Skip to main content

Manage user access

Zuora

Manage user access

  1. Last updated
  2. Save as PDF

Zuora Revenue uses role-based access control to restrict system access to authorized users. A role is a collection of permissions that control the actions a user can take in Zuora Revenue. You can create different roles with different permissions in Zuora Revenue. Then, you create users for individuals who need to log into Zuora Revenue and assign appropriate roles to the users. In this way, after a user logs into Zuora Revenue, he/she can perform only the allowed actions according to the user's role assignment.

Create a role

By default, a role named RevPro Super User is provided with full access to all functions. You can create your own roles and grant different permissions for this role.

Complete the following steps to create a role:

  1. Log into Zuora Revenue as a superuser or another user who has full access to security setups.

  2. Navigate to Setups > Security. The Roles page is displayed listing all the defined roles.

  3. To add a role, click the New Role icon icon-add.png. The New Role window is displayed.

  4. In the Role Details tab, specify the role name.

  5. (Optional): Use the toggle switches in the Controls section to have some high-level control of this role:

    • To create a read-only role, toggle the Read Only switch to Yes. Then, all privileges in the Role Privileges tab are set to READ ONLY by default.

    • For the role to run some programs that are blocked by soft freeze during period-open or period-close process, toggle the Override Soft Freeze switch to Yes.

  6. Click icon-save.png. The role is created.

  7. To assign different permissions for the role, complete the following steps:

    1. Click the Role Privileges tab. 
      All categories on the main menu are listed as the MENU type. Expand each category to view the menu options listed as SUB MENU type under the category. The Privilege column displays the current permission assigned, which can be NONE, READ ONLY, PARTIAL ACCESS, or FULL ACCESS.
      role-privileges.png

    2. Locate the line that you want to change the permission.

      • To assign the same permission for all menu options under the same category, locate the MENU type line.

      • To control permissions for a submenu option under a category, expand the category and locate the SUB MENU type line.

      • To control permissions for a specific operation on a submenu, expand the submenu and locate the ACTION or BUTTON type line.

    3. In the Actions column on the located line, click the Revoke icon icon-reject.png to set the privilege to NONE, which means the role cannot access the item. Or click icon-edit-privileges.png to switch the privilege between FULL ACCESS and READ ONLY.

  8. If users are already created, to assign this role to appropriate users, complete the following steps.

    1. Click the User Assignment tab.

    2. To assign this role to a user, click icon-add-new.png. A new user line is added.

    3. In the User Name column, select the target user name from the drop-down list.

    4. (Optional): Specify the period when this user is assigned to this role in the Active From and Active To columns.

    5. Toggle the Enabled switch to Yes.

    6. Click icon-add-new.png to add other users if necessary.

    7. After all users are added, click icon-save-new.png.

  9. (Optional): Use the Assign Jobs tab to specify the tasks or jobs that the current user role can start. Available jobs are listed on the right side. Select the appropriate ones and move them to the left so that the current role can access the selected ones.

  10. If there are multiple organizations configured in the system, use the Assign Orgs tab to specify the organization that the current user role can access. Available organizations are listed on the right side. Select the appropriate ones and move them to the left so that the current role can access the selected ones.

  11. After you complete all the necessary configurations, close the Edit Role window.

Create a user

A user must be created for each individual that needs to log into Zuora Revenue. The procedures are different depending on whether the login portal has been migrated.

After a user is created and you want to change the user name, it is recommended to create another user with the new name assigned instead of updating the existing user. This is because all the audit information is recorded based on the user name.

Use migrated login portal

If you use a single URL to access all Zuora Revenue instances, it means the login portal has been migrated with unified authentication. Zuora Revenue user management has been combined with Zuora Platform. 

  1. Log in to Zuora Revenue as a superuser on the target tenant.
  2. Click your username at the top right and click one of the following options to open the Users page:
    • For standalone Zuora Revenue users, click User Management and then click Manage Users on the Administration Settings page.
    • For Billing - Revenue Integration users, click Settings > Administration > Manage Users.
  3. To add a new user, on the Users page, click add single user.
  4. On the New User page, specify the required details for the new user.
  5. Assign appropriate Zuora Platform role to the new user.
    • Administrator: Users in this role will be assigned as the administrator role (Revpro Super User) in Zuora Revenue.
    • Standard User: Users in this role will be assigned as the First Time User Role in Zuora Revenue.
  6. Click save.

After the new user is created and the user logs in to the system, you can further assign specific Zuora Revenue roles to the new user as instructed in Create a role. Specific Zuora Revenue roles have different permissions to the Zuora Revenue UI items based on the role privilege settings.

Overriding the approver

The Override Approvers menu option is used to enable or disable the override approver capability for all the users associated with a tenant by using the inline edit mode.

  1. Log in to Zuora Revenue. 

  2. Navigate to Setups > Security > Override Approvers. 

  3. Enable/Disable the override approver capability as needed against each user.

  4. Save the changes.

Use legacy user management page

If you still use different URLs to access Zuora Revenue instances, use the legacy Users page in Zuora Revenue UI to create a user:

  1. Log into Zuora Revenue as a superuser or another user who has full access to security submenu options.

  2. Navigate to Setups > Security.

  3. Click open-side-menu.png to open the side menu and click Users. The Users page is displayed.

  4. To add a user, click the New User icon icon-add.png. The New User window is displayed.

  5. Specify the user name, email, and password for this user. This information is used for login.

  6. Provide other optional information if necessary.

    If the Override Approvers switch is toggled to Yes, it means the current user can provide approvals or rejections on behalf of the assigned approver. For example, the MJE for some lines are submitted for approval, however, the approver is out of the office. In this case, an override approver can approve or reject the MJE.

  7. Click icon-save.png. The user is created.

  8. If the user role is already created, click the Role Assignment tab to assign appropriate rules to this user:

    1. Click icon-add-new.png to add a line.

    2. In the Role Name column, select the role from the drop-down list.

    3. (Optional): Specify the period when this role is assigned to this user in the Active From and Active To columns.

    4. Toggle the Enabled switch to Yes.

    5. Click icon-add-new.png to add other roles for this user if necessary.

    6. After all roles are added, click icon-save-new.png.