Overview
Oracle CPQ 25A introduced a new Application Administrator permission that can be granted to host company FullAccess users. The new Application Administrator is intended as a replacement for the single named SuperUser account available on Oracle CPQ sites. You can now elevate any FullAccess user to the role of Application Administrator by assigning this permission. This allows customers to share the responsibilities of this elevated user account without sharing the Superuser account and its credentials.
In a future release the SuperUser account will be deactivated so it's imperative that customers assign one or more administrators this permission following upgrade. At the time of upgrade the SuperUser account is automatically granted this permission and that account can be used to assign this permission to other Full Access users.
Every site is required to have at least one FullAccess user, other than the SuperUser, with this Application Administrator permission assigned. Only an Application Administrator can grant Application Administrator permissions to another user.
This new Application Administrator permission grants the designated user the ability to perform all the special tasks that only the SuperUser was able to perform in prior versions. In addition, this permission also includes some privileges that were previously tied to the User Administrator permission. Those special capabilities which are not essential to user or access management have been reassigned to this Application Administrator permission. User Administrators will lose those capabilities if they are not designated as Application Administrators.
The following table lists the Application Administrator capabilities and the previous Oracle CPQ release access and access changes.
| Capabilities Requiring an Application Administrator | Administrator Access and Changes from Previous Functionality (Oracle CPQ 24D and earlier) |
|---|---|
| Perform Migrations (without Admin Groups) |
SuperUser or User Admin User Admin will lose access without Application Administrator permission in Oracle CPQ 25A. |
| Receive Notification Emails (bulk uploads, steps timer error, parts sync, monthly usage reports, etc.) |
Sent to SuperUser only in Oracle CPQ 24D and earlier. Sent to all Application Administrators in Oracle CPQ 25A. |
| Login During Overcrowded Mode | SuperUser |
| Enable Administrator Groups | SuperUser |
| Enable Receive Monthly Usage Report Option | SuperUser |
| Access Single Sign-On Settings (without Admin Groups) |
SuperUser or User Admin User Admin will lose access without Application Administrator permission in Oracle CPQ 25A. |
| Enable Broadcast Email Settings (without Admin Groups) |
SuperUser or User Admin User Admin will lose access without Application Administrator permission in Oracle CPQ 25A. |
| Proxy Login (without Admin Groups) |
SuperUser or User Admin User Admin retains this permission in Oracle CPQ 25A. |
| Access View Data Errors | SuperUser |
| Delete Namespaced BML Functions |
SuperUser or User Admin User Admin will lose access without Application Administrator permission in Oracle CPQ 25A. |
| Manage Secure Attribute Encryption Key |
SuperUser or User Admin User Admin will lose access without Application Administrator permission in Oracle CPQ 25A. |
| Share Search Views (limit 50) |
SuperUser or User Admin User Admin will lose access without Application Administrator permission in Oracle CPQ 25A. |
| Search Views Limit Increase to 100 | SuperUser |
| Delete Shared Search View |
SuperUser or User Admin User Admin will lose access without Application Administrator permission in Oracle CPQ 25A. |
| Allow XSLView for Email and Document Templates |
SuperUser or User Admin User Admin will lose access without Application Administrator permission in Oracle CPQ 25A. |
| Access Tokens API | SuperUser |
| Manage Partner Company Max Users via Bulk Upload | SuperUser |
| Manage Partner Company Max Users via User Interface |
SuperUser or User Admin User Admin retains this permission in Oracle CPQ 25A. |
| Manage Partner Company Access and SSO Settings | SuperUser |
| Manage Partner Company Users |
SuperUser or User Admin User Admin retains this permission in Oracle CPQ 25A. |
| Perform Import & Export File Attachment Process Actions |
SuperUser or User Admin User Admin will lose access without Application Administrator permission in Oracle CPQ 25A. |
| Bulk Download Users |
SuperUser or User Admin User Admin retains this permission in Oracle CPQ 25A. |
| Archive Transactions, Restore or Delete Archived Transactions | SuperUser |
| Access the Advanced Search button in product line profile/search page if internal/active selector rules exist | SuperUser |
| Administer Favorite Shared Folders and add translations for the folders |
SuperUser or User Admin User Admin will lose access without Application Administrator permission in Oracle CPQ 25A. |
| Download files from the image server | SuperUser |
With the implementation of Application Administrator permissions in Oracle CPQ 25A, note the following modifications to existing functionality:
-
Oracle CX Sales Assets Sync will use the host company time zone as the business time zone instead of the SuperUser’s time zone.
-
When the performer_name is not provided in a Transaction Bulk Upload, the Commerce Action is tracked as the uploading user instead of the SuperUser.
-
The User Account Locked Message no longer references the SuperUser email address. The messages now simply reference an Administrator. For example, Your account has been locked. Please contact the Administrator to reset the password.
-
When Unique Email Addresses are required, an error message referencing which user account was using the email address is provided to the Application Administrator(s) as well as the SuperUser and User Administrator(s).
At the time of Oracle CPQ 25A upgrade, the SuperUser account is automatically granted Application Administrator permission. A warning displays in the User Administration List page as a reminder that you must have at least one additional user account with the Application Administrator permission.
Administration
Assign Application Administrator Privileges to FullAccess Users
