Oracle® Fusion Middleware

Administrator's Guide for Oracle IRM Server

11g Release 1 (11.1.1)

E12321-03

January 2011

Oracle Fusion Middleware Administrator's Guide for Oracle IRM Server, 11g Release 1 (11.1.1)

E12321-03

Copyright © 2007, 2011, Oracle and/or its affiliates. All rights reserved.

Primary Author:  Martin Wykes

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

If this software or related documentation is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, the following notice is applicable:

U.S. GOVERNMENT RIGHTS Programs, software, databases, and related documentation and technical data delivered to U.S. Government customers are "commercial computer software" or "commercial technical data" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, the use, duplication, disclosure, modification, and adaptation shall be subject to the restrictions and license terms set forth in the applicable Government contract, and, to the extent applicable by the terms of the Government contract, the additional rights set forth in FAR 52.227-19, Commercial Computer Software License (December 2007). Oracle USA, Inc., 500 Oracle Parkway, Redwood City, CA 94065.

This software is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications which may create a risk of personal injury. If you use this software in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure the safe use of this software. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software in dangerous applications.

Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.

This software and documentation may provide access to or information on content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services.

Contents

Preface

- Audience

- Documentation Accessibility

- Related Documents

- Conventions

1 Introduction to Oracle IRM Server Administration

- 1.1 Introduction to Oracle IRM

- 1.2 Access to User Details

- 1.3 Oracle IRM Server Administration Tools

- 1.3.1 Oracle IRM Server Management Console

- 1.3.2 Oracle Enterprise Manager Fusion Middleware Control Console

- 1.3.3 Oracle WebLogic Scripting Tool (WLST)

2 Working with Domains and Administrators

- 2.1 About Domains and Administrators

- 2.2 Creating Domain Administrators, Domain Managers, and Inspectors

- 2.3 Creating Context Managers

3 Working with Roles

- 3.1 About Roles

- 3.2 Creating a Role

- 3.3 Modifying a Role

- 3.4 Deleting a Role

4 Working with Context Templates

- 4.1 About Context Templates

- 4.2 Creating a Context Template

- 4.3 Adding Roles to a Context Template

5 Working with Contexts

- 5.1 About Contexts

- 5.2 Creating a Context

- 5.3 Modifying a Context

- 5.4 Deleting a Context

- 5.5 Excluding Specific Sealed Documents from a Context

- 5.6 Adding and Removing a Trusted Context

- 5.7 Adding a Context Manager

6 Working with Rights

- 6.1 About Rights

- 6.2 Creating a Right

- 6.3 Modifying a Right

- 6.4 Removing a Right

7 Working with Reports

- 7.1 About Reports

- 7.2 Generating a Report

8 Common Actions on the Management Console

- 8.1 Copying

- 8.2 Renaming Contexts, Roles, or Context Templates

- 8.3 Changing a Description

- 8.4 Adding, Changing, or Deleting Labels in Alternative Languages

- 8.5 Reordering Items Listed in Tables

- 8.6 Updating Lists

- 8.7 Deleting

9 Using Enterprise Manager Fusion Middleware Control Console for Oracle IRM

- 9.1 Displaying the Control Console

- 9.2 Navigating to the Home Page for Oracle IRM

- 9.3 Configuring Oracle IRM

- 9.4 Setting Up Test Content for Oracle IRM

- 9.5 Setting Up Multiple Language Support

- 9.6 Setting Up Locations for Oracle IRM Desktop Installation Software Downloads

- 9.7 Checking Whether Oracle IRM Server is Active or Inactive

- 9.8 Viewing Oracle IRM Server Log Messages

A Oracle IRM Server Reference

- A.1 Features and Constraints Mapped to Oracle IRM Desktop Rights

- A.2 Visibility of Pages and Tabs to Administrator Types

B User Interface

- B.1 Home Page

- B.2 Contexts Page

- B.2.1 Contexts Page: General Controls

- B.2.2 Contexts Page: Rights

- B.2.3 Contexts Page: Translations

- B.2.4 Contexts Page: Managers

- B.2.5 Contexts Page: Exclusions

- B.2.6 Contexts Page: Trusted Contexts

- B.2.7 New Trusted Context Dialog

- B.2.8 New Context Wizard

- B.2.8.1 New Context: General

- B.2.8.2 New Context: Managers

- B.2.8.3 New Context: Translations

- B.2.8.4 New Context: Review

- B.2.9 Assign Role (Create Right) Wizard

- B.2.9.1 Assign Role: Users and Groups

- B.2.9.2 Assign Role: Role

- B.2.9.3 Assign Role: Documents

- B.2.9.4 Assign Role: Summary

- B.2.10 Right Details Dialog

- B.2.11 Edit Role Assignment Dialog

- B.2.12 New Manager Dialog

- B.2.13 Manager Details Dialog

- B.3 Roles Page

- B.3.1 Roles Page: General Controls

- B.3.2 Roles Page: Features

- B.3.3 Roles Page: Translations

- B.3.4 Roles Page: Constraints

- B.3.5 New Role Wizard

- B.3.5.1 New Role: General

- B.3.5.2 New Role: Translations

- B.3.5.3 New Role: Features

- B.3.5.4 New Role: Constraints

- B.3.5.5 New Role: Summary

- B.4 Reports Page

- B.5 Context Templates Page

- B.5.1 Context Templates Page: General Controls

- B.5.2 Context Templates Page: Roles

- B.5.3 Context Templates Page: Translations

- B.5.4 New Context Template Wizard

- B.5.4.1 New Context Template: General

- B.5.4.2 New Context Template: Translations

- B.5.4.3 New Context Template: Roles

- B.5.4.4 New Context Template: Summary

- B.6 Domain Page

- B.6.1 Domain Page: Administrators

- B.6.2 Domain Page: Translations

- B.6.3 New Administrator Dialog

- B.6.4 Administrator Details Dialog

- B.7 General Dialogs

- B.7.1 New Translation Dialog

- B.7.2 Edit Translation Dialog

Index

Preface

This guide provides information for administrative users of Oracle IRM Server.

Audience

This document is intended for domain administrators, domain managers, context managers, and inspectors.

Documentation Accessibility

Our goal is to make Oracle products, services, and supporting documentation accessible to all users, including users that are disabled. To that end, our documentation includes features that make information available to users of assistive technology. This documentation is available in HTML format, and contains markup to facilitate access by the disabled community. Accessibility standards will continue to evolve over time, and Oracle is actively engaged with other market-leading technology vendors to address technical obstacles so that our documentation can be accessible to all of our customers. For more information, visit the Oracle Accessibility Program Web site at http://www.oracle.com/accessibility/.

Accessibility of Code Examples in Documentation

Screen readers may not always correctly read the code examples in this document. The conventions for writing code require that closing braces should appear on an otherwise empty line; however, some screen readers may not always read a line of text that consists solely of a bracket or brace.

Accessibility of Links to External Web Sites in Documentation

This documentation may contain links to Web sites of other companies or organizations that Oracle does not own or control. Oracle neither evaluates nor makes any representations regarding the accessibility of these Web sites.

Access to Oracle Support

Oracle customers have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/support/contact.html or visit http://www.oracle.com/accessibility/support.html if you are hearing impaired.

Related Documents

For more information, see the following documentation:

- Oracle Fusion Middleware Developer's Guide for Oracle IRM Server

- Oracle Fusion Middleware External Users Support Guide for Oracle IRM Desktop

- Oracle Fusion Middleware User's Guide for Oracle IRM Desktop
This guide is also available as the online help for the Oracle IRM Desktop product.

Conventions

The following text conventions are used in this document:

Convention

Meaning

boldface

Boldface type indicates graphical user interface elements associated with an action, or terms defined in text or the glossary.

italic

Italic type indicates book titles, emphasis, or placeholder variables for which you supply particular values.

monospace

Monospace type indicates commands within a paragraph, URLs, code in examples, text that appears on the screen, or text that you enter.

The following conventions are used throughout this guide:

- The notation <Install_Dir> is used to refer to the location on your system where Oracle Fusion Middleware is installed.

- Forward slashes (/) are used to separate the directory levels in a path name. This is true when referring to files on a Windows file system or on a UNIX system. A forward slash will always appear after the end of a directory name.

1 Introduction to Oracle IRM Server Administration

This section covers the following topics:

- Introduction to Oracle IRM

- Access to User Details

- Oracle IRM Server Administration Tools

1.1 Introduction to Oracle IRM

Oracle IRM distributes rights management between centralized servers and desktop agents. Authors continue to create documents and emails in their existing document and email applications.

Oracle IRM enables documents or emails to be automatically or manually sealed at any stage in their lifecycle, using sealing tools integrated into the Windows desktop, authoring applications, email clients, and content management and collaborative repositories. Sealing wraps documents and emails within a layer of strong encryption and digital signatures, together with indelible links back to network-hosted servers (operated by the organization to which the information belongs) that store the decryption keys and associated access rights.

Sealed documents and emails can be distributed by any existing means, such as email, web, file share, etc.

Access to sealed documents or emails is governed by rights, such as the right to open a document, the right to print it, and the right to copy information from it and paste it into another document. The rights are defined and assigned centrally by administrators, who group combinations of rights and end user identities into one or more "contexts". Authors control access to their documents by selecting the most appropriate predefined context at the time they seal it. The result is that authors do not make complex rights management decisions when they seal a new document.

Rights are stored on a server, separately from sealed documents and emails, enabling them to be assigned, updated or unassigned at any time. Access to and use of a particular sealed document can change throughout its life.

To create and use sealed documents and emails within their existing desktop applications, end users must download and install a single, small, universal agent called Oracle IRM Desktop. Oracle IRM Desktop authenticates users, transparently requesting rights from the server (Oracle IRM Server), and protecting and tracking sealed documents and emails while in use within native desktop applications.

User rights and audit records are automatically synchronized between Oracle IRM Desktop and Oracle IRM Server, ensuring completely transparent offline working without sacrificing revocability or requiring end users to remember to synchronize.

Oracle IRM Desktop and Oracle IRM Server together audit all attempted and actual end user access to sealed documents or emails. The Oracle IRM Server Management Console provides audit reporting. Audit records are stored in the Oracle IRM Server database.

1.2 Access to User Details

The rights to use documents sealed by Oracle IRM are assigned on a user or group basis. These users and groups are not set up or maintained within Oracle IRM Server. Instead, connections are made to external directories containing the details of users and groups. The external directories are referenced during the post-installation procedures associated with Oracle IRM Server.

1.3 Oracle IRM Server Administration Tools

Oracle offers the following tools for managing Oracle IRM:

- Oracle IRM Server Management Console

- Oracle Enterprise Manager Fusion Middleware Control Console

- Oracle WebLogic Scripting Tool (WLST)

Administrators should use these tools, rather than edit configuration files, to perform administrative tasks, unless a specific procedure requires you to edit a file. Editing a file may cause the settings to be inconsistent and generate problems.

1.3.1 Oracle IRM Server Management Console

"The Management Console"

The Management Console is a browser-based application used by the several types of Oracle IRM Server administrator to control access to protected content.

Use the Management Console to:

- Create Oracle IRM administrators: domain administrators, domain managers, inspectors, and context managers. (Note, however, that it is the first user to log in to the Control Console who is made a domain administrator.)

- Create roles.

- Create and modify context templates.

- Create, modify, and delete contexts, exclude specific documents from a context, and associate a context with trusted contexts.

- Create and modify rights.

- Generate reports.

- Copy, rename, and change descriptions within Oracle IRM Server.

- Add, change, and delete names and descriptions in multiple supported languages.

1.3.2 Oracle Enterprise Manager Fusion Middleware Control Console

"The Control Console"

Note:
The first user to log in to the Control Console is made an Oracle IRM domain administrator.

The Control Console is a browser-based application that is deployed when you install Oracle IRM Server as part of the Oracle Enterprise Manager Fusion Middleware suite.

Use the Control Console for these Oracle IRM tasks:

- Set the cryptography algorithms and strengths to use for sealed content.

- Set the URL of the server that sealed content must contact.

- Set the URL of a privacy statement that users must accept before viewing sealed content.

- Set a restriction on the number of devices that a sealed document can be used on simultaneously by one user

- Set how frequently Oracle IRM Desktop will attempt to contact Oracle IRM Server to synchronize rights.

- Set options for the age of retained report records and the frequency of their deletion.

- Set options for context refresh periods that are available when creating or editing roles.

- Set up test content that will be accessible when users successfully connect to Oracle IRM Server.

- Set up multiple languages support for the names and descriptions of Oracle IRM contexts, roles, etc.

- Set up multiple downloads of the Oracle IRM Desktop installation software to cover different combinations of language, product version, and locale.

- Set up license record purges, status page redirection, and key store configuration.

Displaying the Control Console

For information about starting Oracle Enterprise Manager Fusion Middleware Control and displaying the Control Console, see Section 9, "Using Enterprise Manager Fusion Middleware Control Console for Oracle IRM".

1.3.3 Oracle WebLogic Scripting Tool (WLST)

Oracle provides the WebLogic Scripting Tool (WLST) to manage Oracle Fusion Middleware components, such as Oracle IRM Server, from the command-line.

