advisor webcast fusion role customization jul2014

7/24/2019 Advisor Webcast Fusion Role Customization Jul2014

1/60


2/60

Copyright 2014 Oracle and/or its affiliates. All rights reserved. |

ATTENTIONAUDIO Options

You can:

Either listen the audio broadcast on your computer

Or join teleconference (dial in)


3/60


Voice StreamingAudio Broadcast

Listen only mode

Advantage: no need to dial in What about Questions?

Type your questions into WebEx Q&A panel

If you prefer full audio access in order to ask

questions directly, please connect to ourteleconference

Connect details you will find at next slide


4/60


ATTENTIONAUDIO INFORMATION

Teleconference Connect details:

1. Conference ID: Complete your ID here2. International dial in: +44 (0) 1452 555 566

3. US Free call: 1866 966 9439

4. List with national toll free numbers is available

Note ID: 1148600.1

You can view this info anytime during the conference using

Communicate > Teleconference > Join Teleconference

from your WebEx menu


5/60


The following is intended to outline our general product diIt is intended for information purposes only, and may not b

incorporated into any contract. It is not a commitment to d

any material, code, or functionality, and should not be relie

in making purchasing decision. The development, release,

timing of any features or functionality described for Oracle

products remains at the sole discretion of Oracle.

Safe Harbor Statement


6/60


Oracle Advisor Webcast

Lakshmi Reddeppa NooluSenior Principal Software EngineerOracle Fusion Security, Global Customer ServicesJuly 10, 2014

Customizing Roles in Oracle Fusion Applications


7/60


Safe Harbor StatementThe following is intended to outline our general product direction. It is inteninformation purposes only, and may not be incorporated into any contract.commitment to deliver any material, code, or functionality, and should not in making purchasing decisions. The development, release, and timing of anfunctionality described for Oracles products remains at the sole discretion


8/60


Objectives

Understand various types of roles in FA

Know tools for managing various roles

Look at steps to create custom roles

Review steps to provision roles to users


9/60Copyright 2014 Oracle and/or its affiliates. All rights reserved. |

Agenda

1

2

3

4

5

All about RolesTools for Managing Roles

Creating custom roles

Data Roles & Security Policies

Provisioning roles to users

Demo6


10/60Copyright 2014 Oracle and/or its affiliates. All rights reserved. |

Fusion Role Terminology

Privilege

Job Role

Data Role

Application Role

Enterprise Role

Entitlement

Abstract Role

Duty Role

?

?

Policy


11/60


Fusion Roles Overview

Job Role - represent the job that you hire a worker to perform.

Human Resource Analyst, Payroll Manager, Sales Representative

Abstract Role - represent a worker's role independently of the jhire the worker to do. For e.g,

Employee, Line Manager, Resource

Data Role - combine a worker's job and the data that users wit

must access. For e.g, Payroll Administrator US, Human Resource Specialist R&D

Duty Role - represent the individual duties that users perform atheir job. For e.g,

Worker Duty, Sales Forecasting Duty


12/60


Fusion Roles Overview

Oracle Fusion Apps Oracle Identity Manager

(OIM)

Authorization

Manager (APMJob Role Role External Role

Abstract Role Role External Role

Data Role Role External Role

Duty Role Application Ro

Function Security Privilege Entitlement

Service/Taskflow etc. Resource

Database Table Database Reso

Data Security Privilege Action


13/60


Security Model Comparison

E-Business Suite

Data Role

Job Role

Duty Role

PrivilegePermission

PeopleS

Employee

Top Leve

Role(s)

PermissioExecutab

Responsibility

Top Level Menu

Sub Menu

Form FunctionExecutable

Fusion Applications


14/60


Role Inheritance


15/60


Tools To Manage Fusion Roles

Role ToolJob / Abstract Role Oracle Identity Manager (OIM

Duty Role Authorization Policy Manage

Data Role (HCM) Fusion HCM UI / APM


16/60


Role Customization Scenario

Show / Hide menu links

Seeded Role has access more than needed

Seeded Role has less access than needed

Submenu / Links need to be hidden for a set of users

Seeded Role does not meet Implementation objectives


17/60


Ways to Customize Roles

Menu Customization

Create New Custom Role (Recommended)

Modify Seeded Role (Not Recommended) !


