What privileges are needed to manage users?

Users need the IT Security Manager (ORA_FND_IT_SECURITY_MANAGER_JOB) to access the user management areas of the application.

For more security topics for Oracle CX, see these playbooks on Oracle Help Center.