Managing Environments

Learn how to manage the environments where your Fusion Applications are deployed.

Before You Create an Environment

Before you create an environment ensure the following:

You have the correct permissions to manage environments. See Managing Oracle Cloud Users with Specific Job Functions.
You or another administrator has created an environment family for this environment. See Managing Environment Families.
You are familiar with the information in Planning an Environment.

Understanding the Health Status and Lifecycle State

During the life cycle of the Fusion Applications environment, it can display different states. The state of the environment is independent from the status of the applications running on the environment. This topic explains the status values and what they mean for the availability of your applications.

When you view your list of environments, you see two status indicators:

Health status
You can think of the Health status as the status of your Fusion Applications. As long as the Health status is Available, your end users can access and use the running applications.
Lifecycle state is the state of the Fusion environment.

End users can still access the applications when some updates are occurring on the environment, even though modifications on the environment are disabled. For example, when Lifecycle state is in the Updating state because you made updates to environment settings, such as adding an access control list (ACL) or adding a language pack. Before you can perform lifecycle updates, both the Health status and the Lifecycle state must be in the Available and Active states, respectively.

Health Status

The following table shows the possible values for the Health status of your environment:

Status	Description	Fusion Appplications Available?
Available	The environment is available. This is the normal working status.	Yes
Maintenance in progress	The environment is undergoing planned maintenance. To view the estimated completion time of the maintenance, click the Maintenance link under Resources on the environment details page.	No
Refresh in progress	The environment is undergoing a refresh from another environment. When the refresh is complete, the status returns to Available.	No
Not Applicable	When the LifeCycle state of the Fusion Environment is creating, failed, disabled, deleting or deleted.	No
Unavailable	The environment is unavailable. Contact support for more information.	No

Environment Lifecycle State

The following table shows the possible values for the Lifecycle state of your environment:

Status	Description	Fusion Applications Available?
Creating	The environment resource is being created.	No
Active	The environment resource is available.	Yes
Updating	The environment resource is updating. This state occurs when configurations or changes are being implemented, such as network access control rules, language packs, or updating an administrator. In this state, the applications are still available, but you can't make any other changes to the environment resource settings (such as editing maintenance or adding tags) until this update is complete.	Yes
Disabled	This state occurs when the managed key has been disabled. All users are forced out of the application. The key must be enabled before the environment can be restarted again. For more information, see Disabling and Enabling Keys.	No
Deleting	The environment resource is in the process of being deleted.	No
Deleted	The environment resource has been deleted.	No
Failed	The environment resource creation failed.	No

Understanding Work Requests

Some updates that you make to the environment are not immediate. When you make a change, for example, adding an administrator, a work request is initiated to make the update to the environment. While the work request is running, the Lifecycle state of the environment changes to Updating and the Health status changes to Unknown. You can't make additional updates to the environment until the work request completes. You can view the status of the work request by clicking Work Requests, found under Resources on the left side of the details page. While the work request is running, the fields that are not updateable display as grayed out.

If an operation fails, the work request can provide details to help you troubleshoot the issue or provide information to support.

When Environment Modifications Are Not Allowed

At some times you will not be able to make updates to a Fusion Applications environment. In some cases, you'll see a message on the details of the environment to alert you that updates to the environment are disabled, and int others you will get a message after you attempt the update.

You'll see the banner message when maintenance is in progress, or when the environment is updating. You can also see this message when the environment is still being created, has been deleted, or is in the state of deleting. When the maintenance or current update is complete, you'll be able to make updates to the environment, unless the environment is unavailable due to deletion.

Four days prior to scheduled maintenance, you can't make the following updates to an environment:

Add an administrator
Add language packs
Add tags
Rename the environment
Update network access control lists
Update maintenance policy
Move the environment to a different compartment
Refresh the environment
Add an integration

If you try to make one of these updates, you'll get an error letting you know that the environment is within the maintenance window. Wait until the scheduled maintenance is complete to make these updates.

Creating an Environment

If your tenancy doesn't yet have any environment families or environments, you can use the Fusion Applications Environment Setup Wizard to streamline the initial setup process. If you already have an environment family set up in your tenancy, use this procedure to create environments.

Before you begin, ensure that you understand the options you'll choose when you create the environment.

To create an environment

Navigate to the environment family where you want to create the environment: On the Applications Home of the Console, under Subscriptions, select Go to service on the Fusion Applications tile. On the Overview page, select Environment families. On the environment families page, select the name of the environment family.
On the environment family page, select Create environment.
Enter a friendly name for the environment that will make it easy to identify. Avoid entering any confidential information in this field.
Select the environment family. If you launched this workflow from the environment family, this field is preselected for you.
Tip