18/60


Menu Customization

Show / Hide menu items at Site level

Check / Uncheck Rendered property

Show / Hide menu items at Role level

Use EL Expression, #{securityContext.userInRole[']}

E.g., #{securityContext.userInRole['PER_HUMAN_RESOURCE_MANAGE

Multiple Roles can be entered as comma separated values For more details, refer doc:

How to Conditionally Hide/Show a Global Menu Node (Doc ID 1438414.1)


19/60


New Custom Job Role

Need: Menu Customization does not meet requirement

Suggestion: Create New Custom Job Role

Advantages:

Seeded roles are intact

Not overwritten by upgrades

New Job Role created in OIM

Duty Roles added to New Job Role via APM


20/60


New Custom Job Role - Steps

Navigate to OIM via task Manage Job Roles from FSM


21/60


22/60


New Custom Job Role - Steps

Associate new Job Role with seeded and/or custom ApplicationAPM


23/60


Modify Seeded Job Role

Add / Remove duties from Job Role

Advantageeasy to customize

Disadvantages:

Seeded functionality is lost

Not easy to revert customizations

Upgrades might override customizations


24/60


25/60


26/60


New Custom Application Role

Always Create New Custom Application Role

Advantages:

Seeded roles are intact

Not overwritten by upgrades

Disadvantages:

Complicated and error prone Role copy functionality not yet available

New Application Role created and managed in APM


27/60


New Custom Application Role - Steps

Navigate to APM via task Manage Duties from FSM

Select stripe, then click on New Application Role and fill details


28/60


29/60


New Custom Application Role - Steps Add Entitlements via Create Policy button


30/60


New Custom Application Role - Steps Add Data Security Policies in Data Security tab


31/60


New Custom Application Role - Steps Add / Map Job Role in External Role Mapping tab


32/60


Modify Seeded Application Role

Add / Remove Entitlements from Duty Role

Advantageeasy to customize

Disadvantages:

Seeded role reference is lost

Restoration of seeded role definition is difficult

Refer below docs for details on Duties and Privileges Mapping Mapping Of Roles, Duties and Privileges in Fusion Applications (Doc ID


33/60


Modify Seeded Application Role - Steps

Navigate to APM via task Manage Role Templates from FSM

Search for Application Role for a stripe, open resultant Role

Add / Remove Duty role inheritance in Application Role Heirar

Add / Remove Entitlements via Find Policies => Functional Po

Add / Modify Data Security Policy via Find Policies => Data Sec


34/60




35/60




36/60


HCM Data Role - Steps

Go to task "Manage Data Role and Security Profiles from FSM

Enter New Data Role name and select Job Role

For each object type, include only one security profile

Create new Security Profile where needed

Review and Submit


37/60




38/60




39/60




40/60


Modify Data Security Policies

Navigate to APM via task Manage Duties from FSM

Search for Application Role for a stripe, open resultant Role

Add / Modify Data Security Policy via Find Policies => Data Sec

Modify Condition from Rule tab

Choose Actions from Action tab


41/60


Modify Data Security Policies


42/60


Provision Roles to Users

Roles can be provisioned to Users Automatically or on Request

Define Role Mapping Rule via task Manage HCM Role Provisio

Choose conditions

Add Roles to definition and choose options (Auto-provision, ReSelf-Requestable)

Role Mapping Rules apply when User is created in FA

Apply Auto-provision assigns the roles to all users who meet th


43/60


Provision Roles to Users


44/60

S


45/60


Summary

We learned on: Various roles in Fusion

What Role name is called where

Where to manage each role

How to create new Job Role and Duty Role

How to provision Role(s) to Users

Whatwe covered today


46/60


Helpful References

Mapping Of Duty Roles To Top Level Menu Entries in Fusion Ap

(Doc ID 1459828.1) Mapping Of Roles, Duties and Privileges in Fusion Applications