WLST is a complete, command-line scripting environment for managing Oracle WebLogic Server domains, based on the Java scripting interpreter, Jython. In addition to supporting standard Jython features such as local variables, conditional variables, and flow control statements, WLST provides a set of scripting functions (commands) that are specific to Oracle WebLogic Server. You can extend the WebLogic scripting language to suit your needs by following the Jython language syntax.

Oracle WebCenter offers WLST commands for:

- The functionality available on the Control Console (see Section 1.3.2, "Oracle Enterprise Manager Fusion Middleware Control Console").

- Migrating users and groups from one identity store to another.

Running Oracle WebLogic Scripting Tool (WLST) Commands

To run WLST from the command line:

1. Navigate to the directory <home>/common/bin.

2. From the command line, enter the command:
wlst.sh

For example:

<home>/common/bin/wlst.sh

3. At the WLST command prompt, enter the following command to connect to the Administration Server for Oracle IRM:
wls:/offline>connect('<user_name>','<password>', '<host_name>:<port_number>')

where

- <user_name> is the username of the operator who is connecting to the Administration Server

- <password> is the password of the operator who is connecting to the Administration Server

- <host_name> is the host name of the Administration Server

- <port_number> is the port number of the Administration Server

For example:

connect('weblogic','welcome1', 'myhost.example.com:7001')

For help for this command, type help('connect') at the WLST command prompt.

Note:
If SSL is enabled, you must edit the wlst.sh file and append the following to JVM_ARGS:

-Dweblogic.security.SSL.ignoreHostnameVerification=true
-Dweblogic.security.TrustKeyStore=KeyStoreName

or setenv CONFIG_JVM_ARGS

-Dweblogic.security.SSL.ignoreHostnameVerification=true
-Dweblogic.security.TrustKeyStore=KeyStoreName

Where KeyStoreName is the name of the keystore in use (DemoTrust for the built-in demonstration certificate).

4. Once connected to the Administration Server you can run any Oracle IRM or generic WLST command.
For a complete list, see Oracle IRM Custom WLST Commands in the Oracle Fusion Middleware WebLogic Scripting Tool Command Reference.

2 Working with Domains and Administrators

This section covers the following topics:

- About Domains and Administrators

- Creating Domain Administrators, Domain Managers, and Inspectors

- Creating Context Managers

2.1 About Domains and Administrators

A domain is the top-level administrative component of Oracle IRM. It contains all other Oracle IRM components.

Within a domain there are four administrator types:

- Domain administrators create other administrators. They also create roles and context templates, and can create contexts from those templates.

- Domain managers create contexts from the templates created by domain administrators.

- Inspectors can be given permission to view user and group rights for previously created contexts, and to run audit reports.

- Context managers manage user and group rights within previously created contexts.

The four administrator types can each see and use a different combination of pages and tabs on the Oracle IRM Server administration console. See Section A.2, "Visibility of Pages and Tabs to Administrator Types".

A user can have multiple administrative roles. For example, domain administrators should normally also be made inspectors. However, because domain administrators have all the privileges of a domain manager, domain managers are prevented from also being domain administrators.

The administrative roles are not hierarchical. For example, domain administrators cannot perform context manager functions, unless a particular user is both a domain administrator and a context manager.

Note:
Users who are domain administrators should also be set up as inspectors. This will let them see all contexts, and therefore be able to assess the impact of changes they make to context templates. For the same reason, contexts should normally be made visible to inspectors.

Although Oracle IRM Server supports groups (both users and groups can be given rights), groups cannot be given administrative roles.

Note:
There is no correspondence between Oracle IRM domains and WebLogic server domains.

2.2 Creating Domain Administrators, Domain Managers, and Inspectors

Notes:
Only domain administrators can perform this procedure.
This procedure requires access to the external directory of users that was referenced during installation of Oracle IRM Server. See Section 1.2, "Access to User Details".

The first user to log in to the Control Console (see Section 1.3.2, "Oracle Enterprise Manager Fusion Middleware Control Console") is made a domain administrator.

Use the following procedure to create a domain administrator, a domain manager, or an inspector.

1. Click the Domain tab to reveal the Domain page.

2. Click the Administrators tab.

3. Click the New Administrator icon to open the New Administrator dialog.

4. In the Administrator Type box, select the type of administrator to create.

5. In the Search box, enter part of the name of a known user, then click the Search button. Alternately, to generate a list of available users, leave the box blank and click the Search button.
The available users are shown in the Available Users box. Selecting an item in the Available Users box will reveal its details in the Details area.

6. Move the user that is to be assigned as an administrator to the Selected box.

7. To assign the user to be an administrator of the type shown in the Administrator Type box, click OK.

Note:
If you want a user to be more than one administrator type, repeat the above procedure, selecting a different administrator type in step 4.

2.3 Creating Context Managers

The domain administrator or domain manager who creates a context is automatically assigned as a manager for that context.

Other users can be assigned as context managers for a context, either in addition to or instead of the automatically assigned manager. Once a context has a deliberately assigned context manager, it is usual for that manager to remove the automatically assigned managers from the context.

Assigning and unassigning users as context managers is done using the Managers tab of the Contexts page (see Section 5.7, "Adding a Context Manager").

3 Working with Roles

This section covers the following topics:

- About Roles

- Creating a Role

- Modifying a Role

- Deleting a Role

3.1 About Roles

Within Oracle IRM, roles are for controlling access to documents. Roles are defined within a domain. They exist independently of users and contexts. Some typical roles come preconfigured at installation, and domain administrators can create more. Domain administrators may want to create roles for the following purposes:

- Roles control the features of client-side applications, such as the opening, editing, and sealing of documents.

- Roles control whether or not the client-side features can be used offline (while not in communication with Oracle IRM Server).

- Roles control refresh requirements (how often to return to Oracle IRM Server to check for new or revised rights).

Domain administrators typically create a number of roles, then create context templates with differing permutations of those roles. When contexts are created from a context template, the context inherits the roles that were in the template. The behaviors allowed by the inherited roles are the only behaviors that the contexts can acquire.

Caution:
When roles are modified at the domain level, any changes to permitted behavior are applied to all contexts that contain that role.

3.2 Creating a Role

Note:
Only domain administrators can perform this procedure.

Use the following procedure to create a role:

1. Click the Roles tab to reveal the Roles page.

2. Click the New Role icon.

3. Complete the Create Role wizard, noting the following:

- The name given to the role can be changed later without invalidating the use of the role in the places where it is used.

- The description will appear in other parts of Oracle IRM Server when roles are being chosen for particular uses, so it is recommended that you make the description as helpful as possible.

- The default language is set on the Control Console. See Section 1.3.2, "Oracle Enterprise Manager Fusion Middleware Control Console".

- For global enterprises, use the Translations page to create multi-language names and descriptions of the role. If the New Translation icon is not available, translation support has not been set up on the Control Console. See Section 1.3.2, "Oracle Enterprise Manager Fusion Middleware Control Console".

- Use the Features page to assign features to the role. A role must contain at least one of these features: open, seal, reseal, search. Features control what users can do with documents. A description of each feature appears in the Details section as you select each item in the Available list or the Selected list. A full list of features and their descriptions is available in Section A.1, "Features and Constraints Mapped to Oracle IRM Desktop Rights". Select the Audit Use checkbox if you want to record the use of this role.

- Use the Constraints page to set whether documents can be accessed when there is no connection to Oracle IRM Server, how often rights are refreshed, the time periods during which documents are available, whether only specific documents can be accessed, and whether sealed content can be exported.

- Use the Review page to review all the attributes that will be assigned to the new role. If there are any attributes that you want to change, use the Back button to return to previous pages and make the required changes.

- When you are satisfied with the attributes on the Review page, create the new role by clicking Finish.

The new role appears in the Name column in the left panel.

3.3 Modifying a Role

Note:
Only domain administrators can perform this procedure.

Use the following procedure to modify a role:

1. Click the Roles tab to reveal the Roles page.

2. On the left panel, select the role that you want to modify.

3. On the right panel, locate the attributes of the role that you want to change. These can be on the Features, Translations, or Constraints tabs. All role names and descriptions, including those in the default language, can be changed on the Translations tab.

4. Make your changes by using the controls on the tabs, or by using the icons on the toolbars.

5. If you want to undo the changes you have made, select the Revert button (in the top right corner).

6. If you want to retain the changes you have made, select the Apply button (in the top right corner).

3.4 Deleting a Role

Note:
Only domain administrators can perform this procedure.

You cannot delete a role if it is in use, that is, if it is currently assigned to a user.

Use the following procedure to delete a role:

1. Click the Roles tab to reveal the Roles page.

2. On the left panel, select the role that you want to delete.

3. Click the Delete button.

4. Confirm that you want to delete the role.

4 Working with Context Templates

This section covers the following topics:

- About Context Templates

- Creating a Context Template

- Adding Roles to a Context Template

4.1 About Context Templates

Context templates are created so that contexts can be derived from them. Only domain administrators can create context templates, although both domain administrators and domain managers can create contexts based on them.

Two context templates are supplied at installation: "Export", and "Standard". These can be copied to create new context templates, and then modified as required.

A context template provides the features and functionality of the contexts that are derived from it. When changes are made to a context template, the changes are applied to the contexts that were created from the template.

Context templates have a set of roles assigned to them. The roles are used in contexts to create rights for users and groups.

Caution:
It is strongly recommended that you do not delete context templates, and that you do not modify context templates other than to add new roles to them. It is strongly recommended that you do not remove roles from context templates. If a context template becomes unsuitable, it is best to deactivate it and to create a new one to use in its place.

You cannot delete a context template if any contexts derived from it are in use.

You cannot remove a role from a context template if the role is currently assigned to a user within a context created from that context template.

See also Section 3, "Working with Roles", Section 5, "Working with Contexts", and Section 6, "Working with Rights".

4.2 Creating a Context Template

Note:
Only domain administrators can perform this procedure.

Use the following procedure to create a context template:

1. Click the Context Templates tab to reveal the Context Templates page.

2. Click the New Context Template icon.

3. Complete the New Context Template wizard, noting the following:

- The description will be viewable, for example, when creating other Oracle IRM elements that are dependent on this one, so a brief but informative description will prove useful.

- Select the Activate checkbox to make the newly created context template available for the creation of contexts (by domain administrators and domain managers).

- For global enterprises, use the Translations page to create multi-language names and descriptions of the role. If the New Translation icon is not available, translation support has not been set up on the Control Console. See Section 1.3.2, "Oracle Enterprise Manager Fusion Middleware Control Console".

- Use the Roles page to assign roles to the context template. A description of each role appears in the Details section as you select each item in the Available list or the Selected list. (This assumes that descriptions were added when the roles were created.)

- Roles cannot be created in this wizard: they are created separately on the Roles page. See Section 3, "Working with Roles".

- Use the Review page to review all the attributes that will be assigned to the new context template. If there are any attributes to change, use the Back button to return to previous pages and make the required changes.

- When you are satisfied with the attributes on the Review page, create the new context template by clicking Finish.

The new context template appears in the Templates column on the left panel.

4.3 Adding Roles to a Context Template

Note:
Only domain administrators can perform this procedure.

Caution:
It is strongly recommended that you do not modify context templates other than to add new roles to them. See Section 4.1, "About Context Templates". Changes made to a context template are immediately applied to the contexts that were created from the template.

Use the following procedure to add a role to a context template:

1. Click the Context Templates tab to reveal the Context Templates page.

2. On the left panel, in the Templates list, highlight the name of the context template to which you want to add a role.

3. On the right panel, select the Roles tab.

4. In the Available list, find the role that you want to add and move it to the Selected list.
If the Available list is empty, all roles have already been assigned to the context template.

You cannot create roles on this page. Roles are created separately on the Roles page. See Section 3, "Working with Roles".

5. If you want to undo the changes you have made, select the Revert button (in the top right corner).

6. If you want to retain the changes you have made, select the Apply button (in the top right corner).
The role is added to the context template.

5 Working with Contexts

This section covers the following topics:

- About Contexts

- Creating a Context

- Modifying a Context

- Deleting a Context

- Excluding Specific Sealed Documents from a Context

- Adding and Removing a Trusted Context

- Adding a Context Manager

5.1 About Contexts

A context defines how sealed content can be accessed by users and groups.

Contexts are created exclusively from context templates. Nothing in a context can deviate from the definitions set up in the context template. Contexts cannot change the role definitions defined in the context templates.

Note:
Changes made to a context template or role are immediately reflected in the contexts that were created from them.

Contexts are created by domain administrators and domain managers, but each context is managed by its context manager, who is usually a business owner (rather than part of the IT organization). Context managers assign roles to users (see Section 3, "Working with Roles"). Users that have not been assigned as context managers cannot assign roles.

Contexts are normally made visible to inspectors, in read-only mode. Inspectors can use their read-only capability to make investigations and to answer queries. Inspectors cannot elevate permissions of users, groups, or special users.

