Oracle® Retail Xstore Office Cloud Service User Guide Release 19.10 F89728-01 |
|
![]() Previous |
![]() Next |
This chapter provides information about creating user security roles and managing user access to Oracle Retail Xstore Office Cloud Service. The User Roles and Users and Security Access features provide the ability to create security roles and to grant privileges to users for one or more areas of Oracle Retail Xstore Office Cloud Service based on these roles.
Note: SecurityAny users in an Org Node higher than the logged-on user will not be displayed in the Admin Users list. In addition, the logged-on user cannot add Org Nodes that are higher than the org nodes he/she is assigned to. Security privileges are associated with Oracle Retail Xstore Office Cloud Service actions. |
Administration
Configurator
Data Manager
Deployment Manager
Home Page
Reports
Support
This chapter contains the following sections:
See User Roles for information about creating the roles used to determine user privileges in Oracle Retail Xstore Office Cloud Service. Access to different areas of Oracle Retail Xstore Office Cloud Service is controlled by assigning security Roles to the users.
See Admin Users - Using Roles to Grant Access to Oracle Retail Xstore Office Cloud Service for instructions on creating new Oracle Retail Xstore Office Cloud Service User Accounts and controlling user access to Oracle Retail Xstore Office Cloud Service.
Note: Refer to the Oracle Retail Xstore Suite Implementation and Security Guide for information about using DataLoader to load Oracle Retail Xstore Office Cloud Service user accounts. |
See Editing Oracle Retail Xstore Office Cloud Service User Accounts for instructions on changing an existing user's account privileges.
Note: The Role of ADMINISTRATOR is required. This role defaults to access for every privilege and has a rank of 150.Oracle recommends that you set up at least one ADMINISTRATOR user. Once this administrator user has been set up, delete the initial (default) administrator user account for security purposes. |
Access to different areas of Oracle Retail Xstore Office Cloud Service is controlled by assigning security Roles to the users. This section provides information about defining the user roles that will then be used to grant specific privileges to a user.
From the Oracle Retail Xstore Office Cloud Service menu, select System, then Xadmin Users, or click the Xadmin Users link in the System panel.
At the Xadmin Users page, click User Roles.
At the User Roles page, create a new User Role, edit an existing User Role, or delete an existing User Role:
To create a new Role, click Add New. The User Roles window displays and the fields are blank.
To edit an existing User Role, select the Role from the list. The User Roles window displays and the fields are populated with the current Role information.
To delete a User Role, select the Delete icon (X).
Complete the required fields. (All fields are required.)
Organization - Displays the Organization ID and its corresponding name the user selected during login.
Role ID - Type the role identifier. Spaces and special characters are not allowed in this field. When editing an existing role, this field cannot be changed.
Description - Type a description for the role.
Xadmin Rank - Type a numeric rank number for Oracle Retail Xstore Office Cloud Service. This rank is evaluated when creating a new Oracle Retail Xstore Office Cloud Service user in User and Security Access. An Oracle Retail Xstore Office Cloud Service user cannot assign a role to a new user that has a greater numeric rank than his/her Xadmin rank. For example, a logged-in user with a rank role of 50 cannot edit or create a rank role of 51 and above.
Xstore Rank - Type a numeric rank number for Oracle Retail Xstore Point of Service. This value is the rank associated to the user within the Oracle Retail Xstore Point-of-Service application and corresponds to the role the user holds within Oracle Retail Xstore Point of Service. This rank is evaluated when creating or editing an Oracle Retail Xstore Point-of-Service employee in Data Manager - Employees. An Oracle Retail Xstore Office Cloud Service user cannot assign Oracle
Retail Xstore Point-of-Service security groups to an employee that is ranked higher than his/her Oracle Retail Xstore Point-of-Service rank.
Privileges - Select each role privilege from the list of Available options and click the arrow button to move the role or roles to the Selected window:
Double right arrows - Add all privileges to the Selected window.
Single right arrow - Add selected privilege to the Selected window.
Single left arrow - Remove selected privilege from the Selected window.
Double left arrows - Remove all privileges from the Selected window.
To select several privileges at the same time, hold down the [Ctrl] key on the keyboard while selecting each privilege you want to assign to the role you are creating or editing. Click the single right arrow button to move the privileges from the Available window to the Selected window.
