Users, Groups, and Permissions Overview

As described in the topics under Managing System Administrators, a Delphix Engine installation is based on two levels of object ownership. The top level is the Delphix Domain. The Delphix Domain is the top-level container of all objects in the Delphix Engine installation. It is administered by users with Engine Admin credentials.

Beneath the Delphix Domain are Groups. The Engine Admin user can assign privileges to groups, dSources and VDBs. Privileges are inherited, meaning that privileges assigned to a group are effective for the dSources and VDBs contained in that group. The topic User Privileges for Delphix Objects describes the exact object privileges associated with the Owner and Provisioner roles within a group.

When you first install the Delphix Engine, it automatically creates a first group, <New Group>. You can edit the name of this group to begin creating your own groups.

Creating groups helps you manage policies and privileges over objects within that group. You can create policies as policy templates, and when applied at the group level, they extend over all objects within that group. For more information, see Creating Policy Templates.

Group privileges function in the same way. When object privileges are created for users at the group level, those privileges apply to all objects of that type within the group. When new objects are created or added to the group, the policies and privileges you have created at the group level will be applied to them.

Databases are added to groups as part of the dSource creation process. For more information, see Linking an Oracle Data Source.

When you log into the Delphix Management application, all groups are listed under the Manage > Datasets option. Click Expand All to view group related attributes. You can find information about group policies and you can also make notes.