Exalogic Virtual Tea Break Snippets – Creating Cloud Users

Introduction

This blog entry describes how to create cloud users on Exalogic.

Main Article

Creating Cloud Users and Administrators will be one of the first tasks when setting up a new Exalogic 2.1 environment. We will step through the simple process of creating users and describe a few key user types. Initially we will need to login as either the root user or the exl-admin user.

Before adding users to the Exalogic 2.1 environment they must exist as either local users on the physical machine running the Exalogic Control Virtual Server or existing within an appropriate repository, LDAP etc, used by the machine for authentication. This is required because Enterprise Manager Ops Centre 12c (EMOC) does not store any account authorisation information instead this is left tot he underlying OS. It is assumed within this blog that this has been done.

To create a user simply open the “Administration” Accordion (Drawer), expand the Enterprise Controller then select “Local Users. This will present you with the following

UserAdministration

You can see from the image that we have 3 options for Adding a user and selection of any of these will display the following Dialog.

AddUser

As mentioned earlier the User Name must match that of an OS based account to provide the authentication but we will need to specify the  EMOC account Roles and these will defined what functionality the new user can access.

Cloud Administrator

CloudAdminAccordionThis user type can be created by adding the “Cloud Admin” to the selected roles, when creating a user, and will provide access to the Management functionality below vDC Management thus allowing for the creation of new accounts and resources. It should be noted that a Cloud Administrator can administer all user accounts within the system.

Cloud User

CloudUserAccordionThe Cloud User is allowed to simply access the vDC accounts that they have been given access to by a Cloud Administrator. For each of the accounts they will be able to:

  • Create Private vNets
  • Create vServers
  • Manage vServer Life Cycle
  • ManageVolumes
  • Create Distribution Groups
  • Upload Templates

In general their will be many Users to limited Administrators.

Network Administrator

NetworkAdminAccordion

The Network Administrator will be used to create additional EoIB networks to be used by the Virtual Servers to access the external network. Although by default the  installation of Exalogic 2.1 will provide a small EoIB management network this is not intended to be used for external access from within Virtual Servers. Instead 1 or more VLAN Tagged networks should be created prior to building the Virtual Server infrastructure.

Role Permissions

UserRoles

This entry was originally posted on the The Old Toxophilist Site.

Add Your Comment