Oracle® CloudAdministering Oracle Enterprise PerformanceReporting Cloud

E94194-02

Oracle Cloud Administering Oracle Enterprise Performance Reporting Cloud,

E94194-02

Copyright © 2015, 2018, Oracle and/or its affiliates. All rights reserved.

Primary Author: EPM Information Development Team

This software and related documentation are provided under a license agreement containing restrictions onuse and disclosure and are protected by intellectual property laws. Except as expressly permitted in yourlicense agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify,license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means.Reverse engineering, disassembly, or decompilation of this software, unless required by law forinteroperability, is prohibited.

The information contained herein is subject to change without notice and is not warranted to be error-free. Ifyou find any errors, please report them to us in writing.

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it onbehalf of the U.S. Government, then the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software,any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are"commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of theprograms, including any operating system, integrated software, any programs installed on the hardware,and/or documentation, shall be subject to license terms and license restrictions applicable to the programs.No other rights are granted to the U.S. Government.

This software or hardware is developed for general use in a variety of information management applications.It is not developed or intended for use in any inherently dangerous applications, including applications thatmay create a risk of personal injury. If you use this software or hardware in dangerous applications, then youshall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure itssafe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of thissoftware or hardware in dangerous applications.

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks oftheir respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks areused under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron,the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced MicroDevices. UNIX is a registered trademark of The Open Group.

This software or hardware and documentation may provide access to or information about content, products,and services from third parties. Oracle Corporation and its affiliates are not responsible for and expresslydisclaim all warranties of any kind with respect to third-party content, products, and services unless otherwiseset forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not beresponsible for any loss, costs, or damages incurred due to your access to or use of third-party content,products, or services, except as set forth in an applicable agreement between you and Oracle.