In exceptional circumstances, a context can be made invisible to inspectors. This should be done rarely, for example for contexts relating to highly sensitive mergers and acquisitions.

Because contexts continue to be affected by changes made to the context templates from which they are derived, it is important that domain administrators are normally also made inspectors. This is to enable domain administrators to see all contexts on the server, and so be able to tell which contexts will be affected by changes made to context templates. For the same reason, it is important to make all contexts visible to inspectors unless secrecy is absolutely essential.

A context can be associated with multiple trusted contexts. These are contexts for which certain sealed document activities are allowed. The most common reason to set up trusted contexts is to allow copying and pasting between documents in the current context and documents in the trusted contexts.

5.2 Creating a Context

Note:
Only domain managers and domain administrators can perform this procedure.

Use the following procedure to create a context:

1. Click the Contexts tab to reveal the Contexts page.

2. Click the New Context icon.

3. Complete the New Context wizard, noting the following:

- The new context must be based on a context template. Available context templates are shown in the Template drop-down list. Only context templates set as active are listed. Domain administrators can create new context templates and make existing ones active using the Context Templates tab (see Section 4, "Working with Context Templates").

- The description will be viewable, for example, when creating other Oracle IRM components that are dependent on this one, so a brief but informative description will prove useful.

- You should normally make the context visible to inspectors. This serves two main purposes: to enable domain administrators (who should also be set up as inspectors) to see all contexts, and therefore to predict the effect of changes they make to context templates; and to provide read-only access to help inspectors answer support queries.

- The Managers page is used to create one or more context managers for the new context (although the user creating the context is automatically assigned as a context manager). Context managers assign roles to users and are usually business owners.

- For global enterprises, use the Translations page to create multi-language descriptions of the context that will be visible to users of Oracle IRM Desktop. If the New Translation icon is not available, translations have not been set up on the Control Console. See Section 1.3.2, "Oracle Enterprise Manager Fusion Middleware Control Console".

- Use the Review page to review all the attributes that will be assigned to the new context. If there are any attributes that you want to change, use the Back button to return to previous pages and make the required changes.

- When you are satisfied with the attributes on the Review page, create the new context by clicking Finish.

The new context appears on the left panel of the Contexts page. The attributes of the context (rights, managers, translations, roles, trusted contexts) are shown on the right panel.

5.3 Modifying a Context

Note:
Normally, only context managers can perform this procedure. However, if contexts have become orphaned, a domain manager or domain administrator can acquire management rights to those contexts. Orphaned contexts are contexts whose managers have been deleted from the identity store (see Section 1.2, "Access to User Details").

The following attributes of a context can be modified: rights, managers, translations, exclusions, and trusted contexts.

Use the following procedure to modify a context:

1. Click the Contexts tab to reveal the Contexts page.

2. If you are a domain manager or domain administrator, click the Gain Management Rights For All Orphaned Contexts icon, which is in the toolbar on the left panel of the Contexts page.
The icon is shown only to domain managers and domain administrators, and, when clicked, either identifies orphaned contexts and displays them in the list of contexts, or shows a message saying that there are no orphaned contexts.

3. On the left panel of the Contexts page, select the context that you want to modify.

4. On the right panel of the Contexts page, locate the attributes of the context that you want to change. These can be in the header, or on the Rights, Managers, Translations, Exclusions, or Trusted Contexts tabs. All context names and descriptions, including those in the default language, can be changed on the Translations tab.

5. Use the header controls and toolbar icons to add, view, change, or delete attributes, as allowed.
Some modifications are not allowed for some attributes. For example, you cannot remove yourself as the context manager if you are the only context manager.

5.4 Deleting a Context

Note:
Only context managers can perform this procedure.

Do not delete a context unless you are sure that it is no longer required.

Caution:
Deleting a context means all documents sealed to the context become inaccessible. If you delete a context accidentally, you can restore it from a database backup (if you have made one), but you cannot simply create a new context with the same name. If you create a new context with the same name, its encryption keys will not match the keys of the deleted context.

Use the following procedure to delete a context:

1. On the left panel of the Contexts page, select the name of the context.

2. On the right panel, remove all rights on the Rights tab for this context.

3. In the toolbar in the left panel, select the Delete icon.

4. In the confirmation dialog, confirm that you want to delete the context.

5.5 Excluding Specific Sealed Documents from a Context

Note:
Only context managers can perform this procedure.

Caution:
Excluded sealed documents cannot be accessed by any user, regardless of the role or the rights assigned to them.

Use the following procedure to exclude specific sealed documents from a context:

1. Click the Contexts tab to reveal the Contexts page.

2. Select the context for which you want to exclude documents.

3. On the right panel of the Contexts page, select the Exclusions tab.

4. A list of all documents currently excluded from the context is shown in the Document table.

5. Use the Add Documents button to open a dialog through which you can browse to the sealed document that you want to exclude.

6. Click OK to add the selected sealed document to the exclusion list.

5.6 Adding and Removing a Trusted Context

Note:
Only context managers can perform these procedures.

A trusted context is one to which users of the current context can export content (copy from a document in the current context and paste into a document in a trusted context).

Note:
In addition to adding a trusted context as described in this procedure, the Exporting Content option must be set to Allow with restrictions on the Constraints tab of the Roles page.

A context manager can only add a trusted context that he has rights to see, either by being the context manager in the other context, or by being an inspector. Contexts that are already trusted can be seen in the list regardless of whether the context manager has rights to those contexts.

Adding a Trusted Context

Use the following procedure to add a trusted context:

1. Click the Contexts tab to reveal the Contexts page.

2. On the left panel of the Contexts page, select the context for which you want to set up trusted contexts.

3. On the right panel of the Contexts page, select the Trusted Context tab.
A list of all trusted contexts for the current context is shown in the table.

4. Click the New Trusted Context icon to open the New Trusted Context dialog.
The contexts that are available to become trusted contexts are shown in the Available column. If no contexts are listed, it is probably because all contexts are already trusted contexts, or because there are no contexts for which you have context manager or inspector roles in this view.

5. Move the context(s) that you want to become trusted contexts into the Selected list.

6. To make the contexts in the Selected list into trusted contexts, click OK.

The Trusted Contexts table is updated to show the new trusted contexts.

Removing a Trusted Context

Use the following procedure to remove a trusted context:

1. Click the Contexts tab to reveal the Contexts page.

2. On the left panel of the Contexts page, select the context from which you want to remove a trusted context.

3. On the right panel of the Contexts page, select the Trusted Context tab.

4. On the Trusted Context tab, select the context that you no longer want to be a trusted context.

5. In the toolbar of the Trusted Context tab, click the Remove icon.

6. Confirm that you want to remove the trusted context.

5.7 Adding a Context Manager

Note:
During initial creation of a context, domain managers and domain administrators are assigned as context managers for the context they are creating, and can assign other users to be context managers of that context. Normally, after initial creation of a context, only context managers can perform this procedure. However, if contexts have become orphaned, a domain manager or domain administrator can acquire management rights to those contexts. Orphaned contexts are contexts whose managers have been deleted from the identity store that was referenced during installation (see Section 1.2, "Access to User Details").

Use the following procedure to add a context manager:

1. Click the Contexts tab to reveal the Contexts page.

2. If you are a domain manager or domain administrator, click the Gain Management Rights For All Orphaned Contexts icon, which is in the toolbar on the left panel of the Contexts page.
The icon is shown only to domain managers and domain administrators, and, when clicked, either identifies orphaned contexts and displays them in the list of contexts, or shows a message saying that there are no orphaned contexts.

3. On the left panel of the Contexts page, select the context for which you want to add a context manager.

4. On the right panel of the Contexts page, click the Managers tab.

5. In the toolbar of the Managers tab, click the New Manager icon to open the New Manager dialog.

6. On the New Manager dialog, click the Search Users button to populate the Available Users list.

7. Move the user or users that you want to become context managers of this context into the Selected Users list, then click OK.

6 Working with Rights

This section covers the following topics:

- About Rights

- Creating a Right

- Modifying a Right

- Removing a Right

6.1 About Rights

Context managers create a right by assigning a role to a user or group within a context.

A user or group can have only one directly assigned right per context. However, rights can be assigned to groups, and because such rights are inherited by all members of the group, users can have many rights within one context:

- one directly assigned right

- many indirectly assigned rights; that is, rights that have been inherited through membership of a group.

If a group right is revoked, the same right is also revoked for users within that group.

If a role is redefined by a domain administrator, rights created from that role are instantly changed to reflect that redefinition, and are propagated to all users with that role when they next synchronize with the server (Oracle IRM Server).

6.2 Creating a Right

Note:
Only context managers can perform this procedure.

Note:
This procedure requires access to the external directory of users that was referenced during installation of Oracle IRM Server. See Section 1.2, "Access to User Details".

Context managers create a right by assigning a role to a user or group within a context.

Use the following procedure to create a right:

1. Click the Contexts tab to reveal the Contexts page.

2. On the left panel of the Contexts page, select the context in which you want to create rights.

3. On the right panel of the Contexts page, select the Rights tab.

4. Click the Assign Role button.

5. Complete the Assign Role wizard, noting the following:

- On the Users/Groups page, you can select either users or groups. If you want to set up rights for both users and groups within the current context, use the wizard one time for users and a second time for groups.

- You can select multiple users or groups to be granted the right, but you will be assigning the same role (on the Role page of the wizard) to all of them.

- On the Role page of the wizard, you can view the features of a candidate role by selecting it from the Select Role drop-down list. The features are shown in the Selected Role Details area.

- On the Documents page of the wizard, you can select a specific set of sealed documents to be associated with this right. Depending on how the role was set up, these documents are either the only ones that can be accessed, or are ones that cannot be accessed (the Restrictions notice on the dialog explains which of these apply). Use the Add button to open a dialog through which you can find a sealed document and associate it with this right. If the restriction is that access is allowed only to listed documents, and you do not list any documents, the right will be created, but any user having this right will not be able to access any sealed documents. See also Section 3.2, "Creating a Role".

- Use the Review page to check that all the details for the right are as you want them. If there is anything that you want to change, use the Back button to return to previous pages and make the required changes.

- When you are satisfied with the details on the Review page, create the new right by clicking Finish.

6.3 Modifying a Right

Note:
Only context managers can perform this procedure.

Use the following procedure to modify a right:

1. Click the Contexts tab to reveal the Contexts page.

2. On the left panel of the Contexts page, select the context in which the right exists.

3. On the right panel of the Contexts page, select the Rights tab.

4. Select the user or group whose right you want to change.
You can select multiple users or groups, in which case you will be applying the same change to all selected users or groups.

If the user of a right is shown as "Not found", the user has become unavailable on the external identity store. See Section 1.2, "Access to User Details".

5. Click the Edit button.

6. On the Edit Role Assignment dialog, click the Role tab.

7. From the Assigned Role drop-down list, select a new role to be assigned to the user or group.
If multiple users or groups were selected on the Rights tab, the new role selected here will apply to all the selected users or groups.

8. To save the change and modify the right, click OK.

6.4 Removing a Right

Note:
Only context managers can perform this procedure.

Use the following procedure to remove a right:

1. Click the Contexts tab to reveal the Contexts page.

2. On the left panel of the Contexts page, select the context in which the right exists.

3. On the right panel of the Contexts page, select the Rights tab.

4. Select the row in the Rights table that represents the right you want to remove.
If the user of a right is shown as "Not found", the user has become unavailable on the external identity store. See Section 1.2, "Access to User Details".

5. To remove the right, click the Remove button.

You will be asked to confirm the removal.

7 Working with Reports

This section covers the following topics:

- About Reports

- Generating a Report

7.1 About Reports

Only context managers and inspectors can generate reports:

- Context managers can generate reports based on all records for the contexts that they are a manager for.

- Inspectors can generate reports based only on records for contexts that have been made visible to them.

Domain administrators and domain managers cannot generate reports.

The following are recorded by the Oracle IRM Desktop client application:

- The use of key features (open, seal, reseal, print, print to file, save unsealed).

- Failures to open documents because a user does not have sufficient rights.

The records are uploaded to Oracle IRM Server when Oracle IRM Desktop next communicates with it.

7.2 Generating a Report

Note:
Only context managers and inspectors can perform this procedure.

Use the following procedure to generate a report:

1. Click the Reports tab to reveal the Reports page.

2. Use the left panel of the Reports page to specify the search criteria for the report, noting the following:

- To include records for one or more known users, enter the names of the users directly in the Users box, separating each name with a semicolon. If you enter a name for a user who has changed name, you will see only records relating to the name that you entered.

- To search for users, click the Search button to open the Search Users dialog, click the Search User icon next to the Search box, check the boxes next to the users that you want to include, select the Move icon, then select OK.

- To include records for one document, enter that document's name in the Document Name box.

- To limit records to a few documents, click the Add Documents button to open a dialog through which you can find a document and add it to the Document Name list. Repeat this procedure for each document.

- If you want to constrain the records used to a specified time period, enter the start date and end date of the period. You can type the dates in, or you can open a calendar from which you can select a date.

3. To generate the report, click Generate Report.

The results are shown on the right panel. See Table 7-1, "Report Results".

