User roles in Oracle Life Sciences IAMS for all applications

Roles provide permissions for users to work in studies in Oracle Life Sciences products. Different roles provide different sets of permissions. When you assign roles to a user account, the application checks the permissions when users sign in with their accounts and only allows permitted actions.

The following table lists the roles users need you to assign in Oracle Life Sciences IAMS. For details on assigning the roles, see Assign roles in Oracle Health IAMS.

Product	Type of study	Roles that must be assigned in Oracle Life Sciences IAMS	Additional roles needed in the product?
Oracle Clinical One Platform	Clinical study For randomization and trial supply management and data collection or Training study Only for assigning training for Oracle Life Sciences products	User role The clinicalone-CNE role is required for all users. Administrator role This role is required only if the user is responsible for creating studies and global users in Oracle Clinical One Platform. Usually, only a limited number of users need this role. Users who have the clinicalone-CNE_AssignGlobalRoles role can give themselves and others access to studies. This role's Display Name in Oracle Life Sciences IAMS is AssignGlobalRoles.	Yes: All users who will work in a study must be granted study-level roles. Users with the administrator role must also be created as global users in Oracle Clinical One Platform.
Oracle Clinical One Digital Gateway	Not applicable Oracle Clinical One Digital Gateway is a separate system from Oracle Clinical One Platform.	The following roles are required to access Oracle Clinical One Digital Gateway. Assign the following Oracle Clinical One Platform role. clinicalone-CNE Assign the following Oracle Clinical One Digital Gateway role. inthub-CNE	No. Users with these roles can start working right away.
Oracle Life Sciences IAMSOAuth Admin Console	Not applicable. A customer-delegated administrator assigns this role to themselves in order to work in the Oracle Life Sciences IAMS OAuth Admin Console. The Oracle Life Sciences IAMS OAuth Admin Console is an application used to generate client IDs and secrets, as well as provision API developers with the right permissions for them to make API calls.	The following role is required for any customer-delegated administrator working in this application: system-admin	No.

• Request roles
  A delegated administrator at your organization must assign product roles to your Oracle Life Sciences single sign-on (SSO) so that you can work in Oracle Clinical One Platform and Oracle Clinical One Digital Gateway. If you cannot access studies, you can navigate to the product web site and request access to automatically generate a request for roles (if your organization set up self-service registration).