Managing Environments
Learn how to manage the environments where your Fusion Applications are deployed.
Before You Create an Environment
Before you create an environment ensure the following:
- You have the correct permissions to manage environments. See Managing Oracle Cloud Users with Specific Job Functions.
- You or another administrator has created an environment family for this environment. See Managing Environment Families.
- You are familiar with the information in Planning an Environment.
Understanding the Health Status and Lifecycle State
During the life cycle of the Fusion Applications environment, it can display different states. The state of the environment is independent from the status of the applications running on the environment. This topic explains the status values and what they mean for the availability of your applications.
- Health status
You can think of the Health status as the status of your Fusion Applications. As long as the Health status is Available, your end users can access and use the running applications.
- Lifecycle state is the state of the Fusion environment.
End users can still access the applications when some updates are occurring on the environment, even though modifications on the environment are disabled. For example, when Lifecycle state is in the Updating state because you made updates to environment settings, such as adding an access control list (ACL) or adding a language pack. Before you can perform lifecycle updates, both the Health status and the Lifecycle state must be in the Available and Active states, respectively.
Health Status
The following table shows the possible values for the Health status of your environment:
Status | Description | Fusion Appplications Available? |
---|---|---|
Available | The environment is available. This is the normal working status. | Yes |
Maintenance in progress | The environment is undergoing planned maintenance. To view the estimated completion time of the maintenance, click the Maintenance link under Resources on the environment details page. | No |
Refresh in progress | The environment is undergoing a refresh from another environment. When the refresh is complete, the status returns to Available. | No |
Not Applicable | When the LifeCycle state of the Fusion Environment is creating, failed, disabled, deleting or deleted. | No |
Unavailable | The environment is unavailable. Contact support for more information. | No |
Environment Lifecycle State
The following table shows the possible values for the Lifecycle state of your environment:
Status | Description | Fusion Applications Available? |
---|---|---|
Creating | The environment resource is being created. | No |
Active | The environment resource is available. | Yes |
Updating | The environment resource is updating. This state occurs when configurations or changes are being implemented, such as network access control rules, language packs, or updating an administrator. In this state, the applications are still available, but you can't make any other changes to the environment resource settings (such as editing maintenance or adding tags) until this update is complete. | Yes |
Disabled | This state occurs when the managed key has been disabled. All users are forced out of the application. The key must be enabled before the environment can be restarted again. For more information, see Disabling and Enabling Keys. | No |
Deleting | The environment resource is in the process of being deleted. | No |
Deleted | The environment resource has been deleted. | No |
Failed | The environment resource creation failed. | No |
Understanding Work Requests
Some updates that you make to the environment are not immediate. When you make a change, for example, adding an administrator, a work request is initiated to make the update to the environment. While the work request is running, the Lifecycle state of the environment changes to Updating and the Health status changes to Unknown. You can't make additional updates to the environment until the work request completes. You can view the status of the work request by clicking Work Requests, found under Resources on the left side of the details page. While the work request is running, the fields that are not updateable display as grayed out.
If an operation fails, the work request can provide details to help you troubleshoot the issue or provide information to support.
When Environment Modifications Are Not Allowed
At some times you will not be able to make updates to a Fusion Applications environment. In some cases, you'll see a message on the details of the environment to alert you that updates to the environment are disabled, and int others you will get a message after you attempt the update.
You'll see the banner message when maintenance is in progress, or when the environment is updating. You can also see this message when the environment is still being created, has been deleted, or is in the state of deleting. When the maintenance or current update is complete, you'll be able to make updates to the environment, unless the environment is unavailable due to deletion.
Four days prior to scheduled maintenance, you can't make the following updates to an environment:
- Add an administrator
- Add language packs
- Add tags
- Rename the environment
- Update network access control lists
- Update maintenance policy
- Move the environment to a different compartment
- Refresh the environment
If you try to make one of these updates, you'll get an error letting you know that the environment is within the maintenance window. Wait until the scheduled maintenance is complete to make these updates.
