Oracle Cloud Infrastructure Documentation

Process Automation Roles

There are different types of roles in Oracle Cloud Infrastructure Process Automation. Understanding how they work together is essential to giving users the access they need to perform their tasks.

Cloud Account Administrator role

Cloud Account Administrators are set up when the Oracle Cloud account is created. They use their Oracle Cloud account to sign in to Oracle Cloud and access the Oracle Cloud Infrastructure Console.

Cloud Account Administrators can use the Oracle Cloud Infrastructure console to perform the following actions:

  • Monitor and manage services for one or more Cloud accounts.
  • Create and manage users and groups.
  • Provide access to services by assigning IDCS application roles.

IDCS Application roles

There are two predefined Oracle Identity Cloud Service (IDCS) application roles in Oracle Cloud Infrastructure Process Automation: ServiceAdministrator and ServiceDeveloper. These are functional roles that determine whether or not a user has access to the Workspace Administration section and Designer user interfaces.

Note

You do not require the IDCS application roles for accessing Workspace user interfaces or runtime APIs. Any authenticated user can work in Workspace or access runtime APIs.
Role Description
ServiceAdministrator
  • Grants full administrative privileges within the Process Automation instance.
  • Allows users to access the Administration section in Workspace and work on administrative tasks under it. See Workspace Administration in Using Oracle Cloud Infrastructure Process Automation.
  • Allows users to manage process application roles in Workspace.
Note

Users assigned the ServiceAdministrator role are also referred to as Process Automation Administrators in Oracle Cloud Infrastructure Process Automation.
ServiceDeveloper
  • Allows users to access Designer and create, manage and activate process applications and its components.
  • Allows users to create and configure process application roles in Designer.
Note

Users assigned the ServiceDeveloper role are also referred to as Process Automation Designers in Oracle Cloud Infrastructure Process Automation.
You assign IDCS application roles to users in Oracle Identity Cloud Service.

Process Application roles

To further define data access and task permissions for users and groups, you can configure roles specific to process applications in your Process Automation instance. See About Process Application Roles in Using Oracle Cloud Infrastructure Process Automation.

Each process application role is comprised of users/groups and permissions. See Users, Groups and Permissions in Using Oracle Cloud Infrastructure Process Automation.

You can work with process application roles in Designer and Workspace Administration section.

  • Create and configure process application roles in Designer. See Work with Roles in Designer in Using Oracle Cloud Infrastructure Process Automation. You have to be a Process Automation Designer (assigned the ServiceDeveloper IDCS application role) to work with process application roles in Designer.

  • Manage process application roles under the Administration section in Workspace. See Manage Roles in Workspace in Using Oracle Cloud Infrastructure Process Automation. You have to be a Process Automation Administrator (assigned the ServiceAdministrator IDCS application role) to work with process application roles in Workspace.