You can also hold down the [Shift] key in the same manner to select all the privileges between the first privilege you select and the last privilege you select. Click the single right arrow button to move the privileges from the Available window to the Selected window.
Click Save to create or update the role.
Note: A Delete icon (X) is available for roles you create. However, if a role has been assigned to a user it cannot be deleted. |
The available privileges for Oracle Retail Xstore Office Cloud Service are grouped by category: Administration, Configurator, DataManager, DeploymentManager, Home Page, Reports, and Support.
Make sure you set up Oracle Retail Xstore Office Cloud Service privileges properly.
For example, in Deployment Manager, the Deployment Plan privileges for View Deployment Plans and Create/Edit Deployment Plans technically work together. If you just have View privilege, you can only view deployment plans (as expected). However, you must have both privileges (view and create) in order to Create or Edit.
The same is true for the Configurator privileges. If you just have Discounts or Menus and so on., you cannot do anything. You must also have the Configurator privilege and the Global Configurations or Configuration Overrides privilege to be able to get to the Discounts/Menus/Receipts selection page.
If a user does not have the privilege for a specific home page panel, then it will not be displayed when the user logs into Oracle Retail Xstore Office Cloud Service. There are six panels in the Oracle Retail Xstore Office Cloud Service base configuration, so there are six privileges available. Also, if the user has access to the home page panel itself, but not to any of the options contained within it, then the panel will not be displayed.
Administration Security Privileges:
Available Locales
Broadcasters
Customizations
Integrations
Job Management
Lock/Reset Account
Organizations
System Manager
User Roles
Users and Security Access
Xadmin Settings
Xadmin Users
Configurator Security Privileges:
Code Value
Configuration Overrides
Configurator
Copy Store Configurations
Customer Displays
Delete Profile Element Configurations
Discounts
Global Configurations
Landscape Maintenance
Menu Configuration
Menus
Personality Maintenance
Profile Maintenance
Profile Management
Reason Codes
Receipts
Schedule Deployment
Security
Security Groups
Security Privileges
Store Personality Maintenance
Store Specific Overrides
System Config
Tab Configuration
Tender Maintenance
Tender Options Maintenance
Tender Security Settings
Tenders
Customization Privileges:
Delete Customizations
Export Customizations
Upload Customizations
DataManager Security Privileges:
Attached Items
Currency Exchange
Data Manager
Data Publisher
Employee
Employee Tasks
Item Matrix Manager
Item Message Maintenance
Item Pricing
Item Restriction Types
Item Restrictions
Items
Legal Entity (Country Pack ONLY)
Merchandise Hierarchy
Merchandise Items
Non Merchandise Items
OCDS Data Refresh
Organization Hierarchy
Organization Hierarchy Levels
Organization Hierarchy Maintenance
Store Collections
Store Communications
Store Messages
Stores
Tax Authority
Tax Brackets
Tax Elements
Tax Group
Tax Location
Tax Rates
Taxes
Vendor
DeploymentManager Security Privileges:
Approve Deployment Wave
Cancel Deployment
Create/Edit Deployment Plans
File Deploy
File Upload
Purge Deployment Files
Schedule Planned Deployment
Schedule Single Deployment
Unapprove Deployment Wave
Upload File to Deploy
View Deployment Plans
View Deployments
Note: The File Deploy privilege should not be assigned to the same role as either the File Upload or Upload File to Deploy privilege. |
Home Page Panel Security Privileges:
Home Page
Home Page Config Management Panel
Home Page Data Management Panel
Home Page Deployment Panel
Home Page Reports Panel
Home Page Support Panel
Home Page System Panel
Reports Security Privileges:
Airport Authority Report
Best Sellers Reports
Credit Card Report
Customer Account Activity Summary Report
Customer List Report
Daily Sales Report
Daily Sales Total Report
Daily Sales and Cash Report
Dashboard Report for Sale
Electronic Journal
Employee Performance Report
Employee Tasks Report
Flash Sales Report
Gift Certificate Report
Inventory Stock Cost Report
Item List Report
Journal Report
Layaway Account Activity Report
Layaway Aging Report
Line Void Report
No Sale Report
Post Void Report
Price Change Report
Price Override Report
Receiving Exception Report
Receiving Report
Returned Merchandise Report
Roll-up Stock Valuation Report
Sales By Department Report
Sales By Department Employee Report
Sales By Hour Analysis Report
Sales By Hour Report
Shipping Exception Report
Special Orders Report
Stock Valuation Reports
Store Locations Report
Suspended Transaction Summary Report
Tax Exemption Report
Transaction Cancel Detail Report
View Reports
Once you have created Roles, you can grant user access to Oracle Retail Xstore Office Cloud Service by assigning a Role, and its associated privileges, to the user.