Creating an Environment
If your tenancy doesn't yet have any environment families or environments, you can use the Fusion Applications Environment Setup Wizard to streamline the initial setup process. If you already have an environment family set up in your tenancy, use this procedure to create environments.
Before you begin, ensure that you understand the options you'll choose when you create the environment.
- Navigate to the environment family where you want to create the environment: On the Applications tab of the Console, click Fusion Applications. On the Overview page, click Environment families. On the environment families page, click the name of the environment family.
- On the environment family page, click Create environment.
- Enter a friendly name for the environment that will make it easy to identify. Avoid entering any confidential information in this field.
- Select the environment family. If you launched this workflow from the environment
family, this field is preselected for you.Tip
If you launched this workflow from another starting point, you are prompted to select the environment family. If you don't see the environment family in the list, you might need to change the compartment that you are viewing. Click Change compartment to select from the list of available compartments. - Select the environment type: Production, Test, or Development. For more information, see About Environment Types.
- Review the applications listed. These are the applications that will be installed in this environment. You can click the expand arrow to see details about each subscription. The applications included are defined by the environment family selection and can't be changed here.
- Add Fusion application administrator credentials.
The administrator that you add here will be the service administrator for the applications in this environment and can create other applications users.
- Enter the first and last name of the administrator.
- Enter an email address for the administrator.
- Enter a username for this administrator.
- Enter a password for this administrator and confirm it. The password must be 12-40 characters in length and contain at least 1 uppercase letter, one lowercase letter, and one number.
- Click Show advanced options to configure additional settings. If you don't want to configure these options now, click Create environment. The environment will be ready to use after several minutes, when the environment health status shows as Available.
All of the advanced options can be edited after environment creation except the DNS prefix. If you want to customize the DNS prefix, go to the optional Networking step below.
- (Optional) Configure Maintenance. If you don't want to accept the default schedule from the environment family, you can edit the monthly patching and patching cadence for this environment. For more information about these options, see Understanding Environment Maintenance. To edit the settings:
Click Custom.
- Monthly patching – when enabled, this option delivers bug fixes every month so you don't have to wait until the quarterly update. Only bug fixes are delivered through monthly patching. If you don't choose this option, bug fixes are delivered with your quarterly maintenance updates. The default state of Enabled or Disabled is determined by the environment family. To edit the setting for this environment, toggle the switch to the appropriate setting.
- Patching cadence – maintenance can be performed in the first week of the month (non-production) or in the third week of the month (production). Typically, for test and development environments you would choose non-production and for production you would choose production. See Types of Maintenance and Schedules for more details.
- (Optional) Click Compartment to select a different compartment in which to create this environment. Select the new compartment from the list.
- (Optional) Click Languages to add language packs to this environment. Select the check box for each language to include. English is selected by default and can't be deselected. You can select up to 2 languages at provisioning time. You can add more languages after the environment is created. For more information about language packs, see Understanding Language Packs.
- (Optional) To customize the DNS prefix, click Networking. Adding a DNS prefix allows you to customize the URL you use to access your Fusion Applications home page. The prefix can be 1-20 characters. As you enter the prefix, the URL preview is displayed.
- (Optional) To add network access control rules, click
Networking. To define a rule, click Create
rule:
- To add a rule to allow access only from a CIDR block range: Select the IP notation type: CIDR Block, and then enter the range in the format shown.
- To add a rule to allow access only from a Virtual Cloud Network: Select the IP notation type: Virtual Cloud Network or Virtual Cloud Network (OCID). If you select VCN name, you are prompted to select the name from a list. If the VCN is located in a different compartment than the one you are creating the environment in, click Change compartment to view and select the VCN in a different compartment. If you select Virtual Cloud Network (OCID), specify the OCID of the VCN.
- To further restrict access to only a CIDR block within that VCN, enter the CIDR block range in the Optional field.
- Add a Description.
- To add additional rules, click Another entry and add more rules according to the preceding instructions.
- When finished adding rules, click Create rule.
- To disable content acceleration, disable the Internet cache switch. If you are configuring your environment for private access over VPN or FastConnect, you must disable this option. For more information, see Securing Network Access to a Fusion Applications Environment.
