access Management (IAM) identity domain and assign them to application roles.	Set Up Users, Groups, and Application Roles (US Government)
Set service-level options	Configure service-level options in Oracle Analytics Cloud Console.	Configure Options for Your Service
Migrate content	Leverage your existing content in Oracle Analytics Cloud.	Migrate Content from Non-US Government Regions
Administer services	Monitor services through Oracle Cloud Infrastructure Console and perform administrative tasks such as pause, resume, scale, delete, and so on. Delegate administrative responsibilities to others through security policies.	Administer Services Give Users Permissions to Manage Oracle Analytics Cloud (US Government)

Create an Oracle Analytics Cloud Instance (US Government)

To set up an Oracle Analytics Cloud instance on US Government Cloud, you must sign-in to your Oracle Cloud account as an IAM user and belong to an IAM group that is granted the required policies to create an Oracle Analytics Cloud instance.

As Cloud Account Administrator, you have full administration privileges in Oracle Cloud Infrastructure so you can complete all aspects of Oracle Analytics Cloud setup and much more. There’s no need to delegate this responsibility but, if you want to, you can give someone else privileges to create and manage Oracle Analytics Cloud instances through the manage analytics-instances permission. See Add Users and Groups (US Government) and Give Users Permissions to Manage Oracle Analytics Cloud (US Government).

Sign in to Oracle Cloud.

Description of the illustration console_oac_signin_usgov.jpg
In the upper corner, note your selected region.

Oracle Analytics Cloud instances are visible only in the region in which you create them.

Description of the illustration oac_gov-region.jpg
To create an Oracle Analytics Cloud instance, follow the steps in Create a Service.
When you're asked to select Capacity (the size of your deployment), you must select the capacity type that matches your subscription.

Set Up Users, Groups, and Application Roles (US Government)

One of the first jobs you do after setting up a service with Oracle Analytics Cloud is to add user accounts in Oracle Cloud Infrastructure Identity and Access Management (IAM) for everyone you expect to use the service and then assign them suitable permissions in Oracle Analytics Cloud (also known as application roles).

Add users and groups.

You use Identity Domains pages (under Identity and Security) in Oracle Cloud Infrastructure Console to add users and groups. See Add Users and Groups (US Government).
Assign users and groups to application roles in Oracle Analytics Cloud.
You use the Console (Users and Roles page) in your Oracle Analytics Cloud service to give users and groups suitable permissions through application roles. See Give Users and Groups Application Roles in Oracle Analytics Cloud (US Government).

Add Users and Groups (US Government)

In US Government Cloud, you use identity domains in IAM to manage users and groups for Oracle Analytics Cloud.

To learn how to create users in your identity domain and put them into one or more user groups, refer to the IAM documentation Working with Users and Working with Groups.

Give Users and Groups Application Roles in Oracle Analytics Cloud (US Government)

After setting up users and groups in IAM, you assign them suitable permissions in Oracle Analytics Cloud through application roles. Oracle Analytics Cloud provides several predefined application roles to get you started. In many cases, these predefined application roles are all that you need. See Predefined Application Roles.

To learn how to assign application roles, see Configure What Users Can See and Do.

Give Users Permissions to Manage Oracle Analytics Cloud (US Government)

In Oracle Cloud Infrastructure, you use security policies to control access to resources in your tenancy. For example, you can create a policy that authorizes users in Oracle Cloud Infrastructure Identity and Access Management (IAM) to create and manage Oracle Analytics Cloud instances on US Government Cloud.

The way you create policy statements for Oracle Analytics Cloud is the same on government and commercial regions. For details, read these topics in Administering Oracle Analytics Cloud on Oracle Cloud Infrastructure (Gen 2).

Topics

Migrate Content from Non-US Government Regions

You can migrate content and settings from one Oracle Analytics Cloud environment to another using a snapshot. For example, if you currently use Oracle Analytics Cloud in a commercial region, you might plan to migrate this content to your US Government region. Before you do so, take some time to understand any differences between the two environments and any impact on your content. For example, visualizations that use Baidu maps won't work in US Government regions.

See Understand Oracle Analytics Cloud on US Government Cloud.