If you launched this workflow from another starting point, you are prompted to select the environment family. If you don't see the environment family in the list, you might need to change the compartment that you are viewing. Click Change compartment to select from the list of available compartments.
Select the environment type: Production, Test, or Development. For more information, see About Environment Types.
Review the applications listed. These are the applications that will be installed in this environment. You can click the expand arrow to see details about each subscription. The applications included are defined by the environment family selection and can't be changed here.
Add Fusion application administrator credentials.
The administrator that you add here will be the service administrator for the applications in this environment and can create other applications users.
- Enter the first and last name of the administrator.
- Enter an email address for the administrator.
- Enter a username for this administrator.
- Enter a password for this administrator and confirm it. The password must be 12-40 characters in length and contain at least 1 uppercase letter, one lowercase letter, and one number.
Select Show advanced options to configure additional settings. If you don't want to configure these options now, select Create environment. The environment will be ready to use after several minutes, when the environment health status shows as Available.
All of the advanced options can be edited after environment creation except the DNS prefix. If you want to customize the DNS prefix, go to the optional Networking step below.
(Optional) Configure Maintenance. If you don't want to accept the default schedule from the environment family, you can edit the monthly patching and patching cadence for this environment. For more information about these options, see Understanding Environment Maintenance. To edit the settings:
Select Custom.
- Monthly patching – when enabled, this option delivers bug fixes every month so you don't have to wait until the quarterly update. Only bug fixes are delivered through monthly patching. If you don't choose this option, bug fixes are delivered with your quarterly maintenance updates. The default state of Enabled or Disabled is determined by the environment family. To edit the setting for this environment, toggle the switch to the appropriate setting.
- Patching cadence – maintenance can be performed in the first week of the month (non-production) or in the third week of the month (production). Typically, for test and development environments you would choose non-production and for production you would choose production. See Types of Maintenance and Schedules for more details.
(Optional) Select Compartment to select a different compartment in which to create this environment. Select the new compartment from the list.
(Optional) Select Languages to add language packs to this environment. Select the check box for each language to include. English is selected by default and can't be deselected. You can select up to 2 languages at provisioning time. You can add more languages after the environment is created. For more information about language packs, see Understanding Language Packs.
(Optional) To customize the DNS prefix, click Networking. Adding a DNS prefix allows you to customize the URL you use to access your Fusion Applications home page. The prefix can be 1-20 characters. As you enter the prefix, the URL preview is displayed.
(Optional) To add network access control rules, select Networking. To define a rule, select Create rule:
- To add a rule to allow access only from a CIDR block range: Select the IP notation type: CIDR Block, and then enter the range in the format shown.
- To add a rule to allow access only from a Virtual Cloud Network: Select the IP notation type: Virtual Cloud Network or Virtual Cloud Network (OCID). If you select VCN name, you are prompted to select the name from a list. If the VCN is located in a different compartment than the one you are creating the environment in, select Change compartment to view and select the VCN in a different compartment. If you select Virtual Cloud Network (OCID), specify the OCID of the VCN.
- To further restrict access to only a CIDR block within that VCN, enter the CIDR block range in the Optional field.
- Add a Description.
- To add additional rules, click Another entry and add more rules according to the preceding instructions.
- When finished adding rules, click Create rule.
To disable content acceleration, disable the Internet cache switch. If you are configuring your environment for private access over VPN or FastConnect, you must disable this option. For more information, see Securing Network Access to a Fusion Applications Environment.
(Optional, available only with the purchase of specific subscriptions) Select the Encryption tab to encrypt the environment with customer-managed keys. For details, see Customer-Managed Keys for Oracle Break Glass.
(Optional) Select the Tags tab to add tags to the environment. If you have permissions to create a resource, then you also have permissions to apply free-form tags to that resource. To apply a defined tag, you must have permissions to use the tag namespace. For more information about tagging, see Resource Tags. If you're not sure whether to apply tags, skip this option or ask an administrator. You can apply tags later.
After configuring advanced options, select Create environment. While the environment is provisioning, the health status of the environment shows as Not applicable and the lifecycle state is Creating. The environment will be ready to use when the health status shows as Available.

Environment Management Tasks

To list environments

To view environment details

To add or remove Fusion administrators

You can add an administrator in one of the following ways:

Follow the step-by-step guide on the user interface of the Console: On the Fusion Applications Overview page, under Guided learning, find the Fusion administrator tile, and select Add administrator. You are provided step-by-step assistance to perform the task. To exit the task at any point, select Close. You can submit your feedback about the guided task after you close or complete it.
Use the following procedure on the Console:

Note

You can add administrators either through your application service console or through the environment details page of the Oracle Cloud Console. When you add the administrator using the environment details page described here, you must also perform a step in the Applications Security Console to import the user.
1. On the Environments list page, select the environment that you want to work with. If you need help finding the list page, see To list environments.
2. On the environment details page, under Resources, select Fusion administrators.
3. Select Add and complete the required fields.
4. Select Create administrator.
5. Sign in to your applications Security Console as a service administrator, and perform the Synchronize User and Role Information task. The procedure is identical regardless of which Fusion Applications you have provisioned in your environment. To reference the task in a specific guide, you can go to:
  - Securing HCM: Synchronize User and Role Information.
  - Securing SCM: Synchronize User and Role Information.
  - Securing ERP: Synchronize User and Role Information.

To remove an administrator, follow these steps:

Navigate to the environment: On the Applications Home of the Console, select Fusion Applications. On the Overview page, find the environment family for the environment, and then select the environment name.
On the environment details page, under Resources, select Fusion administrators.
Next to the administrator user name, select the Actions menu (), and then select Delete. Confirm when prompted.
You can't delete the primary administrator.