Application Roles
Several predefined application roles define what users can do. Some functionality is available only to users with specific application roles.
People can hold multiple application roles as needed. For example, you might want to designate one person as both a cloud account administrator and a service administrator. These application roles are assigned by the identity domain administrator. See Assign Roles to Groups and Assign Users to Groups.
Visitors can view certain sites, use public links, and view Oracle Content Management content embedded in apps or websites.
Any users that need to actually use Oracle Content Management must be assigned the standard user or enterprise user role in addition to any other roles they’re assigned.
Note:
Oracle is in the process of updating Oracle Cloud Infrastructure (OCI) regions to switch from Identity Cloud Service (IDCS) to Identity and Access Management (IAM) identity domains. All new Oracle Cloud accounts will automatically use IAM identity domains. Depending on whether your region uses IAM identity domains or not, you'll use different documentation to manage users, groups, and access. If your region has been updated, follow the steps marked IAM. If your region hasn't been updated, follow the steps marked IDCS.Oracle Content Management Roles
The following table describes the application roles involved with Oracle Content Management instances with a Universal Credits subscription, a Government subscription, or a SaaS subscription. For information on how to access the interfaces listed in the table, see Administrative Interfaces.
Application Role (application role name in bold) | Access and Actions | Notes |
---|---|---|
Cloud account administrator | Cloud account administrators use the Oracle Cloud Console to perform the following actions:
|
Cloud account administrators are set up when the account is created. They use their Oracle Cloud account to sign in to Oracle Cloud and access the Oracle Cloud Console.
If you need account administrator access and don’t have it, contact your primary account administrator. If you want cloud account administrators to use Oracle Content Management and modify the service configuration, they must also be assigned the standard user or enterprise user role. |
Service administrator (CECServiceAdministrator) |
From the Oracle Content Management Administration: System interface:
Note: For Custom Properties, you must also have the enterprise user role. From Oracle Content Management Administration: Integrations interface, configure integrations with Oracle Process Cloud Service, Oracle Eloqua Cloud Service, Oracle Visual Builder, Oracle Intelligent Advisor, Oracle Cobrowse Cloud Service, and custom applications. From Oracle Content Management Administration: Applications interface, manage content apps to discover and deploy web applications that run in the context of Oracle Content Management (using it as the content management system). From Oracle Content Management Analytics interface:
|
Service administrators must also be assigned the standard user or enterprise user role to be able to use Oracle Content Management. |
Repository administrator (CECRepositoryAdministrator) | From the Oracle Content Management Administration: Content page:
From the Oracle Content Management Analytics interface:
|
Repository administrators must also be assigned the enterprise user role to be able to use Oracle Content Management and access assets. A repository administrator is a user with a Manager role within at least one repository. |
Content administrator (CECContentAdministrator) | From the Oracle Content Management Administration: Content page:
From the Oracle Content Management Developer page as long as these features haven’t been limited to site administrators:
|
Content administrators must also be assigned the enterprise user role to be able to use Oracle Content Management and access assets. |
Capture administrator (CECCaptureAdministrator) | From the Oracle Content Management Administration: Capture page.
From the Oracle Content Management Analytics interface:
|
Procedure managers are typically assigned both the Capture administrator and Capture client user roles, so they can configure procedures and test them in the client. |
Capture client user (CECCaptureClient) | From the Oracle Content Capture Client:
|
|
Site administrator (CECSitesAdministrator) |
From the Oracle Content Management Sites page:
From the Oracle Content Management Developer page:
|
When using site governance, site administrators make approved templates available to users for creating sites, approve site requests, and manage sites. This role also applies if your service administrator configured Oracle Content Management to allow only site administrators to create sites, templates, or components.
Site administrators must also be assigned the standard user or enterprise user role to be able to use Oracle Content Management. |
Developer (CECDeveloperUser) |
From the Oracle Content Management Sites page as long as these features haven’t been limited to site administrators:
From the Oracle Content Management Experiences page:
From the Oracle Content Management Developer page as long as these features haven’t been limited to site administrators:
From the Oracle Content Management Administration: Integrations interface:
|
Developers must also be assigned the standard user or enterprise user role to be able to use Oracle Content Management. Developers with the standard user role can create components, themes, and standard templates. Developers with the enterprise user role can also create layouts and save a site as a standard or enterprise template. |
Enterprise user (CECEnterpriseUser) | From Oracle Content Management, enterprise users have access to all the Collaboration and Sites features that standard users have access to:
In addition they have access to Assets:
From the Oracle Content Management Recommendations:
From the Oracle Content Management Analytics interface:
|
Any users that need to actually use Oracle Content Management must be assigned the standard user or enterprise user role. These roles aren’t assigned by default to any user. |
Standard user (CECStandardUser) | From Oracle Content Management, standard users have access to Collaboration and Sites features:
|
Any users that need to actually use Oracle Content Management must be assigned the standard user or enterprise user role. These roles aren’t assigned by default to any user. |
External user (CECExternalUser) | From Oracle Content Management, external users have access to Collaboration and Sites features for items that are shared with them:
|
External users have limited access to Oracle Content Management. |
Visitor (CECSitesVisitor) | Access sites restricted to visitors. | This role applies if a site is set to be accessed only by visitors. If that restriction is enabled, only users with this role will be able to access the site. Users and groups with this role can't be searched, so you must type the complete user or group name to add them to site security.
Visitors don’t require a license. |
Sauce Video enterprise user (SauceEnterpriseUser) | If you enabled Sauce Video during instance creation, you'll see the SauceEnterpriseUser application role. This role gives users full unlimited access to the Sauce Video application. | If you want Sauce users to be able to use Oracle Content Management, they must also be assigned the standard user or enterprise user role. |
Sales Accelerator Roles
If you're an Oracle SaaS customer and you install Oracle Sales Accelerator, you'll see the following additional application roles:
Application Role (application role name in bold) | Assigned Privileges |
---|---|
Viewer (SAUser) | This role allows users to view published content, content properties, and analytics. Viewers access Sales Accelerator in seller view. |
Contributor (SAContributor) | This role gives users the same privileges as viewers, plus it allows them to create and manage their own content. Contributors access Sales Accelerator in seller view, but they can turn on contributor view to manage content.
To access contributor view, users must also be given the CECEnterpriseUser role. |
Content Admin (SAContentAdmin) | This role gives users the same privileges as contributors, plus it allows them to manage content owned by other people, update assets in bulk, and configure home pages. Content admins access Sales Accelerator in seller view, but they can turn on contributor view to manage content.
To access contributor view, users must also be given the CECEnterpriseUser role. |
Report Admin (SAReports) | This role gives users the same privileges as viewers, plus it allows them to view system-wide analytics and reports. Report admins access Sales Accelerator in seller view. |
Application Admin (SAAdmin) | This role gives users the same privileges as viewers, plus it allows them to perform administration tasks in Sales Accelerator and Oracle Content Management. Application admins access Sales Accelerator in seller view. |
All Sales Accelerator application roles have viewing privileges. Therefore if someone is assigned the SAContentAdmin role, they don’t also need the SAUser role.