Managing Oracle BAM Availability

24-10 Oracle Fusion Middleware Administrators Guide for Oracle SOA Suite and Oracle BPM Suite See Managing the Embedded LDAP Server in Oracle Fusion Middleware Securing Oracle WebLogic Server for information about configuring the embedded LDAP server.

24.3.5.1 Using the Oracle WebLogic Server Administration Console

Oracle WebLogic Server administration is performed using the Oracle WebLogic Server Administration Console at http:host_name:port_numberconsole Oracle WebLogic Server must be running to access the administration console. This console requires the user to log in with Oracle WebLogic Server administrator credentials. After successfully logging in, the user is placed at the Oracle WebLogic Server Administration Console home page.

24.3.5.2 Adding a Group

To add a group:

1. Go to Home Security Realms myrealm Users and Groups in Oracle

WebLogic Server Administration Console.

2. Select the Groups tab, and click New.

3. Enter the group name and description. Do not change the provider.

4. Click OK.

24.3.5.3 Adding a User

To add a user:

1. Go to Home Security Realms myrealm Users and Groups in Oracle

WebLogic Server Administration Console.

2. Select the Users tab, and click New.

3. Enter the user name, description, and login password. Do not change the provider.

4. Click OK.

24.3.5.4 Adding a User to a Group

To add a user to a group:

1. Go to Home Security Realms myrealm Users and Groups in Oracle

WebLogic Server Administration Console.

2. Select the Users tab, and select the user.

3. Select the Groups tab.

4. Move the groups from the Available list to the Chosen list. The Chosen list

represents the list of groups of which the user is now a member.

5. Click Save.

24.3.6 Populating Users in Oracle BAM Administrator

Users are not automatically populated in Oracle BAM Administrator by the security provider. The system administrator must either run the registerusers utility, or have users log in to the Oracle BAM start page by using the provided credentials, before they can be managed in Oracle BAM Administrator. Managing Oracle Business Activity Monitoring 24-11 Oracle BAM is a monitoring and analytics application that in implementation can support requirements to secure data, not only at the user and permissions level, but also at the row level for specific analytic data. Because of this requirement, Oracle BAM users require some management in Oracle BAM Administrator that is not provided in the standard Oracle WebLogic Server user management tool set. In order to configure these additional security features for a specific user, that user must be defined in Oracle BAM Administrator. See the following topics for more information: ■ Section 24.3.6.1, Using the Registerusers Utility ■ Section 24.3.6.2, Populating By User Login

24.3.6.1 Using the Registerusers Utility

The registerusers utility is a standalone Java application for registering users with Oracle BAM Server. Normally, Oracle BAM is not aware of a particular defined user until that user logs into Oracle BAM for the first time. On initial login, Oracle BAM looks up the user in the configured security provider, and synchronizes Oracle BAMs definition for that user with that of the configured security provider. This includes the user name, role membership, group membership, user properties for example, email address, and so on. Because Oracle BAM is not aware of defined users until they have logged in at least one time, it is not possible to perform certain Oracle BAM user configuration related to that user. For example, when defining data object permissions in Oracle BAM, the user is not present in the list of known users presented by the permission editor. The registerusers utility allows a user with Oracle BAM administrator-level privileges to register a list of users with Oracle BAM. The result of this registration is that these users are fully defined in Oracle BAM and available for further Oracle BAM user configuration, such as defining data object permissions. The users are only added to Oracle BAM if they are successfully authenticated with the security provider. The input to this utility is a simple list of white-space delimited user names. The registerusers utility confirms the successful registration of each user to standard out, and the failed registration of any user to standard error. The following is sample output from the registerusers utility: registerusers -file cmd_file.txt Enter Password: Connecting to BAM server as user weblogic. Registering users... Registration Succeeded For User: james. Registration Failed For User: jane. Reason: BAM-00400: Authentication failed. Registration Succeeded For User: adam. Registration Failed For User: bob. Reason: BAM-00400: Authentication failed. Registration Succeeded For User: bill. Registration Succeeded For User: barbara. Registration Succeeded For User: lynn. If the utility is executed without any arguments, then the command syntax is displayed to standard out. The syntax of the command is: registerusers -adminuser adminusername -adminpswd password -host host -port port -protocol protocol [-file filename]... [username]...