Oracle Cloud Infrastructure Documentation

Set Up VB Studio Users

To extend Oracle Cloud Applications applications with VB Studio, you need to assign roles to your users in both Oracle Cloud Applications and IDCS.

Note that in VB Studio, a single user is assigned a unique name to reflect each Oracle Cloud Applications instance where the user is active. For example, UserA in the development instance DEV1 might be known as UserA@<Oracle Cloud Applications-instance-name>-DEV1 to VB Studio, UserB might be UserB@<Oracle Cloud Applications-instance-name>-DEV2, and so on. This means that you may need to assign roles for the same user multiple times, one for each user name/identity.

There are two setup procedures you can use to assign your Oracle Cloud Applications users the suggested roles, depending on whether IDCS role sync has been turned off or not.
  • If you're a customer that has not disabled role sync, you can follow the instructions in Assign Oracle Cloud Applications Roles. After you assign roles to your users, Oracle Cloud Applications will synchronize those users and their roles with IDCS. There is no need for you to manually assign the VB Studio IDCS roles to your users.
  • If you're a customer that has disabled role sync between your Oracle Cloud Applications development instance that's associated with VB Studio and its corresponding identity domain, after you follow the instructions in Assign Oracle Cloud Applications Roles, you'll need to log into the IDCS console and follow the instructions in Assign VB Studio Roles in OCI Identity and Access Management for assigning VB Studio access.
How do you know if role sync has been disabled? There are two ways to find out:
  • You can reach out to your infrastructure and identity administrator, who has identity administrator privileges in the identity domain, and have them review this configuration.
  • You can wait 30 minutes after you assign the Oracle Cloud Applications roles. If you continue to receive a You are not a member of this organization error when attempting to create a simple extension, then role sync isn't enabled (or not working), and you'll either need to re-enable it or assign VB Studio roles directly by using the IDCS console and the instructions in Assign VB Studio Roles in OCI Identity and Access Management.
As an administrator, you must have certain privileges to assign the necessary roles:
  • In Oracle Cloud Applications, you must have one of these privileges: cloud administrator, service administrator, or application administrator. Everyone who assigns Oracle Cloud Applications roles to their users needs one of these privileges.
  • In IDCS, you must have either an Identity Domain Administrator or User Administrator role. You only need these roles if IDCS role sync has been turned off and you need to assign the VB Studio IDCS roles manually.
This table shows the VB Studio IDCS roles that are mapped to users with Oracle Cloud Application roles:
Oracle Cloud Applications users with these roles: Need to be mapped to this VB Studio IDCS role:

Application Administrator (ORA_FND_APPLICATION_ADMINISTRATOR_JOB)

Human Capital Management Application Administrator (ORA_HRC_HUMAN_CAPITAL_MANAGEMENT_APPLICATION_ADMINISTRATOR_JOB)

Sales Administrator (ORA_ZBS_SALES_ADMINISTRATOR_JOB)

Customer Relationship Management Application Administrator (ORA_ZCA_CUSTOMER_RELATIONSHIP_MANAGEMENT_APPLICATION_ADMINISTRATOR_JOB)

Synchronization Enabled Administrator Identity (ORA_SYNC_ENABLED_ADMINISTRATOR_ABSTRACT)

 VB Studio administrator (DEVELOPER_ADMINISTRATOR)

Application Developer (ORA_FND_APPLICATION_DEVELOPER_JOB)

Synchronization Enabled Developer Identity (ORA_SYNC_ENABLED_DEVELOPER_ABSTRACT)

 VB Studio user (DEVELOPER_USER)