Contents

Documentation Accessibility

Documentation Feedback

1 Welcome to Oracle Enterprise Performance Reporting Cloud

Icons 1-2

User Menu 1-4

Accessibility Settings 1-6

Welcome Panel 1-6

Conventions Used 1-8

Roles and Permission-Based Access 1-9

Which Tasks Should I Do First? 1-10

How Do I Get Additional Help 1-11

Configuring SPF Record for Oracle Cloud Email Verification 1-11

Uploading a Disclosure Management Report 1-11

Using Translations 1-12

2 Learning About Report Packages

Why Use a Report Package? 2-1

What is a Report Package? 2-1

Report Package Components 2-2

Author Phase 2-5

Review Phase 2-6

Sign Off Phase 2-7

3 Learning About an Oracle Enterprise Performance Reporting CloudApplication

What is an Oracle Enterprise Performance Reporting Cloud Application? 3-1

Working with Data 3-2

iii

Reasons to Create an Application 3-3

Using the Sample or Custom Application 3-3

Creating Your Custom Application 3-4

Artifact Locking 3-4

Dimension Basics 3-5

Security 3-6

4 Learning About Smart View

5 Learning About the Library

Using the Library 5-2

Learning About the Navigation and Content Panes 5-4

Using Locator Links 5-5

Using the Action Menus 5-6

Making a copy of an existing Report Package 5-6

Moving a Report Package 5-7

Using the Create Menus 5-7

Accessing other Users Libraries 5-8

Setting Default Views for Content Pane Folders and Artifacts 5-9

Using Audits 5-9

Searching the Library 5-10

Creating Artifacts in the Library 5-10

Organizing and Maintaining the Library 5-11

Taking Actions for Report Packages, Reports, and Applications 5-12

Migrating Folders and Artifacts 5-14

Inspecting Folders and Artifacts 5-14

6 Managing User Preferences

Preferences Dialog Tabs 6-1

Using the General Tab 6-2

Using the Notification Tab 6-4

Using the Formatting Tab 6-5

Using the Library Tab 6-6

Using the Appearance Tab 6-7

Resetting Preferences 6-8

7 Uploading Additional Fonts

iv

8 Installing Samples

9 Working with the Sample Report Package

Opening the Report Package 9-1

Working with the Report Center 9-2

Editing Report Packages 9-3

Working with the Style Sample Document 9-8

Working with Development Phases 9-13

10

Working with the Sample Management Reports

11

Working with the Sample Application

Generating the Sample Application 11-1

Experimenting with a Complete Application 11-2

Learning How the Dimension Hierarchy Works 11-4

Viewing the Proper Format of Dimension Load and Data Load Files 11-5

Viewing Application History 11-6

Granting Access to the Application 11-7

Learning How to Set Up Data Grants 11-8

Refreshing Data in a Doclet 11-9

12

Learning About Security

Levels of Security 12-1

System Level Security 12-2

Artifact Level Security 12-2

Data Level Security 12-4

13

Granting Access

Granting Access to Report Packages 13-4

Granting Access to Folders and Third-party Documents 13-7

Granting Access to an Application 13-9

Granting Access to Dimensions 13-13

v

14

Setting Up Data Grants

Understanding How Data Grants Work 14-1

Selecting Member Functions 14-3

Data Grants Processing and Conflict Resolution Rules 14-4

Creating Data Grants 14-5

Sample Data Grant 14-10

Setting Up Data Grants 14-13

15

Performing an Audit

Creating a System Audit 15-1

Creating an Artifact or Folder Audit 15-5

16

Migrating Artifacts

Migrating Artifacts from One Environment to Another Environment 16-1

Exporting and Downloading Artifacts Using the Library 16-1

Importing Artifacts into the New Environment Using the Library 16-2

Migrating Artifacts Using the File Transfer Utility 16-3

Migrating Artifacts within the Same Environment 16-6

17

Using the File Transfer Utility

Running the File Transfer Utility 17-2

Using the File Transfer Utility Commands and Parameters 17-2

Listing of Commands 17-4

18

Performing Backup and Restore (System Clone)

Saving Backup Snapshots 18-2

Restore Using the Most Recent Daily Backup Snapshot 18-3

Restore Using a Saved Backup Snapshot 18-4

Cancelling a Scheduled Restore 18-4

Cloning Environments 18-5

vi

Documentation Accessibility

For information about Oracle's commitment to accessibility, visit the OracleAccessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.

Access to Oracle Support

Oracle customers that have purchased support have access to electronic supportthrough My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trsif you are hearing impaired.

vii

Documentation Feedback

To provide feedback on this documentation, send email to epmdoc_ww@oracle.com,or, in an Oracle Help Center topic, click the Feedback button located beneath theTable of Contents (you may need to scroll down to see the button).

Follow EPM Information Development on these social media sites:

LinkedIn - http://www.linkedin.com/groups?gid=3127051&goback=.gmp_3127051

Twitter - http://twitter.com/hyperionepminfo

Facebook - http://www.facebook.com/pages/Hyperion-EPM-Info/102682103112642

Google+ - https://plus.google.com/106915048672979407731/#106915048672979407731/posts

YouTube - https://www.youtube.com/oracleepminthecloud

Documentation Feedback

viii

1Welcome to Oracle EnterprisePerformance Reporting Cloud

Oracle Enterprise Performance Reporting Cloud is an Oracle Cloud solution formanagement and narrative reporting. It provides a secure, collaborative, and processdriven approach for defining, authoring, reviewing and publishing financial andmanagement report packages. In addition, Oracle Enterprise Performance ReportingCloud offers multidimensional analytics and you can choose to store, analyze, andsource data from the Cloud via built-in analytics or use your own existing data sourcesfor purposes of analyzing and authoring doclet content.

Watch the following video also.

Welcome to Oracle Enterprise Performance Reporting Cloud.

Key benefits:

• Combine Data and Narrative: Use report packages and doclets to addressauthoring, collaboration, commentary and delivery needs.

• Collaborate Securely: Gives report contributors access to content based on theirrole and insures that sensitive content is secure. Also lets report owners see theprogress of the reporting lifecycle.

• Confidently Report: Allows you to trust that the data is reliable and accuratewhile providing faster, more accurate insights to all stakeholders.

This topic takes you on a quick tour around the Home Page. Here you’ll learn whichtasks to do first, based on your role.

1-1

Let’s begin by looking at the areas of the Home Page. Your Home Page may lookdifferent based on your role. This is a Service Administrator’s view:

IconsThere are up to ten main icons accessible from the Home Page for a SystemAdministrator.

