Set Up Users

About Setting Up Users and Groups

The way you manage users for Oracle Analytics Cloud (and Oracle Cloud Infrastructure) depends whether identity domains are available in your cloud account.

Oracle Cloud Infrastructure Identity and Access Management (IAM) Identity Domains: Some Oracle Cloud regions have been updated to use identity domains. If you have a new cloud account in one of these regions, you use identity domains to manage the users who perform tasks in both Oracle Analytics Cloud and Oracle Cloud Infrastructure.
Oracle Identity Cloud Service: If you have an existing cloud account or you deploy Oracle Analytics Cloud in a region that doesn't currently offer identity domains, you use a federated Oracle Identity Cloud Service to manage the users who perform tasks in Oracle Analytics Cloud. In addition, you use Oracle Cloud Infrastructure Identity and Access Management to manage the users who create and manage your Oracle Analytics Cloud deployments using the Oracle Cloud Infrastructure Console.

It's easy to determine whether or not your cloud account offers identity domains. In Oracle Cloud Infrastructure Console, navigate to Identity & Security. Under Identity, check for Domains.

Identity & Security category showing Domains

If you see Domains, you use identity domains to manage users and groups for Oracle Cloud Infrastructure and your Oracle Analytics Cloud deployments. See Use Identity Domains to Set Up Users and Groups for Oracle Analytics Cloud.
If Domains isn't listed, you use a federated Oracle Identity Cloud Service to manage Oracle Analytics Cloud users and IAM to manage Oracle Cloud Infrastructure users. See Use Oracle Identity Cloud Service to Set Up Users and Groups for Oracle Analytics Cloud.

The following table outlines the differences between the two configurations.

Cloud Accounts That Use Identity Domains	Cloud Accounts That Don't Use Identity Domains
Users and groups are configured in IAM.	Users and groups are configured in both IAM and Oracle Identity Cloud Service, and are linked through federation.
Provides a single, unified console for managing users, groups, dynamic groups, and applications in domains.	Oracle Cloud Infrastructure Identity and Access Management must be federated with Oracle Identity Cloud Service.
Provides Single Sign-On to more applications using a single set of credentials and a unified authentication process.	Requires separate federated credentials for Oracle Identity Cloud Service.
The Federation page doesn't list any entries for Oracle Identity Cloud Service.	The Federation page lists oracleidentitycloudservice, the primordial Oracle Identity Cloud Service automatically federated in your cloud account.

Use Identity Domains to Set Up Users and Groups for Oracle Analytics Cloud

If your Oracle Analytics Cloud instance uses identity domains for identity management, you use Oracle Cloud Infrastructure Console to set up and manage user accounts for everyone you expect to use Oracle Analytics Cloud. After setting up the users and groups, you use the Console in Oracle Analytics Cloud to assign them suitable permissions (also known as application roles)

If you're not sure whether your Oracle Analytics Cloud instance uses identity domains, see About Setting Up Users and Groups.

Use the Identity Domain page in Oracle Cloud Infrastructure Console to add users and groups.

See Managing Users and Managing Groups in Oracle Cloud Infrastructure documentation.
Use Oracle Analytics Cloud to assign permissions to users and groups through application roles.

See Manage What Users Can See and Do in Configuring Oracle Analytics Cloud.

Use Oracle Identity Cloud Service to Set Up Users and Groups for Oracle Analytics Cloud

If your Oracle Analytics Cloud instance uses Oracle Identity Cloud Service for identity management, you use the Console in Oracle Identity Cloud Service to set up and manage user accounts for everyone you expect to use Oracle Analytics Cloud. After setting up the users and groups, you use the Console in Oracle Analytics Cloud to assign them suitable permissions (also known as application roles).

If you're not sure whether your Oracle Analytics Cloud instance uses Oracle Identity Cloud Service, see About Setting Up Users and Groups.

Use Oracle Identity Cloud Service to add users and groups.

See Manage Users and Groups in Oracle Identity Cloud Service in Administering Oracle Identity Cloud Service.
Use Oracle Analytics Cloud to assign permissions to users and groups through application roles.

See Manage What Users Can See and Do in Configuring Oracle Analytics Cloud.