Authentication and Authorization

For authorization, Oracle Retail AI Foundation Cloud Services modules have been built with role-based access. Access to application user interface components is done by assigning application roles. Application roles are defined as part of the application and deployed as part of the installation process. Application roles are mapped to enterprise roles during the initial environment provisioning. For Oracle Cloud Infrastructure Identity and Access Management (OCI IAM) users, the enterprise roles are available from the user interface and are managed in the same way as other security groups. Refer to the Retail Identity Management Startup Guide for OCI IAM for details on all available enterprise roles for each AIF application and module.