Table 7-1 Report Results

Report column

Description

Feature

The Oracle IRM feature that was used or that an attempt was made to use. The following features are audited: open, seal, reseal, print, print to file, save unsealed.

"Features" correspond to Oracle IRM Desktop "rights". See Section A.1, "Features and Constraints Mapped to Oracle IRM Desktop Rights".

User

The account name of the user who used or attempted to use the feature.

Status

Whether the attempt to use the feature was successful (SUCCESS) or whether it failed (FAILURE).

Context

The context in which the feature was used.

Item Code

The identifier of the document for which the feature was used.

Time

The date and time at which the feature was used.

URI

The document for which the feature was used, in its location.

Device Name

The name of the device hosting the document for which the feature was used.

8 Common Actions on the Management Console

This section covers the following topics:

- Copying

- Renaming Contexts, Roles, or Context Templates

- Changing a Description

- Adding, Changing, or Deleting Labels in Alternative Languages

- Reordering Items Listed in Tables

- Updating Lists

- Deleting

8.1 Copying

Use the following procedure to make a copy:

1. Click the tab for the item that you want to copy. For example, to copy a role, click the Roles tab.

2. In the Name column on the left panel, select the item that you want to copy.

3. Click the Copy icon.

A copy of the selected item is added in the Name column of the left panel.

A name is assigned to the new item in the form "Copy of <item name>". An equivalent phrase is applied to any translations that have been created for the copied item. To change the assigned name, use the procedure in Section 8.2, "Renaming Contexts, Roles, or Context Templates".

8.2 Renaming Contexts, Roles, or Context Templates

Use the following procedure to rename a context, role, or context template:

1. Click the tab for the item that you want to rename. For example, to rename a role, click the Roles tab.

2. Click the Translations tab.

3. Select the language for the name that you want to change. (There may be only one language.)

4. Select the Edit icon.

5. Enter the new name and close the dialog.

6. To apply the new name, click the Apply icon in the top right of the page. (This last step is necessary only for roles and context templates.)

7. Click the Refresh button to insure that the changed name is reflected correctly in the list.

8.3 Changing a Description

Use the following procedure to change the description of a context, role, or context template:

1. Click the tab for the item whose description you want to change. For example, to change the description of a role, click the Roles tab.

2. Click the Translations tab.

3. Select the language for the description that you want to change. (There may be only one language.)

4. Select the Edit icon.

5. Enter the new description and close the dialog.

6. To apply the new description, click the Apply icon in the top right of the page. (This last step is necessary only for roles and context templates.)

8.4 Adding, Changing, or Deleting Labels in Alternative Languages

Oracle IRM Server supports labeling in multiple languages. This feature allows global enterprises to share domains, context templates, roles, and contexts across regions. Users from different regions can work within the same contexts: they will be presented with names and descriptions in their own language.

Use the following procedure to add, change, or delete names and descriptions in alternative languages:

1. Select the tab for the item whose labels you want to change. For example, to change the labels of a role, click the Roles tab.

2. Select the item whose labels you want to change.

3. Select the Translations tab.

4. Do one of the following:

- To add new labels, select the New Translation icon, select the language, then add the label details to the dialog.
If the New Translation icon is not available, translation support has not been set up on the Control Console. See Section 1.3.2, "Oracle Enterprise Manager Fusion Middleware Control Console".

- To change existing labels, select the language, select the Edit icon, then change the details in the dialog.

- To delete labels, select the language, select the Remove icon, then respond to the confirmation dialog.

5. To apply the changes, click the Apply icon in the top right of the page. (This last step is necessary only for roles and context templates.)

8.5 Reordering Items Listed in Tables

Items listed in tables, such as languages on the Translations tab, can be sorted in descending or ascending order. If a column was the last to be sorted, a Sort Ascending icon and a Sort Descending icon are shown in the column heading. The filled icon shows which sort order is currently applied. If a column was not the last to be sorted, no icons are shown in its header. If none of the columns have been sorted, no icons are shown in any of the headers.

Use the following procedure to change the current order of items in a column:

- Hover the mouse pointer in the column header to make the Sort Ascending and Sort Descending icons appear (if they are not already shown), then select either the Sort Ascending icon or the Sort Descending icon.

8.6 Updating Lists

Use the following procedure to update the list of items in the left panel:

- In the toolbar at the top of the left panel, select the Refresh icon.

8.7 Deleting

There may be circumstances in which you cannot delete an item. For example, you cannot delete a role if it is in use (that is, if it is currently assigned to a user).

The following is the general procedure for deleting something:

1. In the list in the left panel, select the item that you want to delete.

2. Select the Delete icon.

3. In the confirmation dialog, confirm that you want to delete the item.

9 Using Enterprise Manager Fusion Middleware Control Console for Oracle IRM

This chapter describes:

- how to access Oracle Enterprise Manager Fusion Middleware Control Console ("the Control Console")

- how to display Oracle IRM pages from where you can perform certain configuration, monitoring, and management tasks

- the set of typical tasks you need to configure Oracle IRM Server.

This section covers the following topics:

- Displaying the Control Console

- Navigating to the Home Page for Oracle IRM

- Configuring Oracle IRM

- Setting Up Test Content for Oracle IRM

- Setting Up Multiple Language Support

- Setting Up Locations for Oracle IRM Desktop Installation Software Downloads

- Checking Whether Oracle IRM Server is Active or Inactive

- Viewing Oracle IRM Server Log Messages

9.1 Displaying the Control Console

To access the Control Console:

1. Start Fusion Middleware Control.
Fusion Middleware Control is configured for a domain, and it is automatically started when you start the Oracle WebLogic Server Administration Server. See "Starting and Stopping Fusion Middleware Control" in the Oracle Fusion Middleware Administrator's Guide.

2. Navigate to the following URL: http://adminServerHost:adminserverPort/em
For example: http://myhost.example.com:7001/em

You can find the exact URL, including the administration port number, in config.xml:

- On Windows: DOMAIN_HOME\config\config.xml

- On UNIX: DOMAIN_HOME/config/config.xml

See also, "Managing Ports" in the Oracle Fusion Middleware Administrator's Guide.

3. Enter a valid administrator User Name and Password details for the farm.
The default user name for the administrator user was set during configuration of ECM (default is weblogic). This is the account you can use to log in to Fusion Middleware Control for the first time.

4. Click Login.
The first page you see is the Farm home page. You can also view this page at any time by selecting the name of the farm in the navigation pane.

9.2 Navigating to the Home Page for Oracle IRM

The Oracle IRM home page is your starting place for carrying out the functions described in Section 1.3.2, "Oracle Enterprise Manager Fusion Middleware Control Console".

To navigate to the home page for Oracle IRM:

1. Log in to Fusion Middleware Control. See Section 9.1, "Displaying the Control Console".

2. In the Navigator, expand Content Management, then Information Rights Management.

9.3 Configuring Oracle IRM

You can use the Oracle IRM pages on the Control Console to make general configuration settings for Oracle IRM:

- Set the cryptography algorithms and strengths to use for sealed content.

- Set the URL of the server that sealed content must contact.

- Set the URL of a privacy statement that users must accept before viewing sealed content.

- Set a restriction on the number of devices that a sealed document can be used on simultaneously by one user.

- Set the keystore type and location if you need to use alternatives to the ones shown.

- Set an alternative target for the status page called by Oracle IRM Desktop when a sealed document cannot be opened (requires that alternative destination web pages already exist).

- Set how frequently Oracle IRM Desktop will attempt to contact Oracle IRM Server to synchronize rights.

- Set options for the age of retained report records and the frequency of their deletion.

- Set options for context refresh periods that are available when creating or editing roles on the Oracle IRM Server Management Console.

- Set up test content that will be accessible when users successfully connect to Oracle IRM Server.

- Determine which languages will be available on the Oracle IRM Server Management Console for the entering of labels (names and descriptions).

- Set up multiple downloads of the Oracle IRM Desktop installation software to cover different combinations of language and product version.

To configure Oracle IRM:

1. In the browser panel, find and select IRM.

2. In the toolbar, select the IRM menu, select Administration, then select General Settings.

3. Make changes to the settings as required, taking note of the following:

- Sealed Content Cryptography. Use AES128 unless you have a known reason to use one of the others. For details of all the options, see the online help for the Control Console (select the question mark icon).

- Server URL. You will need to specify the URL of the server that sealed documents will contact for rights (for example, the right to open a document). If you are using Oracle Access Manager (OAM), this URL should point to the OAM server rather than directly to the rights server. The URL that you enter here cannot be changed after a document has been sealed. If you subsequently change the URL, no one will be able to access the document.

- Device Count. It is common to specify a device count of 1, meaning that a user can use a sealed document on only one computer at a time. In this case, if the user wishes to use a sealed document on a second computer, he must manually check in his rights on the first computer before moving to the second. This feature is intended to make it difficult for users to circumvent document protection by sharing passwords. However, users may have a legitimate reason to require access to a document from more than one device at a time, in which case this setting can be given a higher value.

- License Clean-up. Increasing the license clean-up frequency will free database storage space. This setting applies to expired licenses and does not affect licenses that are in use.

- Keystore Settings. The keystore settings must be changed from the default values as part of post-installation configuration. After this, the settings will not normally need to be changed again.

- Status Page Redirection. You will need to use these settings only if you have set up an alternative HTML page that you want users to see after an unsuccessful attempt to open a sealed document.

- Desktop Synchronization. This setting determines which options are available on the Oracle IRM Server Management Console. The default set of days and times will allow contact with the server between 09:00 hours and 17:30 hours, Monday to Friday. You can add further options to cover the remaining days of the week, or to provide additional time periods on any day of the week.

- Context Refresh Periods. This setting determines which options are available on the Oracle IRM Server Management Console when roles are being created or edited. The default set of values and units will provide a choice of popular refresh periods. To make other refresh periods available, you can change the current values and units, or you can use the Add icon to add further lines to the list.

4. To save the changes, click the Apply button in the top right corner of the page.

9.4 Setting Up Test Content for Oracle IRM

Oracle IRM provides a facility for users to test their connection to an Oracle IRM Server. The test facility will let the user see an example of sealed content if the test is successful. The user makes this test from the Test page of the Oracle IRM user web site (or an equivalent custom web site, if one has been set up).

You can use the Oracle IRM pages on the Control Console to determine what content is available for particular languages. You can specify more than one content file and file type for each language.

Use this procedure to set up content that will be sealed and passed to client installations when a user successfully activates the test facility.

The test content is sealed when downloaded from the web site. Any authorized end user has access to test content: each gets an open right with a relative-to-request time constraint that expires the right two minutes after opening content.

To set up test content for Oracle IRM:

1. In the browser panel, find and select IRM.

2. In the toolbar, select the IRM menu, select Administration, and select Test Content.

3. To add new test content, click the Add icon. This opens the Add Content dialog.

4. In the Content URL box, enter the URL for the test content that you want shown to the user.
The test content should be unsealed at this point: it will be sealed by the server at the appropriate time.

The URL has to be accessible to the Oracle IRM J2EE server. This would typically be a file:/// or http:// URL. For example:

file:///home/oracle/testcontent/fish.jpg

5. Click the Add Language button.

6. Select a language from the drop-down box in the Languages column.

7. In the Label box, enter text that will identify the test content.

8. To complete the setup, click OK.

9.5 Setting Up Multiple Language Support

Oracle IRM Server supports multiple language versions ("translations") of the text associated with Oracle IRM components (contexts, roles, etc.). When used in a locale whose language is supported, the text that has been entered for that language is displayed. You can use the Oracle IRM pages on the Control Console to determine which languages are available for this. One of the languages must be chosen as the default language, which will be used if a user's local language is not supported.

To set up multiple language support on Oracle IRM Server:

1. In the browser panel, find and select IRM.

2. In the toolbar, select the IRM menu, select Administration, then select Translations.

3. Use the checkboxes in the Enable column to select whether each language should be available.

4. Select one of the languages as the default.

5. To save the changes, click the Apply button in the top right corner of the page.

9.6 Setting Up Locations for Oracle IRM Desktop Installation Software Downloads

Oracle IRM Desktop installation software must be made available to intended recipients of sealed content. Use the Desktop Installers page to give administrators using the Oracle IRM Server Management Console a choice of locations from where Oracle IRM Desktop can be downloaded. These locations will appear on the end-user web site, and must refer to downloads that are hosted on a server that is not the IRM server. Multiple versions of the software can be made available to reflect differing requirements for language and product version.

To set up locations for Oracle IRM Desktop installation software downloads:

1. In the browser panel, find and select IRM.

2. In the toolbar, select the IRM menu, select Administration, then select Desktop Installers.

3. Select the Add icon to open the Add Desktop Installer dialog.

4. In the Add Desktop Installer dialog:

- From the Language Name drop-down list, select a language for the installer. You can use the same language for more than one installer.

- In the Installer Label box, enter text to describe the installer (for example, for an English installer you could enter "Oracle IRM Desktop installation software").

- In the Installer URL box, enter the URL for the associated installation software.

