User Roles

There are several predefined user roles for Oracle Content and Experience Cloud that define what users can do. Some functionality is available only to users with specific user roles.

People can hold multiple user roles as needed. For example, you might want to designate one person as both an account administrator and a service administrator. These user roles are assigned by the identity domain administrator. See Add Users.

If you have an Oracle Documents Cloud entitlement, see User Roles in Oracle Documents Cloud.

Visitors can view certain sites, use public links, and view Oracle Content and Experience Cloud content embedded in apps or websites. Anonymous users (users that aren’t signed in) are counted as visitors. See Change Site Security in Creating Experiences with Oracle Content and Experience Cloud.

If you have a universal credits subscription, a visitor session is limited to a certain number of API calls and a certain amount of data transfer; see Understand Active Users per Hour. If you have a non-metered subscription, visitor activity counts towards your daily visitor sessions; see Understand Visitor Sessions.

Any users that need to actually use Oracle Content and Experience Cloud must be assigned the standard user or enterprise user role in addition to any other roles they’re assigned.

Each user assigned a user role, whether an administrator or an end user, counts as one user. If you have a universal credits subscription, the user is billed according to the user role they have. If you have a non-metered subscription, each user counts against the total users allowed for your service, except for visitors. Visitor usage for non-metered subscriptions is counted as part of daily visitor sessions. See Understand Visitor Sessions.

Each user, no matter how many user roles they are assigned, counts as only one user.

For information on how to access the interfaces listed in the table, see Administrative Interfaces.