- (Optional, available only with the purchase of specific subscriptions) Click the Encryption tab to encrypt the environment with customer-managed keys. For details, see Customer-Managed Keys for Oracle Break Glass.
- (Optional) Click the Tags tab to add tags to the environment. If you have permissions to create a resource, then you also have permissions to apply free-form tags to that resource. To apply a defined tag, you must have permissions to use the tag namespace. For more information about tagging, see Resource Tags. If you're not sure whether to apply tags, skip this option or ask an administrator. You can apply tags later.
- After configuring advanced options, click Create environment. While the environment is provisioning, the health status of the environment shows as Not applicable and the lifecycle state is Creating. The environment will be ready to use when the health status shows as Available.
Environment Management Tasks
- On the Fusion Applications Overview page, in the Environment details page section of Guided learning, click Start tour. You are provided step-by-step assistance to view the details of an environment. During the tour, you can navigate to the previous or next step by using the Back or Next button respectively. At the end of the tour, click Done. To exit the tour at any point, click Close. You can submit your feedback about the guided tour after you close or complete it.
- On the Fusion Applications
Overview page, click Environments, and then click the environment name.
The details page displays information about the environment and provides access to resources associated with the environment. See the subsequent topics in this section for more information about the resources.
Environment information includes:
- Name of the compartment where the environment is located.
- Environment family that this environment belongs to. Click the name to view the family details.
- Application URL for accessing the applications.
- The Oracle Cloud Identifier (OCID) of the environment. This identifier is useful when logging service requests.
- Type of environment (development, production, or test).
- System name of the environment.
- The Fusion Applications version.
- Create date.
- The next scheduled maintenance date. See also To check for upcoming maintenance.
- The health status and lifecycle state. See Understanding the Health Status and Lifecycle State.
- Follow the step-by-step guide on the user interface of the Console: On the Fusion Applications Overview page, in the Fusion administrator section of Guided learning, click Add administrator. You are provided step-by-step assistance to perform the task. To exit the task at any point, click Close. You can submit your feedback about the guided task after you close or complete it.
- Use the following procedure on the Console:Note
You can add administrators either through your application service console or through the environment details page of the Oracle Cloud Console. When you add the administrator using the environment details page described here, you must also perform a step in the Applications Security Console to import the user.- Navigate to the environment: On the Fusion Applications Overview page, click Environments, and then click the environment name.
- The environment details page is displayed.
- Under Resources, click Fusion administrators.
- Click Add and complete the required fields.
- Click Create administrator.
- Sign in to your applications Security Console as a service administrator, and perform the Synchronize User and Role Information task. The procedure is identical regardless of which Fusion Applications you have provisioned in your environment. To reference the task in a specific guide, you can go to:
- Securing HCM: Synchronize User and Role Information.
- Securing SCM: Synchronize User and Role Information.
- Securing ERP: Synchronize User and Role Information.
To remove an administrator, follow these steps:
- Navigate to the environment: On the Applications tab of the Console, click Fusion Applications. On the Overview page, find the environment family for the environment, and then click the environment name. The environment details page is displayed.
- Under Resources, click Fusion administrators.
- Next to the administrator user name, click the
You can't delete the primary administrator.
, and then click Delete. Confirm when prompted.
- Navigate to the environment: On the Applications tab of the Console, click Fusion Applications. On the Overview page, click Environments, and then click the environment name. The environment details page is displayed.
- Under Resources, click Fusion administrators.
- Next to the administrator user name, click the , and then click Reset password.
- Click Continue password reset.
- Enter the user name or email and select Forgot password.
- Click Submit. An email with instructions for resetting the password is sent to the email address for the user.
You can add language packs to an environment. For more information about language packs, see Understanding Language Packs. Note that you can't remove a language pack.
- Navigate to the environment: On the Applications tab of the Console, click Fusion Applications. On the Overview page, click Environments, and then click the environment name. The environment details page is displayed.
- Under Resources, click Language packs.
- Click Install.