- In the Product Version box, enter text for the product version. This would normally be a combination of numerals and periods, but is not verified against the previously specified installation software, so it can be any value.

- To set up the installer, click OK.

9.7 Checking Whether Oracle IRM Server is Active or Inactive

You can check whether Oracle IRM Server is active or inactive.

- On the farm home page, a green up-arrow symbol indicates that Oracle IRM Server is active, whereas a red down-arrow symbol indicates that Oracle IRM Server is inactive.

Note:
You cannot start or stop Oracle IRM Server through the Control Console.

9.8 Viewing Oracle IRM Server Log Messages

You can view log messages associated with Oracle IRM Server.

Use the following procedure to view log messages:

1. In the browser panel, find and select IRM.

2. In the toolbar, select the IRM menu, select Logs, then select View Log Messages.

A Oracle IRM Server Reference

This section contains the following topics:

- Features and Constraints Mapped to Oracle IRM Desktop Rights

- Visibility of Pages and Tabs to Administrator Types

A.1 Features and Constraints Mapped to Oracle IRM Desktop Rights

Note:
Information about the use of features as rights by Oracle IRM Desktop users is included in the Oracle IRM Desktop help, in the section About Rights.

Feature or constraint

Description

Equivalent right in Oracle IRM Desktop

Accessibility

Relaxes protection of sealed files so the use of accessibility tools and features are not blocked for sealed files. It does this by turning off program protection, screen capture protection, and keyboard protection in the file.

Accessibility

Annotate

Add comments to sealed Word and Excel documents.

Annotate

Constraint: Exporting Content set to "Allow with no restrictions"

Copy the contents of a sealed file to the unprotected clipboard
Create an unsealed copy of a sealed document.

Copy
Save Unsealed

Constraint: Exporting Content set to "Allow with restrictions"

Controlled use of the clipboard while working on sealed documents.
Copy information between documents that are sealed to the same context.

Copy information from the current document to a document in a trusted context.

Change the context that a document is sealed to.

Make a copy of a document in a different context.

Copy To
Reseal To (this is a context menu item - it is not associated with the Reseal feature or the Reseal right)

Edit

Edit the contents of the sealed file and control change tracking.

Edit

Edit Tracked

Edit the contents of the sealed file with all changes tracked.

Edit Tracked

Formulae

View formulae (formulas).

Formulae

Interact

Enter data in form fields (Word) and unprotected cells (Excel).

Interact

Open

Open and read a sealed file.

Open

Print

Print the contents of a sealed file.

Print

Print To File

Print the contents of a sealed file to a file or virtual print device, such as Acrobat.

Print To File

Program

Access content programmatically via the document object model.

Program

Reply

Edit the contents of sealed email and control change tracking.

Reply

Reply Tracked

Edit the contents of the sealed email with all changes tracked.

Reply Tracked

Reseal

Save changes to a sealed file.

Reseal
This is not associated with the Reseal To facility in Oracle IRM Desktop. Reseal To is an implementation of Copy To (see above).

Screen Capture

Capture the contents of a sealed file with 'Print Screen'.

Screen Capture

Seal

Create a new sealed file or seal an existing file.

Seal

Search

Search sealed files.

Search

Set Item Code

Users of Oracle IRM Desktop are allowed to provide item codes when creating or saving sealed content. Without this option, sealed content is allocated an automatic item code.

Set Item Code

A.2 Visibility of Pages and Tabs to Administrator Types

Page - tab

Domain administrator

Domain manager

Inspector

Context manager

Contexts (list)

List is empty, but can create new contexts

List is empty, but can create new contexts

List shown if context marked as available to inspectors

List shown and can delete contexts

Contexts - Rights

Tab not shown

Tab not shown

Tab is read only

Tab shown and all operations allowed

Contexts - Manager

Tab not shown

Tab not shown

Tab is read only

Tab shown and all operations allowed

Contexts - Description

Tab not shown

Tab not shown

Tab is read only

Tab shown and all operations allowed

Contexts - Exclusion

Tab not shown

Tab not shown

Tab is read only

Tab shown and all operations allowed

Reports

Tab not shown

Tab not shown

Tab shown and all operations allowed

Tab shown and all operations allowed

Administrators

Tab shown and all operations allowed

Tab not shown

Tab not shown

Tab not shown

Context Templates

Tab shown and all operations allowed

Tab is read only

Tab not shown

Tab not shown

Roles

Tab shown and all operations allowed

Tab is read only

Tab not shown

Tab not shown

B User Interface

This section contains information about the user interface for Oracle IRM. The following features are described in this chapter:

- Home Page

- Contexts Page

- Roles Page

- Reports Page

- Context Templates Page

- Domain Page

- General Dialogs

B.1 Home Page

Use this page to:

- Change the accessibility mode to suit screen readers.

- Access information about Oracle IRM.

- Access an end-user web site, from which you can download Oracle IRM Desktop software (if downloads have been set up).

- Access a privacy statement.

- Access this help.

- Log in to and log out of the Management Console.

Some options are available only before you are logged in, and other options are available only when you are logged in.

Before you have logged in, open this page by entering the URL of the Management Console home page into a web browser.

After you have logged in, open this page by clicking the Home tab.

Element

Description

Accessibility Mode

This drop-down list is available only before you have logged in.
Use to turn on screen reader mode, making the user interface more suitable for screen readers.

Default: Select this option to turn off screen reader mode.

Screen Reader: Select this option to turn on screen reader mode.

Login

These controls are available only before you have logged in.
Use to log in to the Management Console.

Username: Enter a valid user name for Oracle IRM Server. You should have been provided with a user name by an administrator, or you should be using the one set up during installation.

Password: Enter the password associated with the previously entered user name. You should have been provided with a password by an administrator, or you should be using the one notified during installation.

Login: Select to apply the user name and password entered previously.

Oracle IRM Desktop

Use this link to access an end-user web site, from which you can download Oracle IRM Desktop software (if downloads have been set up).

About IRM

Use this link to access an Oracle web site containing information about Oracle IRM.

Privacy Statement

Use this link to access a privacy statement concerning the collection and use of your personal information, and possibly other matters.

Help

This link is available only when you are logged in.
Use to access the online help for Oracle IRM Server.

Log Out

This link is available only when you are logged in.
Use to log out of the Management Console.

B.2 Contexts Page

The following pages and wizards are used to create, set options and enter data for contexts in Oracle IRM:

- Contexts Page: General Controls

- Contexts Page: Rights

- Contexts Page: Managers

- Contexts Page: Translations

- Contexts Page: Exclusions

- Contexts Page: Trusted Contexts

- New Trusted Context Dialog

- New Context Wizard

- Assign Role (Create Right) Wizard

- Right Details Dialog

- Edit Role Assignment Dialog

- New Manager Dialog

- Manager Details Dialog

B.2.1 Contexts Page: General Controls

Use these controls to create and delete contexts, and to refresh the list of contexts.

Access these controls by clicking the Contexts tab.

Contexts Page: General Controls, Left Panel

Element

Description

New Context (icon)

Select to open the New Context wizard.

Gain management rights for all orphaned contexts (icon)

Visible only to domain managers and domain administrators. Select to check whether there are any orphaned contexts and, if there are, to acquire the ability to modify them. Orphaned contexts are those whose context manager has been removed from the identity store. Any orphaned contexts will be shown in the list of contexts, and you will be able to select them for modification.

Refresh (icon)

Select to refresh the list of contexts on the left panel. You should do this to ensure that the list is showing any changes made by other users.

Delete (icon)

Select to delete the context currently highlighted on the left panel. A dialog will ask you to confirm the deletion. You will not be allowed to delete the context if it still has users with assigned rights.

Name (contexts list area)

Lists contexts created by the current user. If the current user is an inspector, also lists contexts created by any user.

Contexts Page: General Controls, Right Panel

Element

Description

Revert

Select to cancel the changes made on this page. Does not work after the Apply button has been used.

Apply

Select to apply the changes made on this page. Once selected, the changes cannot be reverted, except by making and applying new changes.

Name

Displays the name of the context currently highlighted in the list in the left panel. You can change the name (and the accompanying description) on the Translations tab.

Template

This is the name of the template from which this context was created. It cannot be changed.

Allow Inspector

When the Allow Inspector checkbox is checked, users who have been made inspectors will be able to see this context in lists and in reports.

Collapse Pane/Restore Pane control

Select to hide or show the header display area.

B.2.2 Contexts Page: Rights

Use this tab to create rights (by assigning roles to a user or group), to view the details of existing rights, to edit rights, and to delete rights.

Access this tab from the Contexts page.

Element

Description

Create Right/Assign Role (icon)

Select to open the Create Right/Assign Role wizard.

Properties (icon)

Select to view the details of the right currently highlighted in the Rights table.

Edit (icon)

Select to edit the right currently highlighted in the Rights table.

Remove (icon)

Select if you want to remove the right currently highlighted in the Rights table. A dialog will ask you to confirm the removal.

Search

Enter part or all of the name of the right or rights that you want to display in the Rights table.

Search Rights (icon)

Select to search for rights with names matching the text in the search box. If there are more than fifty rights matching the search criteria, only the most recent fifty are shown. You will need to refine the search criteria to see the remaining rights.
If the search box contains no text, selecting this icon will list the fifty most recent rights.

Type

This column shows a user icon if the right is for a user. It shows a group icon if the right is for a group. A cross icon means that the type is unknown because the user or group cannot be found in the identity store.

Name

This column shows name information for the user or group holding the right. The entry "Not found" means that the name cannot be found in the identity store.

Role

This column shows the role that was assigned to the user or group to create the right.

Assigned Time

This column shows the date and time that the right was created. The list of rights is initially ordered by date and time.

B.2.3 Contexts Page: Translations

Use this tab to:

- Add names and descriptions of the current context in alternative languages (that is, alternative to the default language).

- Edit existing names and descriptions.

- Delete alternative names and descriptions that are no longer required.

Access this tab from the Contexts page.

Element

Description

New Translation (icon)

Select to open the New Translation dialog, through which names and descriptions can be added for alternative languages.
This is available only if multiple language support has been set up on the Control Console.

Edit (icon)

Select to edit the language details currently highlighted in the Translations table.

Remove (icon)

Select to remove the language details currently highlighted in the Translations table. A dialog will ask you to confirm the removal. You cannot remove the default language details.

Language

This column identifies the languages for which names and descriptions have been provided.

Default language (indicator)

This indicator against a language name shows that it is the default language. The default language is set on the Control Console. This is the language that is used in locales for which no alternative has been provided. You cannot remove this language from the Translations table.

Name

For each language, this column shows the name provided.

Description

For each language, this column shows the description provided.

B.2.4 Contexts Page: Managers

Use this tab to assign users as managers of the current context (creates context managers). Also use to view context manager details, and to end a user being the manager of a context.

Access this tab from the Contexts page.

Element

Description

New Manager (icon)

Select to open the New Manager dialog.

Properties (icon)

Select to view the details of the user currently highlighted in the Managers table.

Remove (icon)

Select to end the user selected in the Managers table being a manager of the current context. A dialog will ask you to confirm the removal.

Account Name, First Name, Last Name

These columns identify the users that have been assigned as managers of the current context.

B.2.5 Contexts Page: Exclusions

Use this tab to exclude specific sealed documents from the current context. Also use to end such exclusions.

Access this tab from the Contexts page.

Element

Description

Add Documents

Select this button to open a dialog through which you can find a sealed file that you want to exclude.

Remove (icon)

Select if you want to end the exclusion of the file currently highlighted in the table. A dialog will ask you to confirm the removal.

Document and Sealed Time

These columns show information for the sealed documents that have been excluded from the current context.

B.2.6 Contexts Page: Trusted Contexts

Use this tab to manage the trusted contexts for the current context. Trusted contexts are contexts to which sealed content can be exported from the current context.

Access this tab from the Contexts page.

Element

Description

New Trusted Context (icon)

Select to open the New Trusted Context dialog.

Remove (icon)

Select to end the trusted context status of the context currently selected in the Trusted Contexts table. A dialog will ask you to confirm the removal.

Name

This column shows the names of trusted contexts for the current context.

Description

This column shows the descriptions of trusted contexts for the current context.

B.2.7 New Trusted Context Dialog

Use this dialog to associate the current context with other existing contexts. This will establish the latter as trusted contexts, which are contexts to which sealed content can be exported.

Open the dialog by clicking the New Trusted Context icon on the Trusted Contexts tab of the Contexts page.

Element

Description

Available

This box shows contexts that can be assigned as trusted contexts for the current context. Highlight the contexts in this box that you want to move to the Selected box.

Move, Move All, Remove, Remove All

Use these controls to move context names between the Available and Selected boxes. The Move control and the Remove control will become available only when individual contexts are selected and will affect only those contexts.

Selected

All contexts whose names are listed in this box will become trusted contexts when the OK button is clicked. The presence or absence of check marks does not have any effect on this.

Details

This display area shows the details of any context individually selected in the Available or Selected boxes.

B.2.8 New Context Wizard

Use this wizard to create a new context, based on an existing context template. Domain administrators can create context templates. Domain administrators and domain managers can create contexts.