User Role (user role name in bold)	Access and Actions	Notes
Cloud account administrator (for universal credits subscriptions) Account administrator (for non-metered subscriptions)	For universal credits subscriptions, Cloud account administrators use the My Services application to perform the following actions: Monitor and manage services of one or more Cloud accounts. Create new users. Provide access to services by assigning roles. Upgrade or terminate subscriptions. See Overview of Cloud Account Administration Tasks in Managing and Monitoring Oracle Cloud. For non-metered subscriptions, account administrator use the My Account application to perform the following actions: Activate and create identity domains. Activate a service. Monitor and manage services across all identity domains and data centers. Create identity domain administrators and other account administrators. See My Account Administration in Managing and Monitoring Oracle Cloud.	Cloud account administrators and account administrators are set up when the account is created. They use their Oracle account to sign in to Oracle Cloud and access My Services or My Account. If you need account administrator access and don’t have it, contact your primary account administrator. See Learn About Cloud Account Roles in Getting Started with Oracle Cloud. If you want account administrators to use Oracle Content and Experience Cloud and modify the service configuration, they must also be assigned the standard user or enterprise user role.
Identity domain administrator (Identity Domain Administrator)	From the My Services application: Create and manage user accounts. Assign and manage user roles, including creating custom user roles. See Learn About Cloud Account Roles in Getting Started with Oracle Cloud.	Assigned at the domain level. Works across multiple services. See Learn About Cloud Account Roles in Getting Started with Oracle Cloud. Identity domain administrators perform the same functions that a service administrator can, plus they handle administrative duties related to users. There is only one service per identity domain for Oracle Content and Experience Cloud. One administrator performs the duties of the service administrator and the identity domain administrator.
Entitlement administrator The format of the role name is service-name_SE service name Based Entitlement Administrator; for example, documents_SE Documents Service Based Entitlement Administrator.	From the My Services application: Create, manage, and view details of service instances. Applies when you’re subscribed to an entitlement to create multiple instances of Oracle Content and Experience Cloud. Monitor status of service instances, and export instance metrics data. See Subscribe to Oracle Cloud.	Assigned at the service level. See Oracle Cloud User Roles and Privileges in Getting Started with Oracle Cloud.
Service administrator For universal credits subscriptions, CECServiceAdministrator For non-metered subscriptions, Oracle Content and Experience Cloud Administrator	From the My Services application: Assign user roles. Change user passwords and challenge questions. Configure, monitor, and manage service instances. From Oracle Content and Experience Cloud Administration: Settings interface: Configure general settings such as branding, enabling notifications, and default time zone and language. Configure user settings such as syncing profile data, setting the default role for new members added to folders, and transferring content ownership. Configure documents settings such as storage quotas, enabling public links, and setting restrictions on the size and types of files that can be uploaded. Configure custom properties (must also have Oracle Content and Experience Cloud Enterprise User role). Configure sites settings such as whether sites can be created and installing the default site templates. From Oracle Content and Experience Cloud Administration: Integrations interface: Configure application settings such as those described in Integrate with Oracle Process Cloud Service, Integrate with Oracle Eloqua Cloud Service, and Manage Custom Applications. Note: Some of these features are currently unavailable if you have a universal credits subscription. From Oracle Content and Experience Cloud Analytics interface: View service usage statistics and content metrics to help you analyze system needs or issues. View reports.	Service administrators must also be assigned the standard user or enterprise user role to be able to use Oracle Content and Experience Cloud.
Site administrator For universal credits subscriptions, CECSitesAdministrator For non-metered subscriptions, Oracle Content and Experience Cloud Site Administrator	From Oracle Content and Experience Cloud Sites page: Create sites. From Oracle Content and Experience Cloud Developer page: Create templates, components, and themes. See Configure Sites and Assets Settings.	This role applies if your service administrator configured Oracle Content and Experience Cloud to allow only site administrators to create sites, templates, or components. Site administrators must also be assigned the standard user or enterprise user role to be able to use Oracle Content and Experience Cloud.
Developer (CECDeveloperUser)	From Oracle Content and Experience Cloud Sites page: Create, edit, and publish sites as long as this feature hasn’t been limited to site administrators. From Oracle Content and Experience Cloud Developer page: Create templates, components, and themes as long as these features haven’t been limited to site administrators. From Oracle Content and Experience Cloud Administration: Integrations interface: Configure application settings such as those described in Integrate with Oracle Process Cloud Service, Integrate with Oracle Eloqua Cloud Service, and Manage Custom Applications. Note: Some of these features are currently unavailable if you have a universal credits subscription.	Developers must also be assigned the standard user or enterprise user role to be able to use Oracle Content and Experience Cloud. Developers with the standard user role can create components, themes, and standard templates. Developers with the enterprise user role can also create layouts and save a site as a standard or enterprise template.
Content administrator For universal credits subscriptions, CECContentAdministrator For nonmetered subscriptions, Oracle Content and Experience Cloud Content Administrator	From Oracle Content and Experience Cloud Administration: Assets page: Create new content types and publish items.	Content administrators must also be assigned the enterprise user role to be able to use Oracle Content and Experience Cloud and access assets.
Repository administrator (CECRepositoryAdministrator)	From Oracle Content and Experience Cloud Administration: Assets page: Create asset repositories. Create localization policies. Create publishing channels. From Oracle Content and Experience Cloud Analytics interface: Content Operations to help you analyze system needs or issues.	Repository administrators must also be assigned the enterprise user role to be able to use Oracle Content and Experience Cloud and access assets. A repository administrator is a user with a Manager role within at least one repository.
Content Contributor (Contributor)	From Oracle Content and Experience Cloud Analytics interface: Content Operations to help you analyze system needs or issues.
Standard user For universal credits subscriptions, CECStandardUser For non-metered subscriptions, Oracle Content and Experience Cloud Standard User	From Oracle Content and Experience Cloud, standard users have access to: Manage content (view, upload, and edit documents). Share content and sites with others. Use conversations to collaborate (discuss topics, direct message someone, assign flags to someone, add annotations to documents). Manage groups. Create, edit, and publish sites as long as this feature hasn’t been limited to site administrators. View and interact with content items in sites. Manage and view custom properties and edit values.	Any users that need to actually use Oracle Content and Experience Cloud must be assigned the standard user or enterprise user role. These roles aren’t assigned by default to any user. See Task and Feature Comparison by User Role. WARNING: If you have an Oracle Content and Experience Cloud Government or Oracle Content and Experience Cloud for SaaS subscription, the standard user role isn’t supported. If you assign only this role to users, they won’t be able to access Oracle Content and Experience Cloud. If you’re not sure what type of subscription you have, see the Billing Metrics page in My Services. See View Billing Metrics.
Enterprise user For universal credits subscriptions, CECEnterpriseUser For non-metered subscriptions, Oracle Content and Experience Cloud Enterprise User	From Oracle Content and Experience Cloud, enterprise users have access to all the features that standard users have access to, plus: Create, manage, view, publish, and interact with content items, digital assets, and collections.	For use with an Oracle Content and Experience Cloud subscription. You must have purchased enterprise users. Any users that need to actually use Oracle Content and Experience Cloud must be assigned the standard user or enterprise user role. These roles aren’t assigned by default to any user. See Task and Feature Comparison by User Role.
Visitor For universal credits subscriptions, CECSitesVisitor For non-metered subscriptions, Oracle Content and Experience Cloud Visitor	Access sites restricted to visitors.	This role applies if a site is set to be accessed only by visitors. If that restriction is enabled, only users with this role will be able to access the site. See Change Site Security in Creating Experiences with Oracle Content and Experience Cloud. Visitors don’t require a license. Visitor usage is counted as part of daily visitor sessions. See Understand Visitor Sessions.
Integration user For universal credits subscriptions, CECIntegrationUser For non-metered subscriptions, Social Network Integration User	Used to impersonate another user while performing operations through the Social REST endpoints of the REST API for Collaboration.	Create a dedicated “Integration User” and assign it the integration user role. Note: This role is for an internal user, not an actual person. Users assigned this role can’t use the Oracle Content and Experience Cloud user interface. See “Social Resource” in REST API for Collaboration.
Storage administrator (Storage_Administrator)	For universal credits subscriptions, this role is used to give Oracle Content and Experience Cloud storage access.	If you have a universal credits subscription, create a dedicated “Storage Administrator” user, then add the dedicated user to the Storage Classic service, and assign the user the Storage_Administrator role. Note: This role is for an internal user, not an actual person. Users assigned this role can’t use the Oracle Content and Experience Cloud user interface.
External user (CECExternalUser)	Reserved for future use.	Do not use this role. Users assigned this role can’t use the Oracle Content and Experience Cloud user interface.