Administrators and administrative users with the necessary permissions can configure users on the User Management page.
You can add a user in one of these ways:
Add a user manually in Oracle Commerce Workbench and assign permissions.
Add a user that is stored in LDAP and assign permissions.
If a user is a member of an LDAP that has been added to Workbench, the user is automatically added the first time when he or she logs in to Workbench.
Add a user that is stored in the Oracle Commerce Platform internal user repository if Commerce SSO is enabled.
If a user is a member of an Oracle Commerce Platform organization that has been added to Workbench as a group, then the user is automatically added the first time that he or she logs in to Workbench.
The LDAP options are available only if you have configured Oracle Workbench to store user authentication in LDAP. For more information about using Oracle Commerce Workbench with LDAP, see the Integrating LDAP with Oracle Commerce Workbench.
To add a user to Oracle Commerce Workbench:
Click the Users tab, and then click Add User.
The Create User dialog displays.
Select a Source. If your site uses Commerce SSO, then Commerce is already selected.
If your Source is LDAP, click Validate to determine if you have entered a valid LDAP user name.
Note
Validate does not display if your Source is Workbench or if you have Commerce SSO enabled.
If you entered a valid LDAP user name, then Workbench retrieves available user information and populates the name and email fields. This information and the user password is not editable.
If your Source is Commerce, click Validate to determine if you have entered a valid Commerce user name.
If you entered a valid Commerce user or group name, then Workbench retrieves available information from the Oracle Commerce Platform internal user repository and populates the name, email, and locale fields. Only the locale is editable.
If you want to change the locale from the one retrieved from the Oracle Commerce Platform internal user repository, select a different one for the user from the Locale drop-down.
If you select System default, then Workbench checks for a locale that Workbench supports in this order:
Select a group in which to add the user from the Select a group drop-down, and click the Include in Group button. Repeat this for each group in which you want to add the user.
Note
You cannot add an LDAP user to an LDAP group.
The user inherits the permissions of a group in which it is a member.
A user who is a member of two or more groups defined in Workbench is assigned the broadest permission associated with any of those groups. For example, if the user belongs to two groups: group A has permission to use Experience Manager and group B does not, then the user has access to Experience Manager due to his or her membership in group A.
If you want to give the user additional permission to use tools or to access content in your application that group membership does not provide, or if the user is not a member of any group, then follow these steps. You cannot use this procedure to remove permissions that a user is granted by membership in a group because permissions are additive. These permissions display in grey to indicate they cannot be removed.
Select the application in which the user will be working.
Any tools for which the user's group membership grants permissions are already selected.
Select the additional tools to which you want to give the user access.
If you selected Experience Manager in the previous step, or if it was already selected, you can update the content that the user can access. Expand Experience Manager.
If you want to limit the sites within an application that a user can access, then deselect the Site Page nodes for those sites.
Select or deselect the site pages, folders, and content folders to which you want to update user access.
Giving users access gives them full access: the user can read, write, and edit. Content permissions are inherited, so a content collection has the same permissions as the folder to which it belongs. You can also add permissions explicitly if the folder has no permissions.
If you selected Keyword Redirects in a previous step, or if it was already selected, you can update the redirect groups that the user can access. Expand Keyword Redirects.
Any redirect groups that the user's parent group grants permissions for are already selected.
Select or deselect the redirect group nodes to which you want to update user access.
The new profile displays on the Users tab of the User Management page.
