Creating and Modifying Users with the Provisioning Console

12-18 Oracle Fusion Middleware Administrators Guide for Oracle Directory Integration Platform

12.7.3 Provisioning Administration Privileges

For administrators with provisioning privileges, Create, Delete, and Edit buttons are available in the Provisioning Console for performing user creation, deletion, and modification. However, unlike the single-step procedures that occur for administrators with Oracle Delegated Administration Services privileges, wizard-based procedures perform creation and modification for administrators with provisioning privileges. User deletion is performed with the same single-step procedure that is available with Oracle Delegated Administration Services privileges, as described in Oracle Delegated Administration Services Privileges on page 12-17.

12.7.4 Application Administration Privileges

For administrators with application administration privileges, but not Oracle Delegated Administration Services privileges or provisioning privileges, Create and Delete buttons are not available in the Provisioning Console. However, there is an Edit button that launches the same wizard that is available with provisioning administration privileges, as described in Provisioning Administration Privileges on page 12-18. If the application administrator does not have provisioning privileges, then the first page in the wizard, which is used for general user provisioning, is read-only. Yet, the application administrator can modify the application provisioning attributes that are available on other pages in the wizard.

12.7.5 Oracle Delegated Administration Services and Provisioning Administration Privileges

Administrators with Oracle Delegated Administration Services privileges and provisioning privileges have the same rights that are available with provisioning administration privileges, as described in Provisioning Administration Privileges on page 12-18.

12.7.6 Application Administration and Oracle Delegated Administration Services Privileges

This section explains how privileges are delegated if an administrator is assigned various Oracle Delegated Administration Services privileges and also has administrative privileges. 12.7.6.1 Application Administration Privileges and Oracle Delegated Administration Services User Creation Privileges For application administrators with user creation privileges in Oracle Delegated Administration Services, but not user editing or deletion privileges, the Create and Edit buttons are available in the Provisioning Console, but not the Delete button. User creation is performed with the same wizard-based procedure that is available with provisioning administration privileges, as described in Provisioning Administration Privileges on page 12-18. User editing privileges are the same as those available with application administration privileges, as described in Application Administration Privileges on page 12-18. 12.7.6.2 Application Administration Privileges and Oracle Delegated Administration Services User Editing Privileges For application administrators with user editing privileges in Oracle Delegated Administration Services, but not user creation or deletion privileges, the Edit button is available in the Provisioning Console, but not the Create or Delete buttons. User Understanding the Oracle Directory Integration Platform for Provisioning 12-19 editing is performed with the same wizard-based procedure that is available with provisioning administration privileges, as described in Provisioning Administration Privileges on page 12-18. 12.7.6.3 Application Administration Privileges and Oracle Delegated Administration Services User Deletion Privileges For application administrators with user deletion privileges in Oracle Delegated Administration Services, but not user creation or modification privileges, the Delete and Edit buttons are available in the Provisioning Console, but not the Create button. User deletion is performed with the same single-step procedure that is available with Oracle Delegated Administration Services privileges, as described in Oracle Delegated Administration Services Privileges on page 12-17. User editing is performed with the same wizard-based procedure that is available with provisioning administration privileges, as described in Provisioning Administration Privileges on page 12-18.

12.7.7 Provisioning and Application Administration Privileges

Administrators with provisioning privileges and application administration privileges have the same rights that are available with provisioning administration privileges, as described in Provisioning Administration Privileges on page 12-18. 12.7.8 Oracle Delegated Administration Services, Provisioning, and Application Administration Privileges Administrators with Oracle Delegated Administration Services privileges and application administration privileges have the same rights that are available with provisioning administration privileges, as described in Application Administration Privileges on page 12-18.