Configure PostgreSQL users and database

The following tasks must be completed before HCM ARA is installed. Work with the database administrator to complete the following tasks (or see the manufacturer’s documentation for more information).

At least two database users are needed when installing HCM ARA.

To configure PostgreSQL users and database, complete the following steps.

1. On the system hosting the database, install postgres-client if it is not already installed. As the root user, enter the following:

   Windows and Linux Ubuntu:

   apt-get install postgresql-client

   Linux Red Hat Enterprise

   rpm ivh postgres-client.rpm

2. For Linux Red Hat Enterprise, set the shared library path to include the PostgreSQL libraries (<postgresql_installation>/lib). For example, if you installed PostgreSQL in /opt/PostgreSQL/9.2/, run the following command:

   export LD_LIBRARY_PATH=/opt/PostgreSQL/9.2/lib:$LD_LIBRARY_PATH

3. Log in to psql as the postgres user.

   1. Enter the following:

   psql -h localhost -U postgres -d template1

   2. When prompted, enter the password for the postgres user.

4. Create a HCM ARA database user (for example, codardbuser). The HCM ARA database user is required. This user should inherit rights from parent roles and be a superuser.

   Caution On Windows, the user name cannot contain more than one dollar sign symbol ($). For example, c$adb is a valid name but c$$adb and c$ad$b are not valid names.

   From the psql prompt, enter the following:

   create role codardbuser login password '<codardbuser_password>' superuser inherit;

   This is the user to whom you will grant access to the HCM ARA database when you create this database.

5. For Windows and Linux Red Hat Enterprise, create an Operations Orchestration database user (for example, codaroodbuser). The Operations Orchestration database user, used by the embedded Operations Orchestration, is required. This user should inherit rights from parent roles and be a superuser.

   Caution On Windows, the user name cannot contain more than one dollar sign symbol ($). For example, c$adb is a valid name but c$$adb and c$ad$b are not valid names.

   From the psql prompt, enter the following:

   create role codaroodbuser login password '<odaroodbuser_password>' superuser inherit;

   This is the user to whom you will grant access to the Operations Orchestration database when you create this database.

6. Optionally, create an Identity Management component database user (for example, codaridmdbuser). This user should inherit rights from parent roles and be a superuser.

   Caution On Windows, the user name cannot contain more than one dollar sign symbol ($). For example, c$adb is a valid name but c$$adb and c$ad$b are not valid names.

   From the psql prompt, enter the following:

   create role codaridmdbuser login password '<codarimdbuser_password>' superuser inherit;

   This is the user to whom you will grant access to the Identity Management component database when you create this database. If you do not create this user, you can use the HCM ARA database user (for example, codardbuser) instead.

7. Create a new database for the Workflow Designer component
   
   create database ooddb with owner=codardbuser;

8. Optionally, create a reporting database user for HCM ARA (for example, CODARReportingDBUser). A reporting database user is needed only if you want to use the reporting capabilities of Cloud Service Automation, and you are using both the Cloud Service Automation and HCM ARA licenses. For details about the Cloud Service Automation reporting capabilities, see the Cloud Service Automation Reporting and Auditing Whitepaper. This user should have read-only rights.

   Note You must be using both the Cloud Service Automation and HCM ARA licenses to use the reporting capabilities.

   Caution On Windows, the user name cannot contain more than one dollar sign symbol ($). For example, c$adb is a valid name but c$$adb and c$ad$b are not valid names.

   From the psql prompt, enter the following:

   create role CODARReportingDBUser login password
   '<CODARReportingDBUser_password>' nosuperuser nocreatedb nocreaterole
   inherit;

   If you configure this user, you must provide this user's user name and password when prompted for the HCM ARA reporting database user during the installation of HCM ARA.

9. Create a new database for HCM ARA. Grant the HCM ARA database user all rights to this database. If you added a reporting database user in previous step, then grant the reporting database user read-only access to this database.

   Caution On Windows, the user name cannot contain more than one dollar sign symbol ($). For example, c$adb is a valid name but c$$adb and c$ad$b are not valid names.

   For example, if you create a database named codardb, an HCM ARA user named codardbuser, and a reporting database user CODARReportingDBUser, from the psql prompt, enter the following commands:

   create database codardb with owner=codardbuser connection limit=-1;
   grant all on database codardb to codardbuser;
   grant connect on database codardb to CODARReportingDBUser;

   You must provide this database name, database user name and, user's password when prompted for the HCM ARA database information during the installation of HCM ARA.

10. For Windows and Linux Red Hat Enterprise, create a new database for Operations Orchestration. Grant the Operations Orchestration database user all rights to this database. See the Operations Orchestration Database Guide for more information about database requirements for Operations Orchestration.

    Caution On Windows, the user name cannot contain more than one dollar sign symbol ($). For example, c$adb is a valid name but c$$adb and c$ad$b are not valid names.

    For example, if you create a database named codaroodb and an Operations Orchestration user named codaroodbuser, from the psql prompt, enter the following commands:

    create database codaroodb with owner=codaroodbuser connection limit=-1;
    grant all on database codaroodb to codaroodbuser;

    You must provide this database name, database user name and, user's password when prompted for the Operations Orchestration database information during the installation of HCM ARA.

11. Create a new database for the Identity Management component. Grant the Identity Management component database user (if you configured this user) or HCM ARA database user all rights to this database.

    Caution On Windows, the user name cannot contain more than one dollar sign symbol ($). For example, c$adb is a valid name but c$$adb and c$ad$b are not valid names.

    For example, to create a database named codaridmdb granting access to the Identity Management component database user named codaridmdbuser, from the psql prompt, enter the following commands:

    create database codaridmdb with owner=codaridmdbuser connection limit=-1;
    grant all on database codaridmdb to codaridmdbuser;

    If you did NOT create an Identity Management component database user named codaridmdbuser, create a database named codaridmdb and grant access to this database to the HCM ARA database user named codardbuser. From the psql prompt, enter the following commands:

    create database codaridmdb with owner=codardbuser connection limit=-1;
    grant all on database codaridmdb to codardbuser;

    You must provide this database name, database user name and, user's password when prompted for the Identity Management component database information during the installation of HCM ARA.

12. Exit psql. From the psql prompt, enter the following:

    \q