- Select the check box for the language to include. You can add two language packs at a time.
- Click Install.
- Follow the confirmation prompts.
- Navigate to the environment: On the Applications tab of the Console, click Fusion Applications. On the Overview page, click Environments, and then click the environment name. The environment details page is displayed.
- The Environment information tab displays the details of the Maintenance
schedule:
- Next maintenance displays the date and time of the next scheduled maintenance.
- Click View to see the details of the updates scheduled to be applied. Details will be displayed when Oracle has finalized the content of the scheduled maintenance.
- On the environment details page, under Resources, click Maintenance.
- Click Edit maintenance.
- You can edit the following settings :
- Schedule type: Choose Environment family to use the environment family schedule. Choose Custom to set up specific maintenance schedule options for this environment. If you choose Custom, you can modify the following:
- Monthly patching: Enable or disable the switch to activate or deactivate monthly patching for this environment. Monthly patching delivers bug fixes every month so you don't have to wait until the quarterly update. New features and other updates are still delivered quarterly.
- Patching cadence: Maintenance can be performed in the first week of the month (non-production cadence) or in the third week of the month (production cadence). Typically, for test and development environments you would choose non-production and for production environments you would choose production. See Types of Maintenance and Schedules for more details.
- Click Save changes.
You can add, update, or delete access control rules for the environment.
- Navigate to the environment: On the Applications tab of the Console, click Fusion Applications. On the Overview page, click Environments, and then click the environment name. The environment details page is displayed.
- On the environment details page, under Resources, click Networking.
Update a Rule
- Find the rule you want to update, click the , and then click Update.
- Update the fields in the rule and then click Save changes.
Add a Rule
- Follow the step-by-step guide on the user interface of the Console: On the Fusion Applications Overview page, in the Network access control rule section of Guided learning, click Add rule. You are provided step-by-step assistance to perform the task. To exit the task at any point, click Close. You can submit your feedback about the guided task after you close or complete it.
- Use the following procedure on the Console:
- Click Create rule.
- Select the IP notation type:
- To add a rule to allow access only from a CIDR block range: Select CIDR Block, then enter the CIDR block range in the format shown.
- To add a rule to allow access only from a Virtual Cloud Network (when you know the VCN name): Select Virtual Cloud Network, then select the VCN from the list. If the VCN is located in a different compartment than the environment is in, click Change compartment to view and select the VCN in a different compartment. To further restrict access to only a CIDR block within that VCN, enter the CIDR block range in the Optional field.
- To add a rule to allow access only from a Virtual Cloud Network (when you know the VCN OCID): Select Virtual Cloud Network, then enter the VCN OCID. To further restrict access to only a CIDR block within that VCN, enter the CIDR block range in the Optional field.
- Click Create rule.
To delete a rule:
- Find the rule you want to update, and click the Actions menu (), and then click Delete.
- Click Delete to confirm deletion.
For information about when to disable internet cache, see Securely Accessing Fusion Applications.
- On the environment details page, under Resources, click Networking.
- Click the Content acceleration tab. The current Internet cache setting is displayed.
- Click Edit.
- Click the Internet cache switch to update the setting.
- Click Save changes.
- Navigate to the environment: On the Applications tab of the Console, click Fusion Applications. On the Overview page, click Environments, and then click the environment name. The environment details page is displayed.
- On the environment details page, click Rename.
- Enter the new name. The name can contain only letters, numbers, dashes, and underscores.
- Click Save changes.
When you move an environment to a different compartment, it will be accessible to only those users who have permissions to access resources in the new compartment. Also, moving the environment does not move the instances of your integrated applications. If you want your integrated applications (such as Visual Builder or Digital Assistant) to reside in the same compartment as the environment, you'll need to move those separately by navigating to the details page of each instance.
To move an environment to a different compartment:
- Navigate to the environment: On the Applications tab of the Console, click Fusion Applications. On the Overview page, click Environments, and then click the environment name. The environment details page is displayed.
- Click Move.
- Select the compartment you want to move the environment to from the Destination compartment list.
- Click Move resource.