Sales and Service Access Management Work Area

As an IT Security administrator, you must be able to easily view the data a predefined role can access and to easily configure access to data for a user group using custom roles. Administrators must also be able to troubleshoot access issues for users.

You can perform all of these tasks using the Sales and Service Access Management work area, which provides simple interfaces where you can do these tasks:

• Create and manage access groups to provide sales resources with additional visibility to sales object data.

  See the Access Groups chapter for information about using access groups.

• Troubleshoot access issues for users:

  • Review all a user's access to object data, whether from data security policies or access groups

  • Identify the cause of any issues the user is experiencing in accessing specific records

• Review and configure the data access provided by roles:

  • View data access by object for a predefined Oracle CX role or for a custom role

  • Configure data security to add or remove a custom role's access to object data

  • End-date policies and configure advanced data permissions

  • Extend access to additional objects for custom roles

Note: You can view policies for custom objects in the Sales and Service Access Management work area but you can only configure security for custom objects in Application Composer.

Access to the Sales and Service Access Management Work Area

The Manage Sales and Service Access privilege (ZCA_MANAGE_SALES_AND_SERVICE_ACCESS_PRIV) grants access to all the functionality in the Sales and Service Access Management work area. This privilege is assigned by default to the IT Security Manager and the Customer Relationship Management Application Administrator job roles.

Users assigned the Manage Group Access privilege (ZCA_MANAGE_GROUP_ACCESS_PRIV) can access the Sales and Service Access Management work area to create and manage access groups. By default, the Sales Administrator job role and the IT Security Manager job role have this privilege.

If necessary, you can provide access to all the work area, or to the Access Groups region of the work area, by granting the Manage Sales and Service Access functional privilege or the Manage Group Access functional privilege to a custom job role.