Administering Cloud EPM: The Platform Beneath the Business Processes · Module 3 · Cloud Account, Identity Domains and Regions
Identity domain administrators
Lesson 37 of 201 · 10 min
Show the administrator roles available in an identity domain and what each one can do. Grant domain administration to a second account, and show the difference between a cloud account administrator and an identity domain administrator. Then verify by signing in as the new administrator. Cloud account administrator and identity domain administrator are not the same role. Conflating them is how people over-grant. Two administrators, minimum. One is a single point of failure with a holiday schedule. Grant the narrowest administrator role that does the job. "Administrator" is not one thing here, and the specific roles exist for a reason. Record who holds domain administration and review it. This is the first entry in an access review that Module 6 will build out properly.
The full lesson is part of the course
The video, the complete written lesson and the module quiz are included in Administering Cloud EPM: The Platform Beneath the Business Processes, with a certificate on completion and a fourteen-day refund window.
In this module: Module 3 · Cloud Account, Identity Domains and Regions
- 1What we are building
- 2The decisions you cannot undo
- 3The identity object model
- 4Identity domains — the central decision
- 5Regions and data residency
- 6Compartments
- 7Running the estate design workshop
- 8Four worked estate structures
- 9Activating: creating a new cloud account
- 10Activating: adding to an existing account
- 11Touring the Oracle Cloud Console
- 12Enabling multifactor authentication
- 13Subscribing to and replicating regions
- 14Creating a compartment
- 15Creating an identity domain
- 16Identity domain administrators
- 17What breaks
- 18Lab briefing: Northwind Group
- 19Lab solution walkthrough