Configuration and Administration
Domains provide the ability to keep databases separate and secure in a shared, web-based environment. The Domain Manager enables administrators to organize and manage the domain structure of their installations.
There is considerable flexibility in the domain structure, so the database can be customized to the particular needs of many types of organizations. Top-level domains and subdomains, with a variety of access grants, can be created and maintained.
By default, domains have read/write access to their subdomains, but subdomains do not have access to their parent domains unless it is granted to them. Using the Domain Grants option, administrators can grant access from subdomains to domains, and between domains for increased functional security.
Access between domains can be granted automatically using the Auto Grantee and Auto Grantor Managers.
Even more precise access to data, across and within domains, can be controlled using the VPD Manager.
After installation, the following default domains are automatically created:
GUEST is a sample domain that you can use to get started and experiment with all the functions and public data.
SERVPROV is a special domain for use with service providers. Special logic is built-in to provide security for service providers that access OTM for web tendering. This is the domain that must be used for all service providers.
PUBLIC is a global data domain.
EBS is a domain that contains some sample templates for business flows for sales orders, purchase order and freight payment integration with E-Business Suite (EBS). For example, there are agents that can be used as samples for creating agents for integrating with EBS. Do not use the existing agents, but copy them and use the copied agents. Also, there are additional shipment statuses: SENT TO EBS and SHIP CONFIRM for EBS integration.
E1 is a domain that contains some sample templates for business flows for integration with JD Edwards Enterprise 1(E1). For example, there are agents that can be used as samples for creating agents for integrating with E1. Do not use the existing agents, but copy them and use the copied agents. Also, there are additional external statuses: SEND TO E1 and SHIP CONFIRM for E1 integration.
At installation, two preset users are also automatically created: DBA.ADMIN and GUEST.ADMIN. Both preset users have ADMIN user level access privileges, but DBA.ADMIN is a unique user with even greater privileges, such as the ability to add top-level domains and modify Public data.
The passwords for the preset users are available from Technical Support. As soon as possible, log in to the new domain and change the passwords for DBA.ADMIN and GUEST.ADMIN. To change their passwords, use Manage User in the User Manager.
When you change the password of a default user, log out and log in before performing other security functions.
The Create New Domain page is accessed via Configuration and Administration > Domain Management > Add Domain.
Subdomains are used to organize data. The concept of a subdomain can overlap with a "lite" domain. A subdomain represents data that is based on the data in a parent domain. For example, you have three customers using OTM. None of their data should overlap so you create three separate subdomains of your primary domain, one for each of them. These three domains will not share domain-specific data with each other, but they all share the base data that they inherited from the parent domain. You have the option of making the subdomains to be standalone or lite (see below). If you choose a lite domain, then only required data is copied to the subdomains and you must specify a referential domain for them where the common data is to be stored. Using the preceding example, you may choose to make each of the subdomains to be lite domains so that common data, such as statuses, is not duplicated into each subdomain, saving disk space.
Only users with ADMIN user level access can add subdomains to existing domains. As a subset of one or more domains, a subdomain can cross over domains or it can be in a parent/child relationship to a single domain.
A domain can have many subdomains. For example, the domain XYZCO could have subdomains XYZCO\SERVICE_PROVIDERS and XYZCO\CUSTOMERS. Notice the forward slash separating the parent domain from the child subdomain. A Domain Name must abide by the rules for Oracle databases. Only the DBA.ADMIN user can add new top-level domains.
Enter a subdomain name.
Find or create a default user role. This field defines the default user role that is automatically assigned to each user added to the domain.
Find or create a default document use profile.
If you do not specify a lite domain/reference domain when adding a domain then a standalone domain will be created.
If you want to create a lite domain, select a reference domain from the drop-down list.
If you want to create a standalone domain, do not select a reference domain.
Click Add Subdomain.
If you want to copy data from another domain, enter the domain to copy from in the Copy-From Domain or Copy-From Subdomain field depending on how you are logged in. This provides the capability to copy data from domain to domain on the same database. This is limited to coping small amounts of initial data between domains. You can set domaincopy properties so you can define what to copy.
Domain Name Rules