Open the wizard by clicking the New Context icon on the left panel of the Contexts page.

B.2.8.1 New Context: General

Use this page to name and describe a new context.

This page opens by default as the first page of the New Context wizard. It can also be opened by selecting the General/Settings node in the wizard header.

Element

Description

Template

Choose one of the available context templates from this drop-down list. Only active context templates are shown. You must base the new context on one of the available context templates. (Context templates can be created by domain administrators using the Context Templates page.)

Name
Description

Enter a name and description for the new context.
The name will be seen by users of Oracle IRM Desktop when they seal documents to this context, so the name should reflect the purpose of the context.

You should enter the name and description in the default language. The default language is shown against Language on this wizard page. The default language was set up on the Control Console, and is the language that is used in locales for which no specific translation has been provided.

You will be able to provide names and descriptions in other languages on the Translations page of this wizard, if multiple language support has been set up on the Control Console.

Language

Shows which language has been set on the Control Console as the default language.

Make Context Visible To Inspectors

This is normally checked. Contexts should be made visible to inspectors. Domain administrators that are also inspectors (as is recommended) will then be able to see all contexts that have been created, and be able to judge the effects of changing a context template.
You should only consider making the context not visible to inspectors if the context relates to highly sensitive matters. If you make a context not visible to inspectors, there is a danger that alterations to the context template on which it is based will have unintended consequences.

B.2.8.2 New Context: Managers

Use this page to assign one or more users to the context, making them context managers of this context. Context managers assign roles to users and are usually business owners.

You do not have to add yourself as a context manager: the user creating the context is automatically made a context manager.

This page opens as the second page of the New Context wizard. It can also be opened by selecting the Managers node in the wizard header.

Element

Description

Search
Search Users (icon)

Use this box and icon to populate the Available box with users who are candidates to become context managers. To find known users, type a few letters from the user name into the Search box, then click the Search button. To find all users, leave the Search box empty, then click the Search button.

Available Users

This box shows users that can be assigned as context managers. If the list is empty, populate it using the Search feature (described above). Highlight the users in this box that you want to move to the Selected Users box.

Move, Move All, Remove, Remove All

Use these controls to move user names between the Available Users and the Selected Users boxes. The Move control and the Remove control will affect only those users that have a check mark against them.

Selected Users

Users whose names are listed in this box will become context managers for this context when the wizard is completed.
The presence or absence of check marks does not have any effect on this.

The user who created the context will become a context manager even if his name is not listed in this box.

Details

This display area shows the details of any user individually selected in the Available Users or Selected Users boxes.

B.2.8.3 New Context: Translations

Use this page to provide names and descriptions of the new context in alternative languages (that is, alternative to the default language).

The name and description that you entered for the default language will already be shown on this page.

This page opens as the third page of the New Context wizard. It can also be opened by selecting the Translations node in the wizard header.

Element

Description

New Translation (icon)

Select to open the New Translation dialog, through which names and descriptions can be added for alternative languages.
This is available only if multiple language support has been set up on the Control Console.

Edit (icon)

Select to edit the language details currently highlighted in the Translations table. You cannot change the language associated with an existing name or description.

Remove (icon)

Select to remove the language details currently highlighted in the Translations table. A dialog will ask you to confirm the removal. You cannot remove the default language details.

Language

This column identifies the languages for which names and descriptions have been provided.

Default language (indicator)

This indicator against a language name shows that it is the default language. The default language is set on the Control Console. This is the language that is used in locales for which no alternative has been provided. You cannot remove this language from the Translations table.

Name

For each language, this column shows the name provided.

Description

For each language, this column shows the description provided.

B.2.8.4 New Context: Review

Use this page to review the choices made and information entered on the previous wizard pages.

This page opens as the final page of the New Context wizard. It can also be opened by selecting the Review node in the wizard header.

If you are not satisfied with the choices and entries shown on the Review page, use the Back button to return to the wizard pages and make changes.

If you are satisfied with the choices and entries shown on the Review page, create the new context by clicking the Finish button.

B.2.9 Assign Role (Create Right) Wizard

Use this wizard to create a new right (that is, assign a role to one or more users or groups). Rights are created by context managers.

Open the wizard by clicking the Assign Role icon in the toolbar of the Rights tab on the Contexts page.

B.2.9.1 Assign Role: Users and Groups

Use this page to specify one or more users or groups that will be granted the new right.

This page opens as the first page of the Assign Role wizard. It can also be opened by selecting the Users/Groups node in the wizard header.

Element

Description

Search
Search Users (icon)

Use this drop-down list, text box, and icon to populate the Available Users box with users or groups that are candidates to acquire the new right. First select either User or Group from the drop-down list. To find known users/groups, type a few letters from the name into the Search box, then click the Search Users icon. To find all users/groups, leave the Search box empty, then click the Search Users icon. Only users or groups that have not already been assigned a role in this context will be shown. This is because a user or group can have only one directly assigned role per context.

Available Users and Groups

This box shows users or groups that can be assigned a role. If the list is empty, populate it using the Search feature (described above). Highlight the users in this box that you want to move to the Selected Users and Groups box.

Move, Move All, Remove, Remove All

Use these controls to move user or group names between the Available... and Selected... boxes. The Move control and the Remove control will become available only when individual users or groups have a check mark against them, and will affect only those users and groups.

Selected Users and Groups

Users or groups whose names are listed in this box will be assigned a role (specified on the next page of this wizard) for this context when the wizard is completed.
The presence or absence of check marks does not have any effect on this.

Details

This display area shows the details of any user or group individually selected in the Available... or Selected... boxes.

B.2.9.2 Assign Role: Role

Use this page to specify which role is to be assigned in the creation of the right.

This page opens by default as the second page of the Assign Role wizard. It can also be opened by selecting the Role node in the wizard header.

Element

Description

Specify Role

Select Role: Use to select a role for the new right. Roles cannot be created here: they are created by domain administrators using the Roles page.

Selected Role Details

Description: Displays the description of the role. The description was written when the role was created.
Features: Displays the sealing features that are associated with the role. These features are part of the role definition and cannot be altered here. ("Features" in Oracle IRM Server equate to "Rights" in Oracle IRM Desktop.)

Restrictions: Displays the type of document access that was set up when the role was created. The listed documents referred to here are specified on the next page of this wizard, the Documents page.

B.2.9.3 Assign Role: Documents

Use this page to list specific sealed documents that users assigned this role can access, or specific sealed documents that users assigned this role cannot access.

This page opens by default as the third page of the Assign Role wizard. It can also be opened by selecting the Documents node in the wizard header.

Element

Description

Add (icon)

Select to open a dialog through which you can add a sealed document to the list. Only sealed documents in supported formats can be added: if you attempt to add a document type that is unsealed or not of a supported format, you will see an error message.

Delete (icon)

Select to remove the currently highlighted document from the list.

Restrictions (display)

Disallow access to listed documents: This means that the user assigned this role will be able to access all sealed documents (subject to context), except any that are listed in the table on this page.
Allow access to listed documents only: This means that the user assigned this role will not be able to access any sealed documents, except the ones listed in the table on this page. If you do not add sealed documents to this table, either now or by editing this role assignment later, the user will not be able to access any documents.

Document (column)

Lists the sealed documents associated with this role assignment.

Sealed time (column)

For each sealed document listed, shows the time that it was sealed.

B.2.9.4 Assign Role: Summary

Use this page to review the choices made and information entered on the previous wizard pages.

This page opens as the final page of the Assign Role wizard. It can also be opened by selecting the Review node in the wizard header.

If you are not satisfied with the choices and entries shown on the Summary page, use the Back button to return to the wizard pages and make changes.

If you are satisfied with the choices and entries shown on the Summary page, create the new right by clicking the Finish button.

B.2.10 Right Details Dialog

This dialog displays information about the user (or group), and the assigned role, for the right currently highlighted in the Rights table.

Open the dialog by clicking the Properties icon in the toolbar of the Rights tab on the Contexts page.

B.2.11 Edit Role Assignment Dialog

Use this dialog to edit a right (that is, change the assignment of a role to a user or group).

Open the dialog by clicking the Edit icon in the toolbar of the Rights tab on the Contexts page.

Edit Role Assignment: Users and Groups

This tab displays the users or groups that are currently granted the right.

Access this tab from the Edit Role Assignment dialog.

Edit Role Assignment: Role

Use this tab to change the assigned role for this right.

Access this tab from the Edit Role Assignment dialog.

Element

Description

Assigned Role

Use this drop-down list to select a new role for the right. Roles cannot be created here: they are created by domain administrators using the Roles page. For multiple users and groups, if they all have the same role, the drop-down list shows the current role.

Role Description

Displays the description of the role. The description was written when the role was created.

Edit Role Assignment: Documents

Access this tab from the Edit Role Assignment dialog.

This tab displays the specific set of sealed documents associated with the right, if any. You can add documents to the table on this tab using the Add icon. You can remove documents from the table using the Delete icon.

If the Restrictions display area shows Allow access to listed documents only, the table should list the only sealed documents that can be accessed by users assigned this role. In this case, if no documents are listed, users assigned this role cannot access any sealed documents.

If the Restrictions display area shows Disallow access to listed documents, the table may list sealed documents that cannot be accessed by users assigned this role. In this case, if no documents are listed, users assigned this role can access any sealed document (subject to context).

B.2.12 New Manager Dialog

Use this dialog to assign a user as the manager of a context, making that user a context manager.

Open the dialog by clicking the New Manager icon in the toolbar of the Managers tab of the Contexts page.

Element

Description

Search
Search Users (icon)

Use this text box and icon to populate the Available Users box with users that are candidates to become managers. To find known users, type a few letters from the user name into the Search box, then click the Search Users icon. To find all users, leave the Search box empty, then click the Search Users icon.

Available Users

This box shows users that can be assigned as managers. If the list is empty, populate it using the Search feature (described above). Highlight the users in this box that you want to move to the Selected Users box.

Move, Move All, Remove, Remove All

Use these controls to move user names between the Available Users and Selected Users boxes. The Move control and the Remove control will become available only when individual users have a check mark against them, and will affect only those users.

Selected Users

Users whose names are listed in this box will become managers when the OK button is clicked.
The presence or absence of check marks does not have any effect on this.

Details

This display area shows the details of any user individually selected in the Available Users or Selected Users boxes.

B.2.13 Manager Details Dialog

This dialog displays information about the manager (that is, the user assigned as a context manager for the current context) currently highlighted in the Managers table.

Open the dialog by clicking the View Details/Properties icon on the toolbar of the Managers tab on the Contexts page.

B.3 Roles Page

The following pages and wizards are used to create, modify, set options and enter data for roles in Oracle IRM:

- Roles Page: General Controls

- Roles Page: Features

- Roles Page: Translations

- Roles Page: Constraints

- New Role Wizard

B.3.1 Roles Page: General Controls

Use these controls to create, copy, and delete roles, and to refresh the list of roles. Roles are created by domain administrators.

Access these controls from the Roles tab.

Left-panel controls

Element

Description

New Role (icon)

Select to open the New Role wizard.

Copy (icon)

Immediately creates a copy of the role currently highlighted in the list of roles in the left panel.

Refresh (icon)

Select to refresh the list of roles in the left panel. You should do this to ensure that the list is showing roles that may have been created or deleted by other users.

Delete (icon)

Select if you want to delete the role currently highlighted in the left panel. A dialog will ask you to confirm the deletion.

Name

Lists all existing roles. Three standard roles are included at the time of installation. These can be used as supplied, modified before use, or deleted if not required.
Contributor with export: This role will not significantly restrict the use of sealed documents. Users given this role will be able to create, open, search, edit, and print all documents. Users will also be able to copy information to contexts on this server that have been set up as trusted contexts, and in which they have edit rights. Very importantly, users given this role will be able to create unsealed versions of documents.

Reader with export: This role will not allow creation of sealed documents, but it will not significantly restrict what users can do to sealed documents that they are given access to. Users given this role will be able to open, search, and print all documents. They will also be able to reply to sealed email, with edits tracked. Very importantly, users given this role will be able to create unsealed versions of documents.

Reader without print: This role will give significant protection to sealed documents. Users given this role will be able to open and search all documents. They will also be able to reply to sealed email, with edits tracked.

Right-panel controls

Element

Description

Revert

Select to cancel the changes made on this page. Does not work after the Apply button has been used.

Apply

Select to apply the changes made on this page. Once selected, the changes cannot be reverted, except by making and applying new changes.

Name (display)

Displays the name of the role currently highlighted in the list in the left panel. You can change the name on the Translations tab.

Description (display)

Displays the description of the role currently highlighted in the list in the left panel. You can change the description on the Translations tab.

Collapse Pane/Restore Pane control

Select to hide or show the header display area.

B.3.2 Roles Page: Features

Use this tab to assign and remove sealing features for the role.

For a role to be valid, at least one of the following features must be assigned: open, seal, reseal, search, copy to, save unsealed.

Access this tab from the Roles page.

Element

Description

Audit Use

Check this box if you want the use of this role to be recorded.

Available

This box lists all sealing features that are not currently assigned to the role. Highlight the sealing features in this box that you want to move to the Selected box.

