2 Universal Upsell Management Portal

The Nor1 Universal Upsell Management Portal provides access to supported Nor1 tools and portal options based on your user role, property access, and sign-in method. Depending on your assigned access, you can select a property, open available Nor1 tools, and view support information.

The following sections describe the experience for legacy, federated, and non-federated users.

Federated IAM User

OPERA Cloud Identity Management enables your organization to integrate its identity provider with OPERA Cloud through identity federation. For Nor1, federated access through OPERA Cloud Identity Management is currently available to eligible new hotel implementations. This integration allows users to access OPERA Cloud using their corporate credentials via single sign-on (SSO), eliminating the need to create and manage separate user accounts. The identity federation feature uses the SAML 2.0 standard and supports integration with any identity provider that complies with SAML 2.0 requirements. This approach simplifies access management and enhances security within your organization.

Creating and Managing Users

To provision users for Nor1, follow the Configuration Guidelines in the Federated Customer Documentation based on your identity provider.

Assigning Group Access (Nor1 groups in OCIM)

When creating users who require access to Nor1 applications, you must assign each user to one of the relevant groups listed below. Assign each user to a single Nor1 group based on their job function, and ensure the user is assigned at the property level. Details on the seeded groups can be found at: OPERA Cloud Identity Management Seeded Groups.

Upgrade Manager

• Main responsibilities: Owns Nor1 configuration and performance across the hotel or portfolio. The Upgrade Manager can configure and govern Nor1 across properties, including the CheckIn Merchandising application, eStandby Upgrade awarding, eXpress Upgrade awarding, Rate Management, Smart Award Configuration, and Insights reporting. The user can approve single sign-on access for identity domain properties, oversee user access and segregation of duties.

• Group in OCIM: UPGRADEMANAGER

Upgrade Supervisor

• Main responsibilities: Manage day-to-day upsell operations in the CheckIn Merchandising application, including offer setup, eligibility, and agent guidance. The user can award eStandby upgrades and examine eXpress upgrade offers. They can also review invoice details and monitor results in Insights.

• Group in OCIM: UPGRADESUPERVISOR

Upgrade Agent

• Main responsibilities: Front-desk and operations user who executes upsells with guests using CheckIn Merchandising application to present and apply eligible upsell offers at check-in.

• Group in OCIM: UPGRADEAGENT

Table 2-1 Assigning Group Access

Nor1 Group	CheckIn Merchandising Access	eStandby & eXpress Access	Rate Management Access	Smart Award Configuration Access	Insights Access
Upgrade Manager UPGRADEMANAGER	Yes	Yes	Yes	Yes	Yes
Upgrade Supervisor UPGRADESUPERVISOR	Yes	Yes	No	No	Yes
Upgrade Agent UPGRADEAGENT	Limited	No	No	No	No

To review the steps to assign a user to a group follow the steps under Groups in OPERA Cloud Identity Management.

To search for existing groups uses should follow Searching for Groups

New users

New users should follow Activate User Account as a New User in the OCIM user guide before accessing the Nor1 Universal Upsell Management Portal.

Logging into Nor1

• Obtain your enterprise ID from your hotel/Nor1 administrator.

• Use the login URL and include your enterprise ID:

  • https://apps.nor1upgrades.com/ui/v1/home?enterprise=XXXX

  • Example: https://apps.nor1upgrades.com/ui/v1/home?enterprise=ABC123

• Bookmark only this login URL. After login you’ll be redirected to a session-specific URL that should not be bookmarked.

• If you see an error, verify the enterprise ID (case sensitivity may apply). Do not share your enterprise ID or credentials.

Tips

• Each user must log in to the Nor1 Upsell Action Center (UAC) at least once. This maps the username and ensures the user’s name appears correctly for Nor1 In-Path and CheckIn Merchandising offers.

• The enterprise ID may be case-sensitive—enter it exactly as provided.

• If you see “Enterprise not found,” double-check the ID with your administrator.

• Do not share your enterprise ID or credentials publicly.

• Clear your browser history and cache before updating new users or using a new URL to access the Nor1 Upsell Action Center (UAC). This practice helps prevent login issues and ensures that you view the most up-to-date information when managing upsell activities.

• Enterprise-, Chain-, and Property-level access is hierarchical:

  • Enterprise-level access grants access to the entire enterprise, which may include multiple chains and properties (depending on configuration).

  • Chain-level access grants access to all properties within the specified chain.

  • Property-level access grants access only to the specified property.

