2.16 Managing Users Across an Application Express Instance

An Instance administrator manages all user accounts within an Oracle Application Express instance on the Manage Developers and Users page.

• About the Advantages of Managing Users at the Instance Level
  When setting up user accounts, instance administrators can take advantage of security capabilities such locking accounts, configuring password to have a fixed lifetime, and requiring user passwords be changed on first use.
• About Application Accounts Authentication
  User accounts are particularly useful if your application is using Application Express Accounts authentication. Application Express Accounts is a built-in authentication method in which user accounts are created and managed in the Oracle Application Express user repository.
• About Application Express User Roles
  Oracle Application Express users are divided into four roles.
• Creating New User Accounts in Administration Services
  Create new user accounts in Administration Services on the Manage Developers and Users page.
• Editing an Existing User Account in Administration Services
  Edit user accounts in Administration Services on the Manage Developers and Users page.
• Deleting User Accounts in Administration Services
  Delete user accounts in Administration Services on the Manage Developers and Users page.

See Also:

• "Workspace and Application Administration"

• "Managing Users in a Workspace"

2.16.1 About the Advantages of Managing Users at the Instance Level

When setting up user accounts, instance administrators can take advantage of security capabilities such locking accounts, configuring password to have a fixed lifetime, and requiring user passwords be changed on first use.

See Also:

"Configuring Security"

2.16.2 About Application Accounts Authentication

User accounts are particularly useful if your application is using Application Express Accounts authentication. Application Express Accounts is a built-in authentication method in which user accounts are created and managed in the Oracle Application Express user repository.

See Also:

"Application Express Account Credentials" in Oracle Application Express App Builder User’s Guide

2.16.3 About Application Express User Roles

Oracle Application Express users are divided into four roles.

To access the Oracle Application Express development environment, users sign in to a shared work area called a workspace. Users are divided into four primary roles:

• End users do not have access to development or administrative capabilities. End cannot sign into a workspace and create applications. End users can only run existing database or Websheet applications.

• Developers are users who create and edit applications, monitor workspace activity, and view dashboards.

• Workspace administrators are users who perform administrator tasks specific to a workspace such as managing user accounts, monitoring workspace activity, and viewing log files.

• Instance administrators are superusers that manage an entire hosted instance using the Application Express Administration Services application. Instance administrators manage workspace provisioning, configure features and instance settings, and manage security.

2.16.4 Creating New User Accounts in Administration Services

Create new user accounts in Administration Services on the Manage Developers and Users page.

To create a new user account:

Tip:

You can also access the Create/Edit User page by clicking Create User on the Workspace Tasks list on the Instance Administration home page.

1. Sign in to Oracle Application Express Administration Services.
2. Click Manage Workspaces.
3. Under Manage Workspaces, click Manage Developers and Users.
   The Manage Developers and Users page appears.
4. Click Create User.
   The Create/Edit User page appears.
5. Under User Attribute:
   1. Username - Enter the username used to sign in to the system. Restrictions include:

      • Maximum length of 100 characters

      • No spaces

      • Only these special characters are permitted: amerpsand (&) and period (.)

   2. Email Address - Enter the valid email address for this user.
   3. First Name - Enter the first or given name to further identify the user (optional).
   4. Last Name - Enter the last or family name to further identify the user (optional).
   5. Description - Enter comments about this user (optional).
   6. Default Date Format - Specify the default Oracle date format for the user. This option controls the default date format within SQL Workshop.
6. Under Account Privileges:
   1. Workspace - Select a workspace in which to create the user.
   2. Default Schema - Specify the default schema used for data browsing, application creation, and SQL script execution.
   3. Accessible Schemas (null for all) - Enter a colon-delimited list of schemas for which this developer has permissions when using the SQL Workshop. The list of schemas you enter here restricts the user to a subset of the full set of schemas provisioned for the workspace and determines what schema names the user sees in SQL Workshop.
   4. User is an administrator - Select Yes or No to specify if this user should have workspace administrator privileges. Administrators are given access to all components. Additionally, they can manage user accounts, groups, and development services. Components may not be available if they are switched off by Instance Administrators.
   5. User is a developer - Select Yes or No to specify if this user should have developer privileges. Developers create and modify applications and database objects and view developer activity, session state, workspace activity, application, and schema reports.

      Tip:

      Developers must have access to either App Builder, SQL Workshop, or both. Components may not be available if they are switched off by Instance Administrators.

   6. App Builder Access - Determines whether a developer has access to App Builder
   7. SQL Workshop Access - Determines whether a developer has access to the SQL Workshop.
   8. Team Development Access - Determines whether a user has access to the Team Development.
   9. Account Availability - Select Locked to prevent the account from being used. Select Unlocked to allow the account to be used.
7. Under Password:
   1. Password - Enter a case-sensitive password.
   2. Confirm Password - Enter the password again.
   3. Require Change of Password On First Use - Select No to require this user to change his or her password at first log in. Select Yes to require the user to change the password immediately after logging in the first time.
8. Click Create User or Create and Create Another.

2.16.5 Editing an Existing User Account in Administration Services

Edit user accounts in Administration Services on the Manage Developers and Users page.

To edit an existing user account in Administration Services:

1. Sign in to Oracle Application Express Administration Services.
2. Click Manage Workspaces.
3. Under Manage Workspaces, click Manage Developers and Users.
   The Manage Developers and Users page appears.
4. To edit account details, click a user.
5. Edit the appropriate attributes.

   Tip:

   To learn more about an attribute, see field-level Help.

6. Click Apply Changes.

   See Also:

   "Creating New User Accounts in Administration Services"

2.16.6 Deleting User Accounts in Administration Services

Delete user accounts in Administration Services on the Manage Developers and Users page.

To delete a user account in Administration Services:

1. Sign in to Oracle Application Express Administration Services.
2. Click Manage Workspaces.
3. Under Manage Workspaces, click Manage Developers and Users.
   The Manage Developers and Users page appears.
4. To edit account details, click a user.
5. Click Delete User.
6. Confirm your selection and click OK.