Move, Move All, Remove, Remove All

Use these controls to move sealing features between the Available and Selected boxes. The Move control and the Remove control will become available only when individual features have a check mark against them, and will affect only those features.

Selected

This box lists the sealing features that are currently assigned to the role, or that will be once they are applied (by clicking the Apply button).
The presence or absence of check marks does not have any effect on this.

Details

This display area shows the details of any feature individually selected in the Available or Selected boxes.

B.3.3 Roles Page: Translations

Use this page to:

- Add names and descriptions of the current role in alternative languages (that is, alternative to the default language).

- Edit existing names and descriptions.

- Delete alternative names and descriptions that are no longer required.

Access this tab from the Roles page.

Element

Description

New Translation (icon)

Select to open the New Translation dialog, through which names and descriptions can be added for alternative languages.
This is available only if multiple language support has been set up on the Control Console.

Edit (icon)

Select to edit the language details currently highlighted in the Translations table.

Remove (icon)

Select to remove the language details currently highlighted in the Translations table. A dialog will ask you to confirm the removal. You cannot remove the default language details.

Language

This column identifies the language for which the alternative name and description have been provided.

Default language (indicator)

This indicator against a language name shows that it is the default language. The default language is set on the Control Console. This is the language that is used in locales for which no alternative has been provided. You cannot remove this language from the Translations table.

Name

For each language, this column shows the name provided.

Description

For each language, this column shows the description provided.

B.3.4 Roles Page: Constraints

Use this tab to specify time and other constraints for the role.

Access this tab from the Roles page.

Element

Description

Offline Access

Allow working offline Check this box to allow users to work on sealed documents even when they have no connection to the server (Oracle IRM Server). The maximum length of time that the user can work offline is the same as the rights refresh period (see below).

Rights Refresh Period

Use this drop-down list to select the maximum length of time that users can use rights before they are refreshed from the server. When the rights are refreshed, any new permissions or restrictions are applied.
The periods available here are set up on the Control Console.

Unless they have been changed from the defaults, the periods that you can choose from are 10 days, 3 days, 24 hours, 3 hours, and 10 minutes.

Short refresh periods will generate more traffic between client and server than long refresh periods, which may be a consideration if bandwidth is restricted.

Time Access

You can permit access to the sealed content covered by this role at all times, or during specific periods. The default is for sealed content to be accessible at all times (to those with the right to access it). Select from the following:
Accessible at all times Select this option if you want access to sealed content without time constraints.

Within period after role assignment Select this option if you want access restricted to a specific period after the role has been assigned to a user (that is, when a right has been created). You can choose a number of seconds, minutes, hours, days, months, or years using the controls that will appear when you select this option.

Within period after document sealed Select this option if you want access restricted to a specific period after a document has been sealed. You can choose a number of seconds, minutes, hours, days, months, or years using the controls that will appear when you select this option.

Role active during time period Select this option if you want to allow access to sealed content between two calendar dates. Controls will appear when you select this option: enter the start and end dates directly, or use the calendar controls to select the dates.

Document Access

When creating and managing rights, it is possible to apply those rights to specific documents within a context, rather than to all documents within a context.
Specify by including documents Check this box to require the listing of documents to which rights do apply.

Exporting Content

Use these options to allow or disallow export of content (by copying through the clipbboard or by saving a sealed file as an unsealed file). The default is to not allow export of content from sealed documents.
Do not allow Choose this option if you want no export of content from sealed documents accessed by this role.

Allow with restrictions Choose this option if you want to allow export of content to trusted contexts. See Section B.2.6, "Contexts Page: Trusted Contexts".

Allow with no restrictions Choose this option only if you want to allow export of content from sealed documents accessed by this role. This effectively allows a user assigned this role to remove protection from sealed documents. This option should be chosen only after careful consideration of the consequences.

B.3.5 New Role Wizard

Use this wizard to create a new role. Roles are created by domain administrators.

Open the wizard by clicking the New Role icon in the left panel of the Roles page.

B.3.5.1 New Role: General

Use this page to name and describe a new role.

This page opens by default as the first page of the New Role wizard. It can also be opened by selecting the General node in the wizard header.

Element

Description

Name
Description

Enter a name and description for the new role.
The description will be viewable, for example, when creating other Oracle IRM components that are dependent on this one, so a brief but informative description will prove useful.

You should enter the name and description in the default language, as shown against Language on this wizard page. The default language was set up on the Control Console, and is the language that is used in locales for which no specific translation has been provided.

You will be able to provide names and descriptions in other languages on the Translations page of this wizard, if multiple language support has been set up on the Control Console.

Language

Shows which language has been set on the Control Console as the default language.

B.3.5.2 New Role: Translations

Use this page to provide names and descriptions of the new role in alternative languages (that is, alternative to the default language).

The name and description that you entered for the default language will already be shown on this page.

This page opens as the second page of the New Role wizard. It can also be opened by selecting the Translations node in the wizard header.

Element

Description

New Translation (icon)

Select to open the New Translation dialog, through which names and descriptions can be added for alternative languages.
This is available only if multiple language support has been set up on the Control Console.

Edit (icon)

Select to edit the language details currently highlighted in the Translations table. You cannot change the language associated with an existing name or description.

Remove (icon)

Select to remove the language details currently highlighted in the Translations table. A dialog will ask you to confirm the removal. You cannot remove the default language details.

Language

This column identifies the languages for which names and descriptions have been provided.

Default language (indicator)

This indicator against a language name shows that it is the default language. The default language is set on the Control Console. This is the language that is used in locales for which no alternative has been provided. You cannot remove this language from the Translations table.

Name

For each language, this column shows the name provided.

Description

For each language, this column shows the description provided.

B.3.5.3 New Role: Features

Use this page to assign and remove sealing features for the role. Features control the ability of users to create and use sealed documents. These features equate to "rights" in Oracle IRM Desktop.

For a role to be valid, at least one of the following features must be assigned: open, seal, reseal, search.

This page opens as the third page of the New Role wizard. It can also be opened by selecting the Features node in the wizard header.

Element

Description

Available

This box lists all sealing features that are not currently assigned to the role. Select each one to see its description in the Details area. Highlight the features in this box that you want to move to the Selected box.

Move, Move All, Remove, Remove All

Use these controls to move features between the Available and Selected boxes. The Move control and the Remove control will become available only when individual features have a check mark against them, and will affect only those features.

Selected

Sealing features listed in this box will be applied to the role when the wizard is completed. The presence or absence of check marks does not have any effect on this.

Audit Use

Check this box if you want to the use of this role to be recorded.

Details

This display area shows the details of any feature individually selected in the Available or Selected boxes.

B.3.5.4 New Role: Constraints

Use this page to specify time and other constraints for the role.

This page opens as the fourth page of the New Role wizard. It can also be opened by selecting the Constraints node in the wizard header.

Element

Description

Offline Access

Allow working offline: Check this box to allow users to work on sealed documents even when they have no connection to the server (Oracle IRM Server). The maximum length of time that the user can work offline is the same as the rights refresh period (see below).

Rights Refresh Period

Use this drop-down list to select the maximum length of time that users can use rights before they are refreshed from the server. When the rights are refreshed, any new permissions or restrictions are applied.
The periods available here are set up on the Control Console.

Unless they have been changed from the defaults, the periods that you can choose from are 10 days, 3 days, 1 day, and 3 hours.

Short refresh periods will generate more traffic between client and server than long refresh periods, which may be a consideration if bandwidth is restricted.

Time Access

You can permit access to the sealed content covered by this role at all times, or during specific periods. The default is for sealed content to be accessible at all times (to those with the right to access it). Select from the following:
Accessible at all times: Select this option if you want access to sealed content without time constraints.

Within period after role assignment: Select this option if you want access restricted to a specific period after the role has been assigned to a user (that is, when a right has been created). You can choose a number of seconds, minutes, hours, days, months, or years using the controls that appear when you select this option.

Within period after document sealed: Select this option if you want access restricted to a specific period after a document has been sealed. You can choose a number of seconds, minutes, hours, days, months, or years using the controls that appear when you select this option.

Role active during time period: Select this option if you want to allow access to sealed content between two calendar dates. Controls will appear when you select this option: enter the start and end dates directly, or use the calendar controls to select the dates.

Document Access

When creating and managing rights, it is possible to apply those rights to specific documents within a context, rather than to all documents within a context.
Specify by including documents: Check this box to require the listing of documents to which rights do apply.

Exporting Content

Some sealing features control the exporting of content from a sealed document. Such export behavior can be permitted or denied on a feature-by-feature basis, or you can use these Exporting Content options to allow or disallow export of content on a broad basis. The default is to not allow export of content from sealed documents.
Do not allow: Select this option if you want no export of content from sealed documents accessed by this role.

Allow with restrictions: Select this option if you want to allow export of content to trusted contexts. See Section B.2.6, "Contexts Page: Trusted Contexts".

Allow with no restrictions: Select this option if you want to allow export of content from sealed documents accessed by this role.

B.3.5.5 New Role: Summary

Use this page to review the choices made and information entered on the previous wizard pages.

This page opens as the final page of the wizard. It can also be opened by selecting the Review node in the wizard header.

If you are not satisfied with the choices and entries shown on the Summary page, use the Back button to return to the wizard pages and make changes.

If you are satisfied with the choices and entries shown on the Summary page, create the new role by clicking the Finish button.

B.4 Reports Page

Use this page to generate and view reports about the use of Oracle IRM.

Open by clicking the Reports tab.

Generate Report Panel

Use this panel to generate reports. Only context managers and inspectors can generate reports. Inspectors are limited to generating reports for contexts that have been made visible to them.

Access this panel from the Reports tab.

Element

Description

Generate Report

After you have specified search criteria using the other controls on this page, click this button to generate the report.

Reset

Select to remove the search criteria on this page.

User Name
Search (icon)

Use this text box and icon to include records for one or more users.
User Name: Enter a user name, or a part of one or more user names.

Search: Click this button to open the Search Users dialog, through which you can search for and select specific users whose records you want to include in the report.

Document Name

Use this text box to include records for one document.
Enter the document's name in the Document Name box.

Documents To Include

Use these controls to include records for more than one document.
Add Documents (icon): Select to open the Add Document dialog, through which you can browse to a document that you want included in the report. Repeat to add further documents.

Document Name: Lists the documents that will be reported on.

Delete Document (icon): Select this icon to remove the document currently highlighted in the Document Name list.

Time

Use these controls to search for features used during a specific time period.
Start Date and End Date: Enter the start date and end date of the period. You can type the dates in directly, or you can select the Select Date And Time icons to open calendars from which you can select the dates.

Report Results Panel

Use this panel to view the results of report generation.

Access this panel from the Reports tab.

Element

Description

Time

The date and time at which the feature was used.

User

The account name of the user who used or attempted to use the feature.

Feature

The Oracle IRM feature that was used or that an attempt was made to use.
These features correspond to Oracle IRM Desktop "rights".

Context

The context in which the feature was used.

Item Code

The identifier of the document for which the feature was used.

Location

The document for which the feature was used, in its location.

Device Name

The name of the device hosting the document for which the feature was used.

Status

Whether the attempt to use the feature was successful (SUCCESS) or whether it failed (FAILURE).

B.5 Context Templates Page

The following pages and wizards can be used by domain administrators to create, set options, and enter data for context templates in Oracle IRM:

- Context Templates Page: General Controls

- Context Templates Page: Roles

- Context Templates Page: Translations

- New Context Template Wizard

B.5.1 Context Templates Page: General Controls

Use these controls to create, copy, and delete context templates, and to refresh the list of context templates.

Access the controls from the Context Templates page.

General Controls: Left Panel

Element

Description

New Context Template (icon)

Select to open the New Context Template wizard.

Copy (icon)

Select to immediately copy the template currently highlighted in the Templates list in the left panel. The copy is given the same name as the original, but with "Copy of" added to the beginning. The copy is added to the Templates list. You can change the name and the accompanying description on the Translations tab in the right panel.

Refresh (icon)

Select to refresh the list of templates in the left panel. You should do this to ensure that the list is showing any changes made by other users.

Delete (icon)

Select if you want to delete the template currently highlighted in the left panel. A dialog will ask you to confirm the deletion.

Templates

This list shows all context templates that currently exist for this domain. Two context templates are supplied at installation: "Export", and "Standard". These can be copied to create new context templates, and then modified as required.
Standard: As supplied, this context template contains roles that would typically be assigned to users or groups that are not entitled to create unsealed versions of sealed documents. This context template is supplied active, in which state it will be available for domain managers to create contexts from.

Export: As supplied, this context template contains roles that would typically be assigned to users or groups entitled to create unsealed versions of sealed documents. This context template is supplied inactive, in which state it is not available to create contexts from.

The roles included in the templates are listed in the Selected box on the Roles tab. To see how a particular role has been defined, click it in the Selected box: its description and all its other attributes are shown in the tabbed Details area at the foot of the page.

General Controls: Right Panel

Element

Description

Revert

Select to cancel the changes made on this page. Does not work after the Apply button has been used.

