Thursday, May 23, 2013

Exalogic Creating Users and Roles - Part 1

Dear Readers,

My name is Franz Devantier, creator of this blog.  I am an Oracle Certified Professional (OCP DBA 11g) Security DBA.  I will be sharing with you the basic duties of an Oracle DBA, and also some of the undocumented, and not so well known tasks. 

I will make a deal with you:  If you refer me to a company that needs database support, from a few hours per week to full time, and I am able to sign a contract with them.
Then I will give you 10% of the monthly contract or deal price every month.  When the contract ends, and we re-sign the contract, I will again give you 10% of the monthly contract price.  This will go on until the company no longer employs or contracts me or my agents to look after their databases.
I can do this, because that 10% is my marketing budget.  When we re-sign the contract, in the future, it may depend on you giving the thumbs up again, and that is worth 10% of the monthly contract price, to be given to you as commission.
Contact: Franz

Exalogic Creating Users and Roles -  Part 1 of 3
User Profiles

Role
Primary Responsibilities
Skills Required
Root user
Super user or a data center
administrator that creates the
Exalogic Systems Administrator.
The user must be an
experienced data center
administrator.
Exalogic Systems
Administrator (Exalogic
Systems Admin)
Administers and manages the
Exalogic machine platform.
The user must be familiar
with the Exalogic machine
management, Exalogic
machine network, and OS
management.
Cloud Administrator (Cloud
Admin)
Sets up the cloud
infrastructure and resource
allocation, so that Cloud Users
can deploy their applications
on to authorized Accounts.
Cloud Administrator also
manages the Cloud Users
accessing the Accounts and
their authorization.
The user must be familiar
with system administration,
including virtualization,
networking, and storage.
Cloud User
Uses the resources allocated to
them to create Virtual Servers
and deploy applications.
Cloud users are presented
only with the required options
in the Exalogic Control
browser user interface (BUI).
The user must be familiar
with hardware management,
network management,
virtualization, and OS
management in general.

Before You Begin
When the Exalogic Control is initiated and started by the Exalogic Configuration Utility (ECU), then a default root user account is created.

This root user must then create the Exalogic Systems Administrator in Exalogic Control.  When you create a user, the username and password are imported from the local directory on the VM hosting the Ops Center Enterprise Controller.  To make things work you must first add a user name to this local directory, before you can add it as a local user in Enterprise Manager Ops Cneter.

To create a local user on the VM hosting the Ops Center Enterprise Controller, you need to complete a number of steps.
-> firstly you need to run the following command to create a local user.
For example:
# useradd –d /export/home/ELAdmin –s /bin/bash –m ELAdmin
-> The second step is to create a password for the newly created local user ELAdmin.
For example:
# passwd ELAdmin
-> Repeat this procedure to create other local users, such as CloudAdmin, User1, User2, and etc, before adding them in the Exalogic Control BUI.

Creating the Exalogic System Administrator
There are a few steps to complete to create the Exalogic Systems Administrator role in the Exalogic Control.
1. Use the root user account to log in to the BUI of the Exalogic control:
http://<EMOC_IP>
<EMOC_IP> is the IP address that was assigned to the Enterprise Controller when running ECU to configure and bring up Exalogic Control.  Unless it has been changed, use the password “ovsroot”.
The URL is redirected to this URL:
https://<EMOC_IP>/emoc

2. On the home page, click the “Administration” option on the left navigation pane.

3. Under Enterprise Controller, click on the “Local Users” option.  The Local Users page is then displayed.
In order for a user to be created in Exalogic Control, make sure that the user exists on the virtual machine, where Enterprise Manager Ops Center Enterprise Controller is running.

4. Under the Users and Notification Profiles, click on the “Add User” icon.  You could also click “Add User” on the “Operate” pane.  In both cases the Add User screen is displayed.  


5.  In the User Name field enter the username, which you have validated was created on the OS environment.  For example  ELAdmin.

6.  Select the “Exalogic Systems Admin” role, the “Management Admin” role, and the “User Management Admin” role from the list of Available Roles on the left hand side, and move them to Selected Roles on the right hand side, by clicking the right arrow.
The “User Management Admin” role will allow the Exalogic Systems Administrator to manage users.

7. Click on the “Add User” button at the bottom of the screen.  The Exalogic Systems Administrator has now been created.  You don’t want more than one or two users who are created with the Exalogic Systems Administrator role.

8.  Log out as the root user, and you are done.

Franz Devantier,
Need a database health check, or a security audit?
devantierf@gmail.com

No comments:

Post a Comment