Chapter 1Icons

1-2

TasksDisplays tasks to perform such as reviewing a doclet or signing off on reportpackages.

MessagesDisplays notifications about actions you need to take or others took; for example,confirmation that an export file was created.

Report PackagesDisplays the list of report packages that you can access.

ReportsOpens Management Reporting.

Disclosure ManagementOpens the Disclosure Management user interface. From here, you can upload alocally saved Disclosure Management to the Oracle Enterprise PerformanceReporting Cloud library.

LibraryThe central repository for report packages, folders, and artifacts such as audit files aswell as an application.

ApplicationUsed to create a sample or custom application that stores data in the Oracle Cloud forOracle Enterprise Performance Reporting Cloud.

Daily MaintenanceUsed by administrators to set the daily maintenance time and perform backup andrestore actions.

AppearanceUsed by administrators to set default display options for all users. For example, acompany logo and background logo for the Home page.

Chapter 1Icons

1-3

AcademyDisplays links to videos and to the Cloud Help Center on using Oracle EnterprisePerformance Reporting Cloud.

Navigating the Icons

After you leave the Home Page, a springboard is displayed with icons at the top ofyour page. An indicator points to your location on the springboard. In the examplebelow, the Library icon is being selected and pointed to.

Select another icon to move to it.

Navigating to the Home Page

Use the Home icon in the upper right area of the Home page to return to theHome Page.

User MenuDepending on your role, you can take actions from the user menu:

Chapter 1User Menu

1-4

PreferencesUpload a photo, set your language and time zone, set notification email addresses,and customize other display items. See Managing User Preferences.

DownloadsDepending on your assigned roles, allows you to install the following client software:

• File Transfer Utility – Downloads a ZIP file containing a command-line utility soyou can migrate and export artifacts and perform backup and restore actions. See Using the File Transfer Utility.

• Oracle Smart View for Office – Download the latest version of Smart View fromthe Oracle Smart View for Office software download page. See Setting UpEnterprise Performance Reporting Cloud in Smart View.

• Upload Samples – Enables the Service Administrator to create a Samples folderin the library that contains a sample report package, data and dimension load ZIPfiles. See Install Samples.

HelpAccess videos and other task-related topics in the Oracle Cloud Help Center.

Provide FeedbackA diagnostic utility called Provide Feedback is available within your EnterprisePerformance Management cloud service. If you encounter an issue while using theservice, use the Provide Feedback utility to describe the issue and the steps to

Chapter 1User Menu

1-5

reproduce it. See Helping Oracle Collect Diagnostic Information Using the ProvideFeedback Utility.

Oracle SupportMy Oracle Support site.

AboutContains Oracle Enterprise Performance Reporting Cloud notices and versioninformation.

Sign OutExits Oracle Enterprise Performance Reporting Cloud.

Accessibility Settings

To access accessibility settings, click the Accessibility icon at the upper right ofthe Home page.

• Screen Reader Mode – Enables a screen reader to read the text on the screen.

• High contrast – Sharpens screen contrast.

Note: To increase the font size, use your browser settings.

Welcome PanelThe Welcome Panel gives you access to key areas while you use Oracle EnterprisePerformance Reporting Cloud and helps you see your pending workload at a glance.Click the arrow to access each option.

Chapter 1Accessibility Settings

1-6

Select the picture to upload a photo of yourself.

Incomplete TasksShows the number of assigned tasks that have not been completed yet.

New MessagesDisplays the number of unread messages.

Flagged MessagesDisplays the number of flagged messages.

Active Report PackageThe number of your current report packages.

CreateDepending on your permissions, lets you create a report package or system audit file.

OpenOpens the recently used list.

TourTakes you to the Oracle Cloud Help Center to access videos and documentation.

Chapter 1Welcome Panel

1-7

Messages

When you select Messages from either the Welcome Panel or the Messages icon, youwill see items such as confirmation of an action or a notification that you’re assigned atask. Click the blue text to perform the action that you need to take.

Tasks

You can access your incomplete tasks from the Welcome Panel or all of your tasks(current, future, completed) from the Tasks icon. Click either the icon or the blue textlink to access additional task details.

