Documentation Nexus IQ Server 1.21

Our documentation site has moved. For the most current version, please see http://help.sonatype.com

6.4. The Root Organization

[Note]

The Root Organization was introduced in IQ Server version 1.18. Your installation of the IQ Server may be affected depending on its version:

  • If your original installation is version 1.18 or later, then the Root Organization is already part of your IQ Server system hierarchy. You can skip this section of the documentation.
  • If you upgraded from version 1.17 (or earlier) to version 1.18 (or later), then you need to create the Root Organization by following the instructions here.

The Root Organization is a new entity at the top of the system hierarchy that allows you to set policy globally across all organizations and applications. Creating the Root Organization is a one time process, and occurs when the IQ Server is restarted. The process makes a permanent change to the system hierarchy that cannot be undone. For this reason, it is strongly recommended that you backup the IQ Server before you create the Root Organization. For information on backing up the IQ Server, see Backing Up the IQ Server in the IQ Server Setup chapter.

6.4.1. Configuring the Root Organization

The next step in the creation process is deciding how to configure the Root Organization. You have two choices:

  • Choose an existing organization to act as a template for the Root Organization, which is configured with all of the policies and policy elements that you want to move to the Root Organization.
  • Choose to create an empty Root Organization to which you can later add policy. To help you decide between the two, each is described in more detail below.

Using a Template Organization

Using a template organization enables you to take the configuration of an existing organization and move it to the Root Organization. The policy elements to be moved include all policies, component labels, license threat groups, application categories, and policy monitoring, but not security settings.

When the Root Organization is created, the policy elements in the template organization are compared by name to policy elements throughout the IQ Server hierarchy. Only names are compared, not attributes like constraints, notifications, or applied licenses. When a match is found, all references to the that policy element are changed to refer to the template organization policy element and the match is deleted. The policy element is now inherited from the Root Organization rather than its original organization.

Using a template organization saves you time and effort in configuring the Root Organization, especially if you have many policy elements that you want to use globally throughout your system hierarchy. For this reason, it is the recommended method for configuring the Root Organization.

Creating an Empty Root Organization

If you choose to create an empty Root Organization, it will be blank like any other newly created organization; it will have no policies, component labels, license threat groups, or application categories. You can certainly add policy later to the Root Organization. However, if you want to move a policy element from an existing organization, then the migration process is a manual task. It involves renaming elements and switching between organizations multiple times, which can take time and effort.

6.4.2. Creating the Root Organization

Only users assigned to the CLM Administrator role can initiate the Root Organization creation process. Once the Root Organization is created, its security permissions behave the same as with any other organization. For more information about security, see the Security Administration chapter.

To create the Root Organization:

  1. Go to the Root Organization banner that appears below the IQ Server toolbar and click the Get Started button.
  2. Select the how you want to configure the Root Organization and click Continue. Choosing an existing organization to act as a template for the Root Organization configuration is strongly recommended.
  3. Restart the IQ Server to complete the Root Organization creation process.

When the IQ Server is restarted, the Root Organization is created. The IQ Server hierarchy is permanently changed; the Root Organization is at the top, followed by organizations, then applications.