This documentation is in pre-General Availability status and is intended for demonstration and preliminary use only. It may not be specific to the hardware on which you are using the software. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to this documentation and will not be responsible for any loss, costs, or damages incurred due to the use of this documentation.
Before getting started, ensure you meet the basic prerequisites for the service, and then complete the following tasks to get started:
A tenancy administrator in your organization already set up user groups, dynamic groups and compartments to use to control can access WebLogic Management and its resources.
You have provisioned and deployed WebLogic Servers that can be managed using WebLogic Management.
You have installed Oracle Cloud Agent on the instances running WebLogic Servers.
The Set up policy feature creates the policies required to use WebLogic Management. These required policies must be set at the root compartment (tenancy) by a tenancy administrator, otherwise, WebLogic Management can't discover domains.
User groups, dynamic groups and IAM policies specify which users and services can access certain OCI resources. You must identify which WebLogic Management resources the service can manage and which users can manage those resources. To do this, define user groups, dynamic groups, and then set up the required IAM policy.
The Set up policy feature creates the following policy statements that are required policy to use the service.
Policy statement
Description
Allow group $USER_GROUP to manage instance-family in compartment id $COMPARTMENT_ID
Allows the user group to manage WebLogic Management plugin in the compartment and its subcompartments.
Allow group $USER_GROUP to read instance-agent-plugins in compartment id $COMPARTMENT_ID
Allows the user group to interact with the WebLogic Management plugin in the compartment and its subcompartments.
Allow group $USER_GROUP to manage wlms-family in compartment id $COMPARTMENT_ID
Allows the user group to manage all WebLogic Management resources in the compartment and its subcompartments.
Allow group $USER_GROUP to use wlms-config in tenancy
Allows the user group to read and update the WebLogic Management Service configuration for the tenancy.
Allow group $USER_GROUP to manage secrets in compartment id $COMPARTMENT_ID
Allows the user group to manage OCI secrets in the compartment and its subcompartments.
Allow dynamic-group $DYNAMIC_GROUP to read secret-bundles in compartment id $COMPARTMENT_ID
Allows the WebLogic Management plugin to read OCI secrets in the compartment and its subcompartments.
Allow dynamic-group $DYNAMIC_GROUP to use wlms-managed-instance-plugins in tenancy
Allows the WebLogic Management plugin to use the WebLogic Management service.
Allow resource wlms server-components to read instance-family in compartment id $COMPARTMENT_ID
Allows the WebLogic Management plugin to check the status of OCI instances.
Set up policies
Verify you have the manage policies in tenancy permission. If you only have read or use permissions, you get an authorization error.
Open the navigation menu and click Observability & Management. Under WebLogic Management, click Overview.
Under List scope, select the compartment that contains the WebLogic domains running on OCI managed instances.
Click Set up policy.
In the Set up policy panel, provide the required information:
Policy name: Accept the default name or enter a friendly name for the policy.
Target compartment: Select the compartment to grant permissions to use the service.
Identity domain: Select the identity domain where the user group and dynamic group resides.
User group: Select a user group to grant permission to use the service.
Dynamic group: Select a dynamic group to grant permissions to use the service.
Note
If you are not ready or do not have permission to set up the policies, click Copy policy statements. Then, you can use these statements to create the policies or you can give them to the tenancy administrator. See Manually Creating Required IAM Policy.
Click Set up.
Registering an OCI Instance 🔗
When you register an instance with WebLogic Management Service it displays in the Console as a managed instance.
Open the navigation menu, click Compute, and then click Instances.
Click the instance that you want to register.
Click the Oracle Cloud Agent tab.
Enable the WebLogic Management Service Agent.
Wait up to 10 minutes for the Oracle Cloud Agent to enable the WebLogic Management Service Agent plugin.
Important
After you enable the WebLogic Management plugin on an instance, the instance registers with the service. The Console, however, does not display WebLogic domains on the instance until after the initial discovery scan, which is scheduled at the top of the following hour. Or, you can start an on-demand scan after the WebLogic Management plugin is running on the instance.
When the scan detects the presence of WebLogic domains, the plugin reports the discovery details to the service. This initial discovery phase can take some time to complete.
When the initial discovery phase is completed, verify that the resources are visible in the Console and that their status is Active. See Verifying WebLogic Management Resources.
After you have completed the prerequisites, set up IAM policy, and registered instances, go to the WebLogic Management
Overview page to see a summary of instances, domains and servers and their statuses.