Conventions UsedConventions used in Oracle Enterprise Performance Reporting Cloud:

Chapter 1Conventions Used

1-8

• An asterisk indicates a required entry.

• A plus sign indicates that you can create or add comment.

• An X indicates that you can remove or delete content.

• A curled arrow indicates that you can refresh your screen.

• A triangle caret indicates a drop-down menu with possible actions.

• A gear indicates actions or an actions menu.

In addition, a person indicates that you can get help from either the Oracle CloudHelp Center, Oracle Support site, or Provide Feedback. You can also access OracleCustomer Cloud Connect, a community gathering place for members to interact andcollaborate on common goals and objectives, from this icon.

All Oracle Enterprise Performance Reporting Cloud icons have tooltips. Hover yourcursor over tooltips for information about icons.

Roles and Permission-Based AccessSecured access to Oracle Enterprise Performance Reporting Cloud is established bythe roles that you have been provisioned within Oracle Cloud User ManagementConsole, and access permissions that have been granted to you from within theservice. Because the functionality is restricted to only the users who can perform atask, security is enforced. For example, look at the Home Page. A serviceadministrator has access to all the functionality available within the service, but areviewer only sees some of these tasks. If your roles and access grants are morerestrictive, then you will only see a subset of the functionality.

Chapter 1Roles and Permission-Based Access

1-9

Which Tasks Should I Do First?When starting to use Oracle Enterprise Performance Reporting Cloud, perform thesetasks after reading this topic.

All Users

• Learn about Oracle Enterprise Performance Reporting Cloud in Learn aboutOracle Enterprise Performance Reporting Cloud.

• See which tasks you should start with in Which Tasks Should I Do First?

• Find out about browser requirements as well as other requirements in Prerequisites.

• Find out how to access an instance of Oracle Enterprise Performance ReportingCloud in Accessing EPM Cloud.

• Upload your photo, check the language and time zone, and set any otherpreferences listed in Managing User Preferences.

• Get familiar with Oracle Enterprise Performance Reporting Cloud by watching

videos: Overview: Report Package Part 1 in Oracle Enterprise PerformanceReporting Cloud Service and Overview: Report Package Part 2 in OracleEnterprise Performance Reporting Cloud Service, Learn about Smart View, andreading this topic, Using the Library.

Administrators

• Learn about Oracle Enterprise Performance Reporting Cloud in Learn aboutOracle Enterprise Performance Reporting Cloud.

• See which tasks you should start with in Which Tasks Should I Do First?

• Get familiar with these additional features by watching these videos: Learnabout working with applications, models, and dimensions and Learn aboutSecurity.

• For information to help you configure Oracle’s Sender Protection Framework(SPF) see Configuring SPF Record for Oracle Cloud Email Verification

• Set the daily maintenance time in Settings. See Setting Service MaintenanceTime.

• Create users and assign roles. See Managing Users and Roles.

• Review Known Issues on My Oracle Support where you can see if any knownissues or helpful work arounds exist for this release.

• Review Readiness Information for Oracle Enterprise Performance ReportingCloud, where you can review information about what’s new in each release.

• Join Customer Connect, where you can join discussions, ask questions, and shareinformation.

Chapter 1Which Tasks Should I Do First?

1-10

How Do I Get Additional HelpUser assistance in Oracle Enterprise Performance Reporting Cloud is tailored to getyou the right information based on your roles and permissions. See the Oracle CloudHelp Center for available information. Also watch overview videos and tutorial videosto increase your understanding.

Note:

Depending on your browser, the screenshots and procedures shown maylook slightly different from what you see on screen. For example, a browsebutton may be presented as "choose file" in Chrome.

Configuring SPF Record for Oracle Cloud Email VerificationOracle publishes Sender Protection Framework (SPF) policy that identifies the Oracleserver IP addresses and subnets that are permitted to send cloud services emails.You can use this information to assess the validity of the messages to determinewhether or not to accept them. Additionally, you can use the information as a part ofthe message protection services.