1460486.1)

How to Remove Menu Items in Fusion Applications using MenuCustomization (Doc ID 1550048.1)

How to Conditionally Hide/Show a Global Menu Node (Doc ID

Creating Custom Roles in Fusion Applications CRM (Doc ID 147

Customizing Roles In Fusion Applications (Doc ID 1595864.1)

L M


47/60


Learn More

About Oracle Support Best Practices

www.oracle.com/goto/proactivesupport

Get Proactive in My Oracle Supporthttps://support. oracle.com| Doc ID: 432.1

My Oracle Support Blog

https://blogs.oracle.com/supportportal/

Ask the Get Proactive [email protected]

Available References and Resources to Get Proactive

Q & A
http://www.oracle.com/goto/proactivesupporthttps://support.us.oracle.com/https://blogs.oracle.com/supportportal/mailto:[email protected]:[email protected]:[email protected]:[email protected]://blogs.oracle.com/supportportal/https://support.us.oracle.com/http://www.oracle.com/goto/proactivesupport


48/60


Q & A


49/60

Wh C I G t Th Slid F Thi S i ?


50/60


Where Can I Get The Slides From This Session?

1. PDF link from Doc ID 740966.1(within 48 hours)

2. RAC/Scalability Community >Content Tab > Documents (within 24 h
https://support.us.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=740966.1https://support.us.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=740966.1


51/60

Oracle Advisor Webcast Program


52/60


Oracle Advisor Webcast ProgramLocating Current Schedule & Archived Recordings

From Note ID : 740966.1

drill down to your area

of interest

For us, Oracle Database

Access the DB page

directly via Note ID :

1455369.1

O l Ad i W b t P
https://support.us.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=740966.1https://support.us.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=1455369.1https://support.us.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=1455369.1https://support.us.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=740966.1


53/60


Oracle Advisor Webcast Program

Note:

Click column headings to sort

Hover on Webcast Title for moreinformation

Recordings available within 48hours

Advisor Webcast Questions on awebcast or ask questions via theQuestions? link

Locating Current Schedule & Archived Recordings For DB


54/60


THANK YOU


55/60



56/60


57/60


Additional Resources

Oracle Corporate Photography

my.oracle.com\site\mktg\creative\graphics\photography

Oracle Corporate Hardware Photogra

my.oracle.com/site/mktg/creative/Graphics/Photograph

Academic Airline Analytics Application ATM

Oracle Corporate Icons

my.oracle.com/site/mktg/creative/Graphics/Icons/index.html

Oracle Corporate Logos

my.oracle.com/site/mktg/creative/Logos/index.h

AUDIO INFO Join Teleconference
http://my.oracle.com/site/mktg/creative/graphics/photographyhttp://localhost/var/www/apps/conversion/tmp/scratch_5/my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/Graphics/Photography/cnt1375391.htmhttp://my.oracle.com/site/mktg/creative/Graphics/Icons/index.htmlhttp://my.oracle.com/site/mktg/creative/Logos/index.htmlhttp://my.oracle.com/site/mktg/creative/Logos/index.htmlhttp://my.oracle.com/site/mktg/creative/Logos/index.htmlhttp://my.oracle.com/site/mktg/creative/Logos/index.htmlhttp://my.oracle.com/site/mktg/creative/Graphics/Icons/index.htmlhttp://my.oracle.com/site/mktg/creative/Graphics/Icons/index.htmlhttp://my.oracle.com/site/mktg/creative/Graphics/Icons/index.htmlhttp://my.oracle.com/site/mktg/creative/Graphics/Photography/cnt1375391.htmhttp://my.oracle.com/site/mktg/creative/Graphics/Photography/cnt1375391.htmhttp://my.oracle.com/site/mktg/creative/Graphics/Photography/cnt1375391.htmhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://localhost/var/www/apps/conversion/tmp/scratch_5/my.oracle.com/site/mktg/creative/graphics/photography


58/60


AUDIO INFOJoin Teleconference


59/60

Question and Answer Instructions (cont)


60/60

your question pop-up here

Question and Answer Instructions (cont)