Installation Guides › Implementation Guide › Architectural Considerations › Implementation Considerations › Determine how to Manage Policy Servers

Determine how to Manage Policy Servers

Should individual business units be responsible for managing Policy Servers? Or can a single business unit manage all Policy Servers centrally?

Local Policy Server Management

If individual business units manage Policy Servers and policy stores locally, consider that local Policy Server management:

• Lets each business unit manage their security requirements based on their individual needs.
• Can increase the complexity of the SOA Security Manager infrastructure; local Policy Server management can result in more Policy Server and policy stores to manage and upgrade.
• Can make a consistent implementation and management of SOA Security Manager core objects, policies, and application objects more challenging because SOA Security Manager administrators are located in disparate business units.

Centralized Policy Server Management

If a single business unit is to manage Policy Servers centrally, consider that central Policy Server management:

• Can facilitate a consistent implementation of SOA Security Manager core objects, policies, and application objects because all SOA Security Manager administrators are located in the same business unit.
• Can make the management of these objects easier because all SOA Security Manager administrators are located in the same business unit.

  Note: As illustrated, individual business units can continue to manage the SOA Security Manager Agents protecting their applications.

• Can simplify the SOA Security Manager infrastructure. Central management can result in fewer Policy Server and policy stores to manage and upgrade.
• Lets administrators monitor SOA Security Manager performance centrally.