Oracle B32100-01 - Manual (Page 93)

Groups in Oracle Internet Directory
Configuring Oracle Internet Directory for Oracle Application Server Installation Privileges 5-3
5.2.2 Groups for Each Metadata Repository
Each metadata repository registered with Oracle Internet Directory has its own
groups, as described in
Table 5–2 . This enables you to assign different owners and
users for each repository.
5.2.3 Groups for Each Component
Oracle Application Server components also have groups in Oracle Internet Directory.
Each component has a Component Owners group and an Associated Middle Tiers
group, as described in
Table 5–3 .
Table 5–2 Groups Associated with Each Metadata Repository Registered with Oracle Internet Directory
Group Description
Repository Owners
DN: cn=Repository Owners,
orclReferenceName=dbName,
cn=IAS Infrastructure
Databases, cn=IAS,
cn=Products,
cn=OracleContext
The user who installs the metadata repository becomes a member of this group.
Repository Owners have the following privileges:
■
Add/remove users to/from this group.
■ De-register this repository.
■
Add/remove users to/from the Mid-Tier Admins group for this repository.
■ Add/remove middle-tier instances to/from this repository.
■
All privileges of the Mid-Tier Administrators group.
Mid-Tier Administrators
DN: cn=Repository Mid-tiers,
orclReferenceName=dbName,
cn=IAS Infrastructure
Databases, cn=IAS,
cn=Products,
cn=OracleContext
Mid-Tier Administrators have the following privileges:
■ Add/remove middle-tier instances from the Associated Middle Tiers group
for this repository. This is required to install a middle tier or to configure a
middle-tier component to use a different repository.
■
Access metadata for the repository database object.
Associated Middle Tiers
DN: cn=Associated Mid-tiers,
orclReferenceName=dbName,
cn=IAS Infrastructure
Databases, cn=IAS,
cn=Products,
cn=OracleContext
Members of this group are middle-tier instances associated with this metadata
repository. The middle-tier instances are added to this group during installation.
You do not have to add the instances manually to this group.
Members of this group have the following privilege:
■
Access metadata for the repository database object and its schemas.
Table 5–3 Groups Associated with Each Component
Group Description
Component Owners
DN: cn=Component Owners,
orclApplicationCommonName=component
CommonName, cn=componentName,
cn=Products, cn=OracleContext
Component Owners have the following privileges:
■ Add/remove owners for this component.
■
De-register this component.
■
Associate additional middle tiers with this component.
Associated Middle Tiers
DN: cn=Associated Mid-tiers,
orclApplicationCommonName=component
CommonName, cn=componentName,
cn=Products, cn=OracleContext
Members of this group are middle-tier instances.