Application Roles

Several predefined application roles for Oracle Content and Experience define what users can do. Some functionality is available only to users with specific application roles.

People can hold multiple application roles as needed. For example, you might want to designate one person as both a cloud account administrator and a service administrator. These application roles are assigned by the identity domain administrator. See Assign Roles to Groups and Assign Users to Groups.

Visitors can view certain sites, use public links, and view Oracle Content and Experience content embedded in apps or websites.

Any users that need to actually use Oracle Content and Experience must be assigned the standard user or enterprise user role in addition to any other roles they’re assigned.

The following table describes the application roles involved with Oracle Content and Experience instances with a Universal Credits subscription, a Government subscription, or a SaaS subscription. For information on how to access the interfaces listed in the table, see Administrative Interfaces.

Application Role (application role name in bold)	Access and Actions	Notes
Cloud account administrator	Cloud account administrators use the Infrastructure Classic Console to perform the following actions: Monitor and manage services for one or more Cloud accounts. Create new users. Provide access to services by assigning roles. Upgrade or terminate subscriptions. See Overview of Cloud Account Administration Tasks in Managing and Monitoring Oracle Cloud.	Cloud account administrators are set up when the account is created. They use their Oracle account to sign in to Oracle Cloud and access the Infrastructure Classic Console. If you need account administrator access and don’t have it, contact your primary account administrator. See Learn About Cloud Account Roles in Getting Started with Oracle Cloud. If you want cloud account administrators to use Oracle Content and Experience and modify the service configuration, they must also be assigned the standard user or enterprise user role.
Service administrator (CECServiceAdministrator)	From the Oracle Content and Experience Administration: System interface: General: Restrict file types and sizes; customize branding; enable or disable notifications; and set default time zone, language, and date/time format. Security: Set CORS origins, and enable the display of embedded content from Oracle Content and Experience Cloud within other domains. Billing: Specify the limits at which you want to be notified for billing metrics. These settings apply only to Oracle Content and Experience running on Oracle Cloud Infrastructure (OCI). Users: Manage users; set the default role for new folder members; synchronize user data; set whether to show conversation membership messages by default for a user; override user storage quotas; and transfer ownership of files from deprovisioned users. Assets: Manage how many renditions can be saved for each asset and maximum video file size. Sites: Enable sites access control options, and install the default site templates. SEO for Sites: Enable prerendering for sites and configure additional user agents. Documents: Set default user storage quota and manage storage space and set default link behavior. Conversations: Censor hashtags to prevent specific words from being used for hashtag search. See Configure Sites Settings. Metadata: Manage metadata (custom properties) so that users can quickly categorize files and folders with additional descriptions. Note: For Custom Properties, you must also have the Oracle Content and Experience Cloud Enterprise User role. From Oracle Content and Experience Administration: Integrations interface, configure integrations with Oracle Process Cloud Service, Oracle Eloqua Cloud Service, Oracle Visual Builder, Oracle Intelligent Advisor, Oracle Cobrowse Cloud Service, and custom applications. From Oracle Content and Experience Analytics interface: View service usage statistics, content metrics, and reports to help you analyze system needs or issues.	Service administrators must also be assigned the standard user or enterprise user role to be able to use Oracle Content and Experience.
Repository administrator (CECRepositoryAdministrator)	From the Oracle Content and Experience Administration: Content page: Create asset repositories. Create publishing channels. Create localization policies. Create content workflows and workflow roles. Create and publish taxonomies. From the Oracle Content and Experience Analytics interface: View assets and content metrics to help you analyze system needs or issues.	Repository administrators must also be assigned the enterprise user role to be able to use Oracle Content and Experience and access assets. A repository administrator is a user with a Manager role within at least one repository.
Content administrator (CECContentAdministrator)	From the Oracle Content and Experience Administration: Content page: Create new asset types and publish items. Create audience attributes.	Content administrators must also be assigned the enterprise user role to be able to use Oracle Content and Experience and access assets.
Capture administrator (CECCaptureAdministrator)	From the Oracle Content and Experience Administration: Capture page. Design and customize content capture workflows, or procedures, which are used to process physical and electronic documents in bulk for various business scenarios.	Procedure managers are typically assigned both the manager and user roles, so they can configure procedures and test them in the client.
Capture client user (CECCaptureClient)	From the Oracle Content Capture Client: Scan or import documents into Oracle Content and Experience.
Site administrator (CECSitesAdministrator)	From the Oracle Content and Experience Sites page: Create sites. From the Oracle Content and Experience Developer page: Create components. Create templates. Create themes. Configure the embeddable user interface.	When using site governance, site administrators make approved templates available to users for creating sites, approve site requests, and manage sites. This role also applies if your service administrator configured Oracle Content and Experience to allow only site administrators to create sites, templates, or components. Site administrators must also be assigned the standard user or enterprise user role to be able to use Oracle Content and Experience.
Developer (CECDeveloperUser)	From the Oracle Content and Experience Sites page as long as these features haven’t been limited to site administrators: Create, edit, and publish sites. From the Oracle Content and Experience Developer page as long as these features haven’t been limited to site administrators: Create components. Create templates. Create themes. Configure the embeddable user interface. From the Oracle Content and Experience Administration: Integrations interface: Configure application settings such as those described in Integrating and Extending Oracle Content and Experience.	Developers must also be assigned the standard user or enterprise user role to be able to use Oracle Content and Experience. Developers with the standard user role can create components, themes, and standard templates. Developers with the enterprise user role can also create layouts and save a site as a standard or enterprise template.
Enterprise user (CECEnterpriseUser)	From Oracle Content and Experience, enterprise users have access to all the Collaboration and Sites features that standard users have access to: Manage content (view, upload, and edit documents). Share content and sites with others. Use conversations to collaborate (discuss topics, direct message someone, assign flags to someone, add annotations to documents). Manage groups. Create, edit, and publish sites as long as this feature hasn’t been limited to site administrators. View and interact with content items in sites. Manage and view custom properties and edit values. In addition they have access to Assets: Create and manage content items and digital assets. Create and manage collections	Any users that need to actually use Oracle Content and Experience must be assigned the standard user or enterprise user role. These roles aren’t assigned by default to any user. See Task and Feature Comparison by Application Role.
Standard user (CECStandardUser)	From Oracle Content and Experience, standard users have access to Collaboration and Sites features: Manage content (view, upload, and edit documents). Share content and sites with others. Use conversations to collaborate (discuss topics, direct message someone, assign flags to someone, add annotations to documents). Manage groups. Create, edit, and publish sites as long as this feature hasn’t been limited to site administrators. View and interact with content items in sites. Manage and view custom properties and edit values.	Any users that need to actually use Oracle Content and Experience must be assigned the standard user or enterprise user role. These roles aren’t assigned by default to any user. See Task and Feature Comparison by Application Role.
Visitor (CECSitesVisitor)	Access sites restricted to visitors.	This role applies if a site is set to be accessed only by visitors. If that restriction is enabled, only users with this role will be able to access the site. See Change Site Security in Building Sites with Oracle Content and Experience. Visitors don’t require a license.
External user (CECExternalUser)	Reserved for future use.	Do not use this role. Users assigned this role can’t use the Oracle Content and Experience user interface.
CECIntegrationUser	Reserved for internal use.	Do not use this role. Users assigned this role can’t use the Oracle Content and Experience user interface.