MSAMM
Back to course

Administering Cloud EPM: The Platform Beneath the Business Processes · Module 3 · Cloud Account, Identity Domains and Regions

Identity domains — the central decision

Lesson 25 of 201 · 2 min

An identity domain is the boundary within which users exist, groups are defined, roles are assigned, passwords are policed, and single sign-on is configured. Everything about WHO is domain-scoped. What that means practically, and the wording matters. A user in domain A does not exist in domain B. Not "cannot see" — does not exist. Two domains means two user records for the same human. Two password resets. Two access reviews. One identity domain for the EPM estate, unless there is a stated reason for more. Reasons that genuinely justify more than one. Legally separate entities that must not share an identity boundary. A regulatory requirement to segregate a population. Genuinely different password or sign-on policy requirements that cannot coexist. Non-production identity separated from production as a deliberate security control. And reasons that do not. "Different business units." "Different business processes." "The consultant set it up that way." "It feels…

The full lesson is part of the course

The video, the complete written lesson and the module quiz are included in Administering Cloud EPM: The Platform Beneath the Business Processes, with a certificate on completion and a fourteen-day refund window.

See the course and enrol9 free lessons

Get the free lessons by email

We will email you a link to every free lesson in this course. No account needed, and one message only.

In this module: Module 3 · Cloud Account, Identity Domains and Regions

  1. 1What we are building
  2. 2The decisions you cannot undo
  3. 3The identity object model
  4. 4Identity domains — the central decision
  5. 5Regions and data residency
  6. 6Compartments
  7. 7Running the estate design workshop
  8. 8Four worked estate structures
  9. 9Activating: creating a new cloud account
  10. 10Activating: adding to an existing account
  11. 11Touring the Oracle Cloud Console
  12. 12Enabling multifactor authentication
  13. 13Subscribing to and replicating regions
  14. 14Creating a compartment
  15. 15Creating an identity domain
  16. 16Identity domain administrators
  17. 17What breaks
  18. 18Lab briefing: Northwind Group
  19. 19Lab solution walkthrough