For Xstore Office Cloud Service applications, a customer admin user is created in the Identity Cloud Service (IDCS) or Oracle Cloud Infrastructure Identity and Access Management (OCI IAM) as part of the provisioning process.
Note: The Identity Cloud Service (IDCS) is an Identity Management Service and Authorization Server. For more information on IDCS, see the Oracle Identity Cloud Service documentation set, Get Started portal for IDCS.
Oracle Cloud Infrastructure Identity and Access Management (IAM) provides identity and access management features such as authentication, single sign-on (SSO), and identity lifecycle management for Oracle Cloud as well as Oracle and non-Oracle applications, whether SaaS, cloud-hosted, or on-premises. For more information, see the Oracle Cloud Infrastructure Documentation.
|
The customer admin user has the privileges to assign organizations, roles and org nodes to each user.
Note: All users in Xadmin are synced with the users created in IDCS or OCI IAM. |
Users for the Xstore Office Cloud service application can be created in the Identity Cloud Service (IDCS) or Oracle Cloud Infrastructure Identity and Access Management (OCI IAM), either manually or imported into IDCS or OCI IAM, then that user will be pulled down to Xstore Office Cloud Service (Xadmin) by using the IDP sync job. See the Synchronizing New Users section below.
Note: For more information on how to create users for Xstore Office Cloud Service, see the Oracle Retail Xstore Office Cloud Service Cloud Service Security Guide. |
If a user is created in IDCS or OCI IAM, the following steps should occur:
The IDP sync job process, will pull users down from IDCS or OCI IAM. This job is configurable and runs every hour by default.
Once your user ID is pulled from IDCS or OCI IAM, the user ID will be visible on the User and Security Access Page. At this point, no organization and role will be assigned to your user ID. The user status is NEW.
The Admin user needs to assign minimum values to your user account, like organization, roles, org nodes and so on.
Once the Admin user assigned minimum values to your user account the status changes from NEW to PROVISIONED. You can login to the Xstore Office Cloud Service UI now.
Perform the following steps to change locales, and add organizations, roles and org nodes for an existing user.
From the Oracle Retail Xstore Office Cloud Service menu, select System Manager, then Xadmin Users, or click the Xadmin Users link in the System panel.
At the Xadmin Users page, click Users and Security Access.
At the Users and Security Access page, double-click on a user in the list.
Locale - This list contains the locales defined for your organization; defaults to English United States.
User ID, first/last name, credentials and email address can not be changed.
Note: If there are more than 200 Oracle Retail Xstore Office Cloud Service users in your organization, a Search page displays rather than the employee list as shown in Figure 2-5 above. |
Important: For cloud applications, delete users in the Identity Cloud Service (IDCS) or Oracle Cloud Infrastructure Identity and Access Management (OCI IAM) . |
Note: Xstore will not be deleting any users in Xadmin as part of the Right to Erasure and/or the Right to be Forgotten. Xadmin users will need to be deleted in a separate process triggered by you, the retailer. |
Click Add New, to assign an organization, role and org nodes to the user. The system displays the Add users organization, role and org nodes window. Select the following.
Organization - Select the organization ID the user has access to from the list.
Role - Select a role for the user.
Organization Nodes - Specify which stores the user has access to:
Select the globe icon. The system displays a list of organization nodes defined for your organization.
Select which nodes/stores the user will have access to, and click Add. The system displays the selected organization nodes.
The nodes you selected are shown, along with a Delete option you can use if you need to remove access to an Organization Node for the user.
Note: You can add and delete multiple organization nodes. |
Enable dashboard as home page check box - Select the check box to enable the Dashboard as your home page.
Note: The Dashboard can only be enabled as home page, when a single store node is assigned to the user. |
Click OK to save your entries. The system displays the User screen and updates the list of assigned organizations for the user.
Note: Multiple organizations and roles can be added to the same user by clicking Add. |
Click the Save button to apply the changes to the user's account.