• Nor1 IAM/SSO access is associated with an Enterprise ID.

  You can access hotels associated with your assigned Enterprise ID when you have the appropriate Nor1 role and the required enterprise-, chain-, or property-level permissions.

  Hotels associated with a different Enterprise ID are not available in your Nor1 access.

  If you require access to hotels across multiple Enterprise IDs, a separate IAM/SSO user account must be configured for each Enterprise ID.

Changing User Account Password, Forgotten Password, Edit Profile

For Federated Users in Nor1 IAM, authentication and account lifecycle functions are managed by an external Identity Provider (IdP) rather than within Oracle/Nor1 systems. As a result, user self-service actions such as password resets, forgotten password recovery, account or profile updates, and related profile management requests must be completed through the user’s IdP and its established support processes. Nor1 IAM relies on the IdP as the system of record for identity attributes and credentials and does not manage federated user passwords or profile recovery workflows.

Managing Oracle Support User Access

OPERA Cloud Identity Management supports Oracle Corporate SSO, allowing Oracle HLGIU users to sign into customer OPERA Cloud environments.Managing Oracle Support User Access explains how customers can grant DATAACCESS and SENSITIVEDATAACCESS roles to Oracle support users.

Granting these roles enables Oracle users to access the customer’s environment, and the decision to grant is solely at the customer’s discretion.

Managing Oracle Support Access Requests

OPERA Cloud Identity Management provides a self-service approval workflow for Oracle Support Users access requests.

Oracle Support Users can request access for support roles, such as DATAACCESS and SENSITIVEDATAACCESS, and respective customer administrators can approve/deny this request based on their discretion. View the details in the Managing Oracle Support Access Requests guide.

Non-Federated IAM User

OPERA Cloud Identity Management (OCIM) is a cloud-native Identity and Access Management (IAM) service for the OPERA Cloud Unified Platform, including Nor1 applications. For Nor1, this IAM access model is intended for new hotels only. Within OPERA Cloud Hospitality, OCIM groups control access to Nor1. Clear role assignments support operational efficiency and data protection. IAM is used to assign user roles for the Nor1 suite of applications, ensuring that each team member has the appropriate level of access and control. This guide outlines these roles and their associated permissions to support OPERA Cloud Hospitality.

Creating and Managing Users

To provision users for Nor1, follow the “Managing Users” section in OPERA Cloud Identity Management (OCIM).

Assigning Group Access (Nor1 groups in OCIM)

When creating users who require access to Nor1 applications, you must assign each user to one of the relevant groups listed below. Assign each user to a single Nor1 group based on their job function.

Upgrade Manager

• Main responsibilities: Owns Nor1 configuration and performance across the hotel or portfolio. The Upgrade Manager can configure and govern Nor1 across properties, including the CheckIn Merchandising application, eStandby Upgrade awarding, eXpress Upgrade awarding, Rate Management, Smart Award Configuration, and Insights reporting. The user can approve single sign-on access for identity domain properties, oversee user access and segregation of duties.

• Group in OCIM: UPGRADEMANAGER

Upgrade Supervisor

• Main responsibilities: Manage day-to-day upsell operations in the CheckIn Merchandising application, including offer setup, eligibility, and agent guidance. The user can award eStandby upgrades and examine eXpress upgrade offers. They can also review invoice details and monitor results in Insights.

• Group in OCIM: UPGRADESUPERVISOR

Upgrade Agent

• Main responsibilities: Front-desk and operations user who executes upsells with guests using CheckIn Merchandising application to present and apply eligible upsell offers at check-in.

• Group in OCIM: UPGRADEAGENT

Table 2-2 Assigning Group Access

Nor1 Group	CheckIn Merchandising Access	eStandby & eXpress Access	Rate Management Access	Smart Award Configuration Access	Insights Access
Upgrade Manager UPGRADEMANAGER	Yes	Yes	Yes	Yes	Yes
Upgrade Supervisor UPGRADESUPERVISOR	Yes	Yes	No	No	Yes
Upgrade Agent UPGRADEAGENT	Limited	No	No	No	No

To review the steps to assign a user to a group follow the steps under Assigning and Removing Group Membership section.

To search for existing groups uses should follow Searching for Groups

New users

New users should follow Activate User Account as a New User in the OCIM user guide before accessing the Nor1 Universal Upsell Management Portal.

Logging into Nor1

• Obtain your enterprise ID from your hotel/Nor1 administrator.

