Application Administrators Overview

An application administrator is a user whose main task is to configure the application so that it is ready to use. Application administrator is a unique status with the highest amount of security privileges possible in a tenant. Application administrators set up and manage workspaces, users, and security. They have the privileges to access all workspaces, projects, portfolios, programs, ideas, and global elements (such as workflows). An application administrator can assign a user in any company as an application administrator. Oracle recommends that you assign the application administrator privilege sparingly.

See the Get Started for Application Administrators guide for more information.

Application Administrator Privileges

Application administrators are automatically assigned access to all objects in the application. They do not need to be explicitly assigned security permissions to any object and are also afforded all the privileges that are available in an object permission set.

Owing to their unique status, application administrators are the only users who can complete the following tasks:

• Assign and unassign other application administrators: Application administrators can assign another user in any company as a backup administrator. See Add an Application Administrator for more information.
• Modify global permission sets and assign them to users: The Permission Sets page in Global Admin provides application administrators one location to create and edit global permission sets as well as object permission sets, including workspaces, projects, portfolios, programs, custom logs, files, ideas, and reports. Global permissions allow users to perform functions across the application, such as administering companies and users. These permissions can be assigned to any user and do not belong to any one workspace. See Create a Permission Set in Global Admin and Assign User Access for more information.
• Export/Import configuration package files: Application administrators can use the Import/Export Configuration Data feature to copy workspace data from one environment to another. You can either export and import whole workspaces or create configuration sets to specify the data. See Import/Export Configuration Data Overview for more information.
• View all jobs running as background services from the Manage Services page: Application administrators can access the Manage Services page to view the user-initiated processes in the application that are in progress or have completed. See Monitor Service Status for more information.
• View all workflow instances from the Monitor Workflows page: Application administrators can view all workflow instances from the Monitor Workflows page. See Monitor a Workflow Instance for more information.
• Access the Users, License Usage, and User Usage pages: Application administrators can access user details on the Users page to look up details about individual users, such as contact information, license assignments, global permission set assigned to a user, and user group assignments. They can also view the license usage and user usage of the licenses on the View License Usage and View User Usage pages, respectively. See View User Details, View License Usage, and View User Usage for more information.
• Configure integration settings: Application administrators can set up connections with external products, such as P6 EPPM, MS Project, or Primavera Gateway, using the Integrations app in Global Admin. They also determine what business flows will be available for each connection. The selected business flows are only available for the workspaces associated with the connection. See Integration Overview for more information.
• Act as proxy users for other application administrators: Application administrators can act as a proxy user for another application administrator in their absence. See Add a Proxy User for more information.
• Manage Personal Identifiable Information (PII): Application administrators manage the personal information (PI) in Primavera Cloud by ensuring to request the appropriate consent to collect, process, store, and transmit the user PI. See Configure Consent Notices for Oracle Primavera Cloud and Audit Consent Notices for Oracle Primavera Cloud for more information.

Other Types of Administrators in Primavera Cloud

In addition to the application administrator, Primavera Cloud has two other types of administrators: global administrators and object administrators. Any user in the tenant can be assigned privileges for a global administrator or an object administrator.

• Global Administrator: Any user in the tenant can be assigned the global permission sets. Global permissions allow users to perform functions across the applications, such as manage companies and users, edit application settings, manage workflow instances, export projects, download excel files, and create and run user reports.
• Object Administrator: Any user in the tenant can be assigned as an object administrator. The Administrator permission sets that can be set at the object level grant administrator privileges to a user for that object only.

  Note: Global and object administrators can perform some of the same tasks as an application administrator but through different areas in the application. Below are some examples of the administration tasks that global or object administrators can perform:

  • Manage user access and default permission sets for a project or a workspace on the Security detail window for a project or workspace.
  • Manage user groups on the User Groups page in the workspace Summary and Settings or in the Project Team app for a project.
  • Manage global permission sets for a workspace on the Permissions page in workspace Summary and Settings.