Print      Open PDF Version of Online Help

Administering Oracle CRM On Demand > User Management and Access Controls > Access Profile Management > About Access Profiles in Roles

About Access Profiles in Roles

Each role in Oracle CRM On Demand has two access profile assignments:

• A default access profile assignment
• An owner access profile assignment

You can assign an access profile to multiple roles, and you can assign the same access profile to be both the default access profile and the owner access profile on a role. For example, you can assign the Full access profile (one of the predefined access profiles) as the default and owner access profiles for the Administrator role.

You assign access profiles to a role in step 3 of the Role Management Wizard. For more information about adding roles, see Adding Roles.

Default Access Profile

The default access profile on a role controls the access rights of a user to records that are not owned by that user, but are visible to the user because the Can Read All Records option is selected for the relevant record type in the record-type access settings on the user’s role.

If the Can Read All Records check box on the user’s role is deselected for a record type, the user has no access to that record type through the role, and the default access profile on the user role is never used for that record type.

According to the naming convention for access profiles, access profiles that are set up to be assigned as default access profiles are named as follows:

role name Default Access Profile

where:

• role name is the name of the role where the access profile is to be used.

For example, the name Administrator Default Access Profile indicates that this access profile controls access rights to record types and their related record types for the Administrator role.

Owner Access Profile

The owner access profile on a role controls the access rights of a user to records that are owned by that user or owned by a subordinate of the user.

According to the naming convention for access profiles, access profiles that are set up to be assigned as owner access profiles are named as follows:

role name Owner Access Profile

where:

• role name is the name of the role where the access profile is to be used.

For example, the name Service Manager Owner Access Profile indicates that this access profile controls access rights to record types and their related record types for the Service Manager role.

Related Topics

See the following topics for related information about access profiles:

• Access Profile Management
• Process of Setting Up Access Profiles
• How Access Rights Are Determined

See the following topics for related information about roles:

• Role Management
• Guidelines for Setting Up Roles
• Working with the Role List Page
• About Record Type Access in Roles
• About Access Profiles in Roles
• About Privileges in Roles
• Adding Roles