• Use the login URL and include your enterprise ID:

  • https://apps.nor1upgrades.com/ui/v1/home?enterprise=XXXX

  • Example: https://apps.nor1upgrades.com/ui/v1/home?enterprise=ABC123

• Bookmark only this login URL. After login you’ll be redirected to a session-specific URL that should not be bookmarked.

• If you see an error, verify the enterprise ID (case sensitivity may apply). Do not share your enterprise ID or credentials.

• Each user must log in to the Nor1 Upsell Action Center (UAC) at least once. This maps the username and ensures the user’s name appears correctly for Nor1 In-Path and CheckIn Merchandising offers.

Tips

• The enterprise ID may be case-sensitive—enter it exactly as provided.

• If you see “Enterprise not found,” double-check the ID with your administrator.

• Do not share your enterprise ID or credentials publicly.

• Clear your browser history and cache before adding/updating users or using a new URL to access the Nor1 Upsell Action Center (UAC). This practice helps prevent login issues and ensures that you view the most up-to-date information .

• Enterprise-, Chain-, and Property-level access is hierarchical:

  • Enterprise-level access grants access to the entire enterprise, which may include multiple chains and properties (depending on configuration).

  • Chain-level access grants access to all properties within the specified chain.

  • Property-level access grants access only to the specified property.

• Nor1 IAM/SSO access is associated with an Enterprise ID. You can access hotels associated with your assigned Enterprise ID when you have the appropriate Nor1 role and the required enterprise, chain, or property-level permissions. Hotels associated with a different Enterprise ID are not available in your Nor1 access. If you require access to hotels across multiple Enterprise IDs, a separate IAM/SSO user account must be configured for each Enterprise ID.

Changing Your User Account Password

If you need to change your account password, view the Change Your User Account Password section.

Forgot Your User Account Password

If you forgot your account password, you can reset the password following the steps in the Forgot Your User Account Password section.

Edit Profile

If you need to change any profile information, you can review the Navigate to My Profile section

Managing Oracle Support User Access

OPERA Cloud Identity Management supports Oracle Corporate SSO, allowing Oracle HLGIU users to sign into customer OPERA Cloud environments.Managing Oracle Support User Access explains how customers can grant DATAACCESS and SENSITIVEDATAACCESS roles to Oracle support users.

Granting these roles enables Oracle users to access the customer’s environment, and the decision to grant is solely at the customer’s discretion.

Managing Oracle Support Access Requests

OPERA Cloud Identity Management provides a self-service approval workflow for Oracle Support Users access requests.

Oracle Support Users can request access for support roles, such as DATAACCESS and SENSITIVEDATAACCESS, and respective customer administrators can approve/deny this request based on their discretion. View the details in the Managing Oracle Support Access Requests guide.

Nor1 Legacy Access Management

Signing In

1. Open the Nor1 Universal Upsell Management portal using the following URL: https://portal.nor1upgrades.com/user_portal/login.

2. On the login screen, enter your Username and Password.

3. Click Log In.

Logging Out

1. From any screen within the application, locate your username in the top-right corner.

2. Mouse hover over the panel to expand it and display additional options.

3. Click Log Out.

User Session Expiration

When a browser session is idle for eight hours, the Oracle Hospitality Nor1 eStandby Upgrade Cloud Service automatically logs you out. A two-minute warning appears prior to disconnection.

Forgot Password

If you forget your password, click the forgot your Password link.

1. The portal sends an e-mail with temporary login credentials to your e-mail address on file.

2. After the first login attempt with the temporary credentials, you must change your password.

Request an Account

New users can request a new account using the following steps:

1. Click Request an Account.

2. You are forwarded to the New Customer Support Portal where you can login with your Oracle credentials or create an Oracle account if you don’t have one and submit the Nor1 Account request filling the proper template.

   1. Email: This is a mandatory field. Nor1 sends a response to the email address entered here. Make sure it is correct.

   2. Name: This is a mandatory field. First Name and Last Name.

   3. Role: This is a mandatory field. Enter your position.

   4. Distribution List: This is a mandatory field. Select the type of information you want to receive.

      1. Pending Revenue Notifications.

      2. Property Main Contact.

3. Click Submit.

Using the Portal Help Center

The Help Center provides the following tools:

• Submit a request.

• Find training dates and register for trainings.

• Announcements.

• Nor1 Best Practices.

• FAQs on Revenue Optimization.

• FAQs on User Management.

• FAQs on General.

Common Actions, Icons, and Navigation

After logging in, the Welcome and Username information appear on the right-hand side providing the following information:

Current Login User: This is the user logged into the system. For Front Office Team members, it is recommended you log out of the portal to keep track of what you did during your session.

