The identity object model

Seven objects, built up and then shown whole. Cloud account — the commercial and administrative container, where subscriptions attach and where billing sits. Region — the geography, where data resides and where environments are provisioned. Identity domain — the identity boundary: users, groups, application roles, password policies, SSO configuration, sign-on policies. Compartment — a logical grouping of resources within a tenancy, used to organize resources and control access to them. Environment — an instance of Cloud EPM or Cloud EDM. Hosts one business process. Application roles — the permissions granted within an environment, assigned to users and groups in the identity domain. Policies — the rules governing what a group can do with resources. Now trace one person through it. A user in identity domain X, in a group, granted an application role on environment Y, which sits in compartment Z, in region R, under cloud account A. If it…

In this module: Module 3 · Cloud Account, Identity Domains and Regions

1. 1What we are building
2. 2The decisions you cannot undo
3. 3The identity object model
4. 4Identity domains — the central decision
5. 5Regions and data residency
6. 6Compartments
7. 7Running the estate design workshop
8. 8Four worked estate structures
9. 9Activating: creating a new cloud account
10. 10Activating: adding to an existing account
11. 11Touring the Oracle Cloud Console
12. 12Enabling multifactor authentication
13. 13Subscribing to and replicating regions
14. 14Creating a compartment
15. 15Creating an identity domain
16. 16Identity domain administrators
17. 17What breaks
18. 18Lab briefing: Northwind Group
19. 19Lab solution walkthrough