User Access Rights
Overview
User access rights designate who is included in a profile. A profile determines which users can access a Transaction.
Access is granted based on company and user type, group membership, and performing actions in other document steps. For more information on the user types available, see the topic Setting Up Users.
A user is included in a profile if one of the following conditions is satisfied:
- The user belongs to both a company type and user type that has been granted access rights
- The user belongs to a group that has been granted access rights
- The user is a performer of any action in a listed step
Administration
Set up User Access Rights
Perform the following steps to set up user access.
Administrative functions can only be performed by FullAccess users, including SuperUsers.
Administrative functions include: making changes to Configuration (e.g. adding attributes or creating rules) and modifying Commerce Processes.
- Navigate to the Process page.
- Click Admin to go to the Admin Home Page.
Click Process Definition under the Commerce and Documents section.
The Processes page opens.
Select Steps in the Navigation column and click List.
The Process page opens, with the name of the Process in the page title.
- In the left-hand panel, click the Name of a Process to expand it.
- Expand a Step.
-
Double-click a Participant Profile, such as Admin or Sales Rep.
The Document Views tab appears on the right side of the page.
Only SuperUser or FullAccess users can view or modify other user profiles. All other users can only view and modify their own profile.
-
Click the User Access Rights tab.
-
Select one or more items from the Access Rights section.
- Restricted Admin Users do not have access to other areas of the administration platform. If a FullAccess user is restricted from any Product Family or Data Table (by folder), the user will automatically lose access to other areas of the Administration Platform. The user will only have access to the Product Family and/or Data Table that the SuperUser has allowed them access to.
- Users can be granted access to profiles through Auto-Forwarding Rules.
-
Select one or more items in the Groups section.
-
Select one or more items from the Performer Steps section.
- Click Save.
Notes
If a site exceeds the license limitations on any of the license types (Internal User & Partner Organization User), the administrator will not be allowed to create any new users until the license count is decreased and no longer exceeds the license limit. When the license limit is reached, an error message appears instructing the administrator to contact Customer Support and purchase additional licenses.
In Oracle CPQ 23C and later, user license counting was modified to exclude Web Services Only users in the count. In addition, once the maximum number of licenses is allocated, Web Services Only users can still be added to the site.
Related Topics
See Also