Current Nor1 Customer ID: The Customer ID is a unique number that identifies the hotel as a Nor1 customer. Each hotel can have only one Customer Number.

Editing Profiles

From the Edit Profile section, you can find details about the User Profile, Application Access granted, and Chain/Property Access. You can use Change Password here.

Managing Users

Nor1 can reset passwords and accounts, although it is recommended you do this yourself using your Property Manager access.

Users with the Property Manager role and above can use the User Management section, which is found in the drop-down menu below the user’s name. You can review the list of existing users attached to their respective hotel, create new users, edit existing users, and delete users. You can also reset passwords. The following features are available:

Search Bar: Search user accounts you are authorized to view.

User List:

• The User List helps authorized users find and review existing user accounts. You can search by username, email, full name, PMS User ID, or Nor1 User ID.

• Use the Property Name/ID, User Status, and User Role filters to narrow the results. Property Name/ID is one authorized selector that can be searched by property name or Nor1 Property ID.

• User Status includes Active, Inactive, Locked, and Disabled users, with Active selected by default.

• Each result shows the user’s full name, role, login, status, Nor1 User ID, PMS User ID, Access Scope, and existing user actions. Access Scope can be Single Property, Multiple Properties, Chain-Level Access, or Full Access. Results and the displayed count reflect the combined criteria and your authorized access.

Create User: You can create users with varying levels of administration and property access. For eStandby, you must fill the User Profile with mandatory information on the following:

• Full Name. The user’s full name.

• Email. The user’s email address or a generic team email address.

• Role. The following roles are available:

  • Nor1 Manager: This can be selected only by Nor1 Administrator users and allows access to multiple hotels.

  • Chain Manager: This is best reserved for Area/Regional Directors of Revenue assigned to multiple properties.

  • Property Manager: Hotel management such as Revenue Manager, FOM, Supervisor, GSM, and so on.

  • Property User: Front desk agents.

Manage Email Alerts and Reports Check Box: This allows the Property Manager to add the new user to the daily distribution list of pending revenue reminders.

For any CheckIn Merchandising user, the Property Manager must also fill out information on the following items:

• Username: This can be an email address or property management system (PMS) User ID.

• PMS User ID: The PMS User ID.

• The Chain/Property Access is attached to the Property Manager´s hotel and reflects the hotels data the user is attached to.

• Reset Password: Sends a password reset link to email addresses on file.

• Edit: With the Edit Users section, the authorized Administrator can modify the role of a particular user, change the name if needed (for example, after marriage), and adjust Application Access.

• Delete: Removes the account from the database and deactivates any pre-existing access.

SSO User Migration Mapping

SSO User Migration Mapping provides a controlled way to associate eligible legacy Nor1 users with OPERA Cloud Identity Management (OCIM) users before identity and access management (IAM) and single sign-on (SSO) provisioning begins for a property.

Saving a mapping does not provision the user. The provisioning process applies the saved mapping when it processes the property.

SSO User Migration Mapping Access

Nor1 Administrator and Nor1 Manager roles automatically include Mapping-tab access. Users in these roles can grant access to Chain Manager and Property Manager users who need to prepare mappings for an approved property. The Property User role cannot be granted Mapping-tab access.

To grant access:

1. Open Nor1 User Management.

2. Find the Chain Manager or Property Manager.

3. Open the user record.

4. Under Application Access, select SSO User Migration Mapping, then save.

Exporting the User List

Export the Property Level User Summary Report for the scheduled property as a CSV file. Do not use the Chain Level report. Do not modify the exported file before uploading it to Nor1 User Management. For export instructions and required permissions, see Exporting OCIM User List.

Uploading an IAM/OCIM User List

To begin reviewing mappings:

1. Open Nor1 User Management.
2. Select SSO User Migration Mapping.
3. Select a property.
4. Confirm that the selected Nor1 property and the exported report are for the same property.
5. Select the original CSV file. Do not modify the file before uploading it.
6. Select Upload and Pre-process.

The property list includes only properties available through your assigned access. After the file is processed successfully, the mapping review table appears.

If the file cannot be processed, review the displayed message, correct the property or file information, and upload the file again.

Before provisioning begins, you can upload a newer supported CSV to refresh the imported users. A new upload invalidates the previously saved review. Review the refreshed results and select Save again before Nor1 Operations can use the mappings. If you do not save, the property is treated as having no saved mapping review.