Apply

Select to apply the changes made on this page. Once selected, the changes cannot be reverted, except by making and applying new changes.

Name (display)

Displays the name of the context template currently highlighted in the list in the left panel. You can change the name on the Translations tab.

Description (display)

Displays the description of the context template currently highlighted in the list in the left panel. You can change the description on the Translations tab.

Template Is Active

If this box is checked, the template will be available to domain managers, who will be able to create contexts based on it.

Collapse Pane/Restore Pane control

Select to hide or show the header display area.

B.5.2 Context Templates Page: Roles

Use this tab to add roles to and remove roles from the context template.

Access this tab from the Context Templates page.

Element

Description

Available

This box lists the roles in this domain that have not been assigned to the current template. Highlight the roles in this box that you want to move to the Selected box.

Move, Move All, Remove, Remove All

Use these controls to move roles between the Available and Selected boxes. The Move control and the Remove control will become available only when individual roles have a check mark against them, and will affect only those roles.

Selected

This box lists the roles that have been assigned to the current template, or that will be assigned when the Apply button is clicked. The presence or absence of check marks does not have any effect on this.

Details

This tabbed area shows all the general, translations, features, and constraints attributes of the role currently highlighted in either the Available box or the Selected box. Role attributes cannot be changed here: domain administrators can change them on the Roles page.

B.5.3 Context Templates Page: Translations

Use this tab to:

- Add alternative names and descriptions of the current context template (that is, alternative to the default language).

- Edit existing names and descriptions.

- Delete alternative names and descriptions that are no longer required.

Access this tab from the Context Templates page.

Element

Description

New Translation (icon)

Select to open the New Translation dialog, through which names and descriptions can be added for alternative languages.
This is available only if multiple language support has been set up on the Control Console.

Edit (icon)

Select to edit the language details currently highlighted in the Translations table.

Remove (icon)

Select to remove the language details currently highlighted in the Translations table. A dialog will ask you to confirm the removal. You cannot remove the default language details.

Language

This column identifies the language for which the alternative name and description have been provided.

Default language (indicator)

This indicator against a language name shows that it is the default language. The default language is set on the Control Console. This is the language that is used in locales for which no alternative has been provided. You cannot remove this language from the Translations table.

Name

For each language, this column shows the name provided.

Description

For each language, this column shows the description provided.

B.5.4 New Context Template Wizard

Use this wizard to create a new context template. Domain administrators can create context templates.

Open the wizard by clicking the New Context Template icon in the left panel of the Context Templates page.

B.5.4.1 New Context Template: General

Use this page to name and describe a new context template, and to make it available for creating contexts.

This page opens by default as the first page of the New Context Template wizard. It can also be opened by selecting the General node in the wizard header.

Element

Description

Name
Description

Enter a name and description for the new template.
The description will be viewable, for example, when creating other Oracle IRM components that are dependent on this one, so a brief but informative description will prove useful.

You should enter the name and description in the default language, as shown against Language on this wizard page. The default language was set up on the Control Console, and is the language that is used in locales for which no specific translation has been provided.

You will be able to provide names and descriptions in other languages on the Translations page of this wizard, if multiple language support has been set up on the Control Console.

Language

Shows which language has been set on the Control Console as the default language.

Activate

Check the box to make this template available for the creation of contexts.

B.5.4.2 New Context Template: Translations

Use this page to provide names and descriptions of the new context template in alternative languages (that is, alternative to the default language).

The name and description that you entered for the default language will already be shown on this page.

This page opens as the second page of the New Context Template wizard. It can also be opened by selecting the Translations node in the wizard header.

Element

Description

New Translation (icon)

Select to open the New Translation dialog, through which names and descriptions can be added for alternative languages.
This is available only if multiple language support has been set up on the Control Console.

Edit (icon)

Select to edit the language details currently highlighted in the Translations table. You cannot change the language associated with an existing name or description.

Remove (icon)

Select to remove the language details currently highlighted in the Translations table. A dialog will ask you to confirm the removal. You cannot remove the default language details.

Language

This column identifies the languages for which names and descriptions have been provided.

Default language (indicator)

This indicator against a language name shows that it is the default language. The default language is set on the Control Console. This is the language that is used in locales for which no alternative has been provided. You cannot remove this language from the Translations table.

Name

For each language, this column shows the name provided.

Description

For each language, this column shows the description provided.

B.5.4.3 New Context Template: Roles

Use this page to specify which roles will be included on the new template.

This page opens as the third page of the New Context Template wizard. It can also be opened by selecting the Roles node in the wizard header.

Element

Description

Available

This box lists the roles in this domain that are available for assigning to the current template. Highlight the roles in this box that you want to move to the Selected box.

Move, Move All, Remove, Remove All

Use these controls to move roles between the Available box and the Selected box. The Move and Remove controls become active only when individual roles have checkmarks against them, and affect only those roles.

Selected

This box lists the roles that will be assigned to the new template when the wizard is completed. The presence or absence of check marks does not have any effect on this.

Details

This display area shows the name and description of the role currently highlighted in either the Available box or the Selected box.

B.5.4.4 New Context Template: Summary

Use this page to review the choices made and information entered on the previous wizard pages.

This page opens as the final page of the New Context Template wizard. It can also be opened by selecting the Review node in the wizard header.

If you are not satisfied with the choices and entries shown on the Summary page, use the Back button to return to the wizard pages and make changes.

If you are satisfied with the choices and entries shown on the Summary page, create the new context template by clicking the Finish button.

B.6 Domain Page

The following pages and dialogs can be used to create administrators:

- Domain Page: Administrators

- Domain Page: Translations

- New Administrator Dialog

- Administrator Details Dialog

B.6.1 Domain Page: Administrators

Use this tab to assign users as domain administrators, domain managers, and inspectors.

Note:
You cannot create context managers using this page: context managers are assigned by specifying a user to be the manager of a context (see the Managers tab of the Contexts page).

Access this tab from the Domain page.

Element

Description

View

Use this drop-down list to select the types of administrator shown in the table.
All: Select to show inspectors, domain managers, and domain administrators in the table.

Inspector: Select to show only inspectors in the table.

Domain Manager: Select to show only domain managers in the table.

Domain Administrator: Select to show only domain administrators in the table.

New Administrator (icon)

Select to open the New Administrator dialog, through which you can create an administrator that will be added to the administrators table.
If you want a user to be more than one administrator type, create multiple entries in the table for the same user.

Administrator Details/Properties (icon)

Select to view the details of the administrator currently highlighted in the table.

Refresh (icon)

Select to refresh the administrators shown in the table.

Remove Administrator (icon)

Select to remove the administrator currently highlighted in the table. You will be asked to confirm the removal.

Type, Name, Administrator Type

These columns show the details for each administrator.

B.6.2 Domain Page: Translations

Use this page to specify the text that will appear in the header of server-specific status pages.

Text in the default language will appear here automatically, because it is taken from text that was entered during server installation.

Access this tab from the Domain page.

Element

Description

New Translation (icon)

Select to open the New Translation dialog, through which names and descriptions can be added for alternative languages.
This is available only if multiple language support has been set up on the Control Console.

Edit (icon)

Select to edit the language details currently highlighted in the Translations table. You cannot change the language associated with an existing name or description.

Refresh (icon)

Select to refresh the list of translations.

Remove (icon)

Select to remove the language details currently highlighted in the Translations table. A dialog will ask you to confirm the removal. You cannot remove the default language details.

Language

This column identifies the languages for which names and descriptions have been provided.

Default language (indicator)

This indicator against a language name shows that it is the default language. The default language is set on the Control Console. This is the language that is used in locales for which no alternative has been provided. You cannot remove this language from the Translations table.

Name

For each language, this column shows the name provided.

Description

For each language, this column shows the description provided.

B.6.3 New Administrator Dialog

Use this dialog to create the following types of administrator:

- domain administrator

- domain manager

- inspector

Open the dialog by clicking the New Administrator icon on the Administrators tab of the Domain page.

Element

Description

Administrator Type

Use this drop-down list to choose the type of administrator that will be created.
Inspector: Select to specify that an inspector should be created.

Domain Manager: Select to specify that a domain manager should be created.

Domain Administrator: Select to specify that a domain administrator should be created.

Search
Search Users (icon)

Use this text box and icon to populate the Available Users box with users that are candidates to become administrators. To find known users, type a few letters from the user name into the Search box, then click the Search icon. To find all users, leave the Search box empty, then click the Search icon.

Available Users

This box shows users that can be assigned as administrators. If the list is empty, populate it using the Search feature (described above). Highlight the users in this box that you want to move to the Selected Users box.

Move, Move All, Remove, Remove All

Use these controls to move user names between the Available Users and Selected Users boxes. The Move control and the Remove control will become available only when individual users have a check mark against them, and will affect only those users.

Selected Users

Users whose names are listed in this box will become administrators when the wizard is completed. The presence or absence of check marks does not have any effect on this.

Details

This display area shows the details of any user individually selected in the Available Users or Selected Users boxes.

B.6.4 Administrator Details Dialog

This dialog displays information about the administrator currently highlighted in the Administrators table.

Open the dialog by clicking the Administrator Details icon on the toolbar of the Administrators tab on the Domain page.

B.7 General Dialogs

The following dialogs are used throughout the product:

- New Translation Dialog

- Edit Translation Dialog

B.7.1 New Translation Dialog

Use this dialog to add names and descriptions in alternative languages (that is, alternative to the default language, which was set up in the Control Console).

Open the dialog by clicking the New Translation icon from various locations.

Element

Description

Language

Use this drop-down list to select the language for the alternative text.

Name

Use this box to enter a name in the selected language.

Description

Use this box to enter a description in the selected language.

B.7.2 Edit Translation Dialog

Use this dialog to change names and descriptions.

Open the dialog by clicking the Edit Translation icon from various locations.

Element

Description

Language

This display area shows the language for the name and description. This cannot be changed.

Name

Use this box to enter a new or amended name in the selected language.

Description

Use this box to enter a new or amended description in the selected language.

Index
A  C  D  E  F  I  L  M  O  R  S  T  U  W

A

administration tools, 1.3

administrators, 2

about, 2.1

creating, 2.2

domain administrator, 2.2

domain manager, 2.2

inspectors, 2.2

page and tab visibility, A.2

C

configuring Oracle IRM, 9.3

context managers

adding, 5.7

creating, 2.3

context templates, 4

about, 4.1

adding roles, 4.3

creating, 4.2

contexts, 5

about, 5.1

adding trusted context, 5.6

creating, 5.2

deleting, 5.4

excluding sealed documents, 5.5

modifying, 5.3

removing trusted contexts, 5.6

templates, 4

control console, 1.3, 1.3.2

configuring Oracle IRM, 9.3

displaying, 1.3.2, 9.1

home page, 9.2

setting up installers, 9.6

setting up multiple languages, 9.5

setting up test content, 9.4

using, 9

copying, 8.1

D

deleting, 8.7

descriptions

changing, 8.3

domain administrators

creating, 2.2

domain managers

creating, 2.2

domains, 2

about, 2.1

E

excluding sealed documents, 5.5

external user directories, 1.2

F

features

mapped to rights, A.1

I

inspectors

creating, 2.2

installation software, 9.6

L

languages, 9.5

LDAP, 1.2

lists

updating, 8.6

M

management console, 1.3, 1.3.1

common actions, 8

O

Oracle Fusion Middleware control console

displaying, 9.1

using, 9

Oracle IRM

introduction to, 1.1

Oracle IRM Desktop

setting up installers, 9.6

R

refreshing lists, 8.6

renaming, 8.2

reordering items in tables, 8.5

reports, 7

about, 7.1

generating, 7.2

results, 7.2

rights, 6

about, 6.1

creating, 6.2

mapped to features and constraints, A.1

modifying, 6.3

removing, 6.4

roles, 3

about, 3.1

adding to context template, 4.3

creating, 3.2

deleting, 3.4

modifying, 3.3

S

sealed documents

excluding from context, 5.5

T

tables

reordering items in, 8.5

templates, 4 test content, 9.4 translations

adding, 8.4

changing, 8.4

deleting, 8.4

setting up, 9.5

trusted contexts

adding, 5.6

removing, 5.6

U

updating lists, 8.6

user details, 1.2

W

WebLogic scripting tool, 1.3, 1.3.3

running commands, 1.3.3

WLST, 1.3, 1.3.3

Oracle Legal Notices

Copyright Notice

Copyright © 1994-2014, Oracle and/or its affiliates. All rights reserved.

Trademark Notice

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

License Restrictions Warranty/Consequential Damages Disclaimer

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

Warranty Disclaimer

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

Restricted Rights Notice

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

Hazardous Applications Notice

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Third-Party Content, Products, and Services Disclaimer

This software or hardware and documentation may provide access to or information on content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services.

Alpha and Beta Draft Documentation Notice

If this document is in preproduction status:

This documentation is in preproduction status and is intended for demonstration and preliminary use only. It may not be specific to the hardware on which you are using the software. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to this documentation and will not be responsible for any loss, costs, or damages incurred due to the use of this documentation.