Oracle Integration Service Roles

Oracle Integration predefined roles govern access to various Oracle Integration features.

For details on what you can do in each Oracle Integration feature by service role, see Oracle Integration Roles and Privileges.

The following table lists the predefined roles available in Oracle Integration, and the general tasks that users assigned the roles can perform. You can assign one or more of these roles to Oracle Integration users and groups.

Oracle Integration Description

ServiceAdministrator

A user with the ServiceAdministrator role is a super user who can manage and administer the features provisioned in an Oracle Integration instance.

ServiceDeveloper

A user with the ServiceDeveloper role can develop the artifacts specific to the features provisioned in an Oracle Integration instance. For example, in Integrations the user can create integrations, and in Processes the user can create process applications and decision models.

ServiceMonitor

A user with the ServiceMonitor role can monitor the features provisioned in an Oracle Integration instance. For example, the user can view instances and metrics, find out response times, and track whether instance creation completed successfully or failed.

This role provides privileges for users with limited knowledge of Oracle Integration, but with high-level knowledge of monitoring it. This user role does not grant permissions to change anything.

The ServiceMonitor role does not have any privileges in Insight, File Server, and Visual Builder.

ServiceDeployer

A user with the ServiceDeployer role can publish the artifacts developed in a feature.

The ServiceDeployer role does not have any privileges in Integrations, Insight, File Server, B2B for Oracle Integration, and Visual Builder.

ServiceUser

A user with the ServiceUser role has privileges to utilize only the basic functionality of a feature such as access to the staged and published applications.

For example, in Integrations the user can navigate to resource pages (such as integrations and connections) and view details, but can’t edit or modify anything. The user can also run integrations and start process applications.

ServiceEndUser

The ServiceEndUser role is available only for new instances created using version 22.2 or later. This role cannot be granted to existing instances created prior to version 22.2.

A user with the ServiceEndUser role has the same privileges as the ServiceUser role, but can access only Processes and Insight features in Oracle Integration. The ServiceEndUser role does not have any privileges in Integrations, File Server, B2B for Oracle Integration, Visual Builder, adapters, recipes, or accelerators.

In Processes, a user with the ServiceEndUser role can access the My Tasks page in the Processes runtime environment (Workspace) and also Processes runtime APIs and CCA components. This user cannot access the Administration UI in Processes runtime environment or the Processes design time environment.

In Insight, a user with the ServiceEndUser role can view, create, manage, edit, and delete Insight dashboards through the Consoles page. This user does not have access to models through the Models page.

ServiceInvoker

A user with the ServiceInvoker role can invoke any integration flow in an Oracle Integration instance that is exposed through SOAP/REST APIs or a scheduled integration. See Run an Integration Flow. A user with ServiceInvoker role cannot:
  • Navigate to the Oracle Integration user interface or perform any administrative actions in the user interface.
  • Invoke any of the documented Oracle Integration REST APIs. See About the REST APIs.

The ServiceInvoker role does not have any privileges in Processes, Insight, File Server, B2B for Oracle Integration, and Visual Builder.

ServiceViewer

A user with the ServiceViewer role can navigate to all Integration resource pages (for example, integrations, connections, lookups, libraries, and so on) and view details. This user cannot edit any resources or navigate to the administrative setting pages.

The ServiceViewer role does not have any privileges in Processes, Insight, File Server, and Visual Builder.

In Oracle Integration, when you assign a role to a user, the user is granted that role for all Oracle Integration features provisioned on an instance. For example, when you assign the ServiceDeveloper role to a user for an instance provisioned with the Integrations, Processes, and Visual Builder feature set, the user gets developer permissions on each of these features. Further, each role grants different privileges for different features to the same user. Depending on the feature the user is accessing, the user can perform different tasks. For example, a user assigned the ServiceDeveloper role can develop process applications in Processes, whereas the same user can design integrations in Integrations. Note that not all Oracle Integration predefined roles are available in all features.

For details on what you can do in each Oracle Integration feature by service role, see Oracle Integration Roles and Privileges.