User with Only "My User Profile" Role Can Create User Group, and Unable to Remove "Create User Groups" Privilege from "My User Profile" Role (Doc ID 2998089.1)

Last updated on JANUARY 24, 2024

Applies to:

Symptoms

Do not want to allow to create user group to certain users.
However, user who has only "My User Profile" role can create User Group, and "My User Profile" role is mandatory role for an user.
Unable to remove the "Create User Groups" privilege from "My User Profile" role, and unable to restrict the user to create user group.

The issue can be reproduced at will with the following steps:

1. Log into Java Client as admin user, and go to Admin tab > User Settings > Users
2. Click New to create a new user: user1, and fill in required information, and OK.
3. Check the Role of the new user. See below two roles are assigned by default:
   • Creator can read and discover object they created
   • My User Profile
4. Remove "Creator can read and discover object they created" and "My User Profile" from Role(s) field, and Save.
5. Gets Error "My User Profile is mandatory" in the Java Client UI. Hit OK.
6. Click Role(s) field, and add back "My User Profile" and Save.
7. Log into Web Client as user1.
8. Go to Tools > Address Book > User Groups.
9. Add, and give Name, and Save. See the user can create Personal User Group.
10. Log into Java Client as admin user, and go to Admin tab > User Settings > Roles, and search and open "My User Profile".
11. Go to Privileges tab. See "Create User Groups" privilege is present.
12. Select the privilege "Create User Groups". Notice that privilege cannot be removed from My User Profile role because Remove button is grayed out.

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.