Reviewing Suggested Matches

The mapping review table displays eligible active legacy Nor1 users for the selected property. Each row includes legacy user information, a suggested IAM/OCIM user when available, a match percentage, the mapping status, and the available action.

Only active legacy Nor1 users with effective single-property access to the selected property are eligible for mapping. This includes users assigned directly to one property and users assigned through a chain that currently contains only one live or test property. Users with broader access are excluded from this property-level review. This is expected behavior, not an upload error.

If no eligible active legacy users are found for the selected property, no users are available for mapping in that review. Confirm that you selected the correct property.

The match percentage helps you review a suggested association. It does not confirm the mapping automatically.

• For a 100% match, review the suggested IAM/OCIM user and select Map to confirm the association.

• For a partial match, review the suggested IAM/OCIM user. You can confirm the suggestion or select another user before selecting Map.

• For a 0% match, no IAM/OCIM user is preselected. Select an IAM/OCIM user before selecting Map.

The Map action is unavailable until an IAM/OCIM user is selected.

Confirming and Saving Mappings

To confirm and save mappings:

1. Review the suggested IAM/OCIM user.

2. Select another IAM/OCIM user if necessary.

3. Select Map.

4. Verify that the row displays the mapped status.

5. Repeat these steps for each legacy user you want to map.

6. Select Save.

7. Select Cancel to discard unsaved changes and return to the most recently saved mapping review.

Selecting Map confirms the association in the current review. Selecting Save stores the confirmed mappings for use during IAM/SSO provisioning.

You can save a review with mapped and unresolved users. An unresolved legacy user is not associated with a new IAM account, so their existing Nor1 history does not carry forward to that account. Saving a mapping does not start migration. It saves the association for Nor1 Operations to use during the migration process. After a successful migration and downstream synchronization, the mapped user’s historical Nor1 association is expected to carry forward to the IAM user.

Changing a Mapping

You can change the mapping before IAM/SSO provisioning begins for the property.

To change a mapping:

1. Locate the mapped legacy user.

2. Select Remove pre-map.

3. Confirm the message.

4. Select the applicable IAM/OCIM user.

5. Select Map.

6. Select Save.

Mapping Availability After Provisioning Begins

After provisioning begins, the mapping review is locked. You can view saved results, but you cannot change mappings or save the review. If a mapping requires recovery, contact Nor1 Operations.

After provisioning completes, the property is no longer available in Legacy User Management. If you leave the Mapping tab open when provisioning completes, do not make additional changes. Those changes are not saved. Refresh the page before you continue.

How Saved Mappings Are Used?

Saving a mapping prepares the association between the legacy Nor1 user and the selected IAM/OCIM user for the migration process. It does not start provisioning or immediately change the user’s access.

Nor1 Operations uses the saved mappings when it processes the property. Confirm that each association is correct before provisioning begins. Standard mapping actions normally cannot be changed after provisioning begins.

Individual Account Modification

• Name, email address, and role - mandatory.

• Gender, phone number - optional.

• PMS User ID - exclusive to CheckIn Merchandising only.

Application Access

The portal provides you access to the following:

1. eStandby:

   • Upsell Action Center

   • Invoice Details

   • Rate Calendar

   • PRiME Configuration: Provides access to PRiME Controls

   • User Portal Analysis

2. CheckIn Merchandising:

   • Insights

Chain / Property Access

Chain and individual properties provide the following access:

• Access to a single property for individuals with user in the user role.

• Access to several properties for individuals with Manager in their role.

Select a Property

If you have access to only a single property, that property appears when you log in.

If you have access to more than one property, you must select a property after logging in.

You can type in part of the property name in the search bar on the top to select the property you want review.

Clicking the grey arrow next to the search bar reveals a list of all properties you have access to. At any time, you can switch to another property by changing the name of the property on the top.

App Logos

1. Oracle Hospitality Nor1 Cloud Service, eStandby Room Upgrade Cloud Service is indicated with the following app logo in the top-left corner:
   
   

2. Oracle Hospitality Nor1 Cloud Service, CheckIn Merchandising Room Upgrade is indicated with the following logo on the top-left corner:
   
   

3. Oracle Hospitality Nor1 Cloud Service, Insights is indicated with the following logo on the top-left corner:
   
   

App Switcher

The access rights to the App Switcher are based on user permissions. In all areas, you can see the App Switcher on the right- hand side. Move your mouse over the app switcher icon and select from the following:

• eStandby

• CheckIn Merchandising

• Insights