Practice - Testing Delegated Administration

Distribution
Oracle Applications System Administration

Job Title*

Ownership
The Job Title [list@YourCompany.com?Subject=Document1] is responsible for ensuring that
this document is necessary and that it reflects actual practice.

Copyright © Oracle, 2007. All rights reserved.

Practice - Testing Delegated Administration LAB3D83Y.DOC

Effective 07/04/02 Page 1 of 5 Rev 1
Practice - Testing Delegated Administration
Overview
In this practice, you will test delegated administration for the Course Administrator role.

Business Scenario:

Vision Inc. is a computer systems company. The company offers its customers a full range of
computer systems and office equipments. Additionally, the company offers an array of services to
support its customers' products. Vision has decided to implement Oracle User Management to
have a flexible and scalable system for managing access privileges and user accounts.

The company wants to distribute some of its security and administrative tasks to local
administrators instead of having the system administrator retain them exclusively. To accomplish
this, the company will create roles for a partner administrator, a security administrator, and a
customer administrator. Individuals who are assigned these roles will manage a discrete subset
of the company’s users, roles, and external contacts.

As part of the implementation team, you need to perform the following tasks:

 Create a Customer Administrator role

 Place this role in a role inheritance hierarchy

 Setup delegated Administration for the role

 Grant the User Maintenance UIs to the role

 Grant the appropriate permissions for the role so that assignees can perform specific
actions on the users they manage

 Create a registration process for the role so that users can self service request it

 Log on as a user and request the role

Assumptions
 Some parts of Oracle User Management have already been implemented including the
Partner Administrator and Security Administrator roles as well as the User Management
responsibility and several permissions.

 Oracle User Management ships with seeded roles including, Partner Administrator,
Security Administrator, and Customer Administrator. Assume for the purposes of this
course that the Customer Administrator role does not exist and the students must create
it.

Copyright © Oracle, 2007. All rights reserved.

Practice - Testing Delegated Administration LAB3D83Y.DOC

Effective 07/04/02 Page 2 of 5 Rev 1
  The user John Snyder (jsnyder@cds.com) exists in the system.

Tasks
Assigning the Course Administrator Role to a User

Query a user in the system and assign the user the Course Administrator role.

View Role Capabilities by Logging on as the User to Whom the Role is Assigned

Log on as the user to whom the role is assigned and view that user’s administrative capabilities

Copyright © Oracle, 2007. All rights reserved.

Practice - Testing Delegated Administration LAB3D83Y.DOC

Effective 07/04/02 Page 3 of 5 Rev 1
Solution – Testing Delegated Administration
Assigned Accounts:

Over the course of the next two practices, each workstation team will need to have individual
accounts that they (and only they) use. Without this exclusivity, students will collide during the
exercise. Please use the following email addresses to locate the user accounts assigned to your
workstation.

Number Account Email Name Company

1 betty.lewis@hilmanassoc.com Betty Lewis Hilman and Associates

2 hwolfschmidt@hilmanassoc.com Hilda Wolfschmidt Hilman and Associates

3 ely.alter@test.com Ely Alter A.C. Network

4 ckim@acnetworks.com Carlo Kim A.C. Network

5 jimjohnson_bworld@yahoo.com Jim Johnson Business World

6 bill_w_smith@yahoo.com Bill Smith Business World

7 sturakhi@bw.com Satish Turakhia Business World

8 skyzer@abccorp.com Stacey Kyzer ABC Corporation

Americas

9 lpetersent@ace.test.com Lydia Petersen Ace Communications

10 michaelzrobertson@yahoo.com Michael Robertson Business World

11 guest1_crm@hotmail.com Doug Jackson A.C. Networks

12 rabbott@visionhr.com Rachel Abbott PEL Consultants, LLP

13 jsnyder@cds.com John Snyder CDS, Inc.

14 swhaling@worldwidecomm.com Sean Whaling Worldwide

Communications

15 vtyagi@test.com Vishal Tyagi SmartBuy

Instructor Buddy.holly@test.com Bill Holly Big 4 Rental

Copyright © Oracle, 2007. All rights reserved.

Practice - Testing Delegated Administration LAB3D83Y.DOC

Effective 07/04/02 Page 4 of 5 Rev 1
Assigning the Course Administrator Role to a User

Responsibility: User Management Responsibility

1. (N) Users

2. Enter the following in the Email field of the search area and click the Go button.

- “<your assigned email address per list>”

3. The person with your assigned email address is displayed in the result set. Click the Create
User icon for this person.

Note: The name displayed in the search result is a person in the system and not a user. As
part of this procedure you will assign this person a user account that includes the Course
Administrator role.

4. Choose “Enter Manual” for the radio button.

5. Reset the user’s password by typing “welcome1” in the Password and Confirm Password
fields and click (B) Submit.

6. Query the user again by searching for your assigned user’s email address such as
‘jsnyder@cds.com’.

7. Click the Update icon next to the user and then click the (B) Assign Roles.

8. In the search window, search for the Course Administrator role. Select this role and click (B)
Select button.

9. Enter a justification in the Justification filed and click (B) Apply. You will see a
confirmation message indicating you have successfully updated the role.

Logging on as the User to Whom the Course Administrator Role is Assigned and
Viewing that User’s Administrative Capabilities

10. Log out of the system and log on as your assigneduser’s address by entering the following:

 User Name: your assigned email’s address (such as ‘jsnyder@cds.com’)

 Password: welcome1

11. When prompted, reset the user’s password from “welcome1” to “welcome”.

12. You should be able to view and use the User Maintenance UIs upon logging in.

Copyright © Oracle, 2007. All rights reserved.

Practice - Testing Delegated Administration LAB3D83Y.DOC

Effective 07/04/02 Page 5 of 5 Rev 1