Add the following in your SPF record to take advantage of this protection:

"v=spf1 include:spf_c.oracle.com -all"

Uploading a Disclosure Management ReportYou can upload a Disclosure Management report to the Oracle EnterprisePerformance Reporting Cloud library so you can open it in Oracle Smart View forOffice. For example, use a Microsoft Word file as a starting point for your DisclosureManagement report. For more information on Disclosure Management, see AboutDisclosure Management in the Oracle® Cloud Working with Disclosure Managementfor Oracle Enterprise Performance Reporting Cloud guide.

Note:

For Colombian clients, there is no integration with Oracle EnterprisePerformance Reporting Cloud. You open the regulator’s Microsoft OfficeExcel workbook directly in Smart View and enter through the High VolumeXBRL tab on the ribbon.

To upload a Disclosure Management report to the Oracle Enterprise PerformanceReporting Cloud library for use in Smart View:

1. From the Oracle Enterprise Performance Reporting Cloud Home page, select theDisclosure Management area icon.

Chapter 1How Do I Get Additional Help

1-11

2. Select

3. From the Upload File dialog, select a Disclosure Management report to upload to afolder in the library.

4. Go to the Smart View library and open the Disclosure Management report youuploaded to the Oracle Enterprise Performance Reporting Cloud library.

Using TranslationsThe following items are translated for Oracle Enterprise Performance Reporting Cloud:

• The User Interface (UI) is translated into Arabic, Danish, German, Spanish,Finnish, French, Italian, Japanese, Korean, Dutch, Norwegian, Polish, Portuguese(Brazilian), Russian, Swedish, Turkish, Simplified Chinese, Traditional Chinese,and Canadian French.

• Disclosure Management is translated into Danish, German, Spanish, Finnish,French, Italian, Japanese, Korean, Dutch, Norwegian, Polish, Portuguese(Brazilian), Russian, Swedish, Turkish, Simplified Chinese, Traditional Chinese,and Canadian French.

• The overview video closed captions are translated into French, German, Italian,Spanish, Brazilian Portuguese, Japanese, Korean, Traditional Chinese, andSimplified Chinese.

Note:

Tutorial video closed captions are not translated.

The online Help and guides are translated into French, German, Italian, Spanish,Brazilian Portuguese, Japanese, Korean, Traditional Chinese, and SimplifiedChinese. Additionally, theOracle Smart View for Office User's online Help andguide is translated to Dutch. See the Oracle Cloud Help Center Translated Bookstab at Oracle Cloud Help Center.

Note:

The Sample Application and the contents are in English only.

The translated documentation covers all features up to August 28, 2017,except for Working with Smart View for Enterprise PerformanceManagement Cloud which covers features up to August 7, 2017.

Chapter 1Using Translations

1-12

2Learning About Report Packages

Report packages provide a secure, collaborative, and process driven approach fordefining, authoring, reviewing and publishing financial and management reports. Butwhat is a report package? Why would you use one? And how do they work? Thefollowing topics provide answers to these questions:

• Why Use a Report Package?

• What is a Report Package?

• Report Package Components

– Author Phase

– Review Phase

– Sign Off Phase

See these videos also Overview: Report Package Part 1 in Oracle EnterprisePerformance Reporting Cloud

andOverview: Report Package Part 2 in Oracle Enterprise Performance Reporting Cloud.

Why Use a Report Package?Financial reporting is a critical function in most companies. Reports can be internal, forboard packages, management updates, or quarterly updates. Or they can be external,such as statutory, regulatory, filing, or annual reports. For any report, gatheringinformation, reviewing it for accuracy, and presenting it are key to businesses.

Creating reports is easy with one author and no review, but having multiple authorsworking on a report can be more complicated. Do all of the authors have the currentversion? How do you merge changes from multiple authors into a single document?As you add content creators, keeping everyone organized becomes more challenging.

The situation becomes even more difficult with several authors, multiple reviewers—each of whom might be responsible for different sections, and multiple signers whoprovides final sign off on the whole report. How do you keep all of your authors,approvers, reviewers, and signers organized? How do you handle versioning andmanage workflow? Coordinating stakeholders by email can be daunting.

A better way to organize and produce a collaborative report is by using a reportpackage.

What is a Report Package?With report packages, you can structure the content of your report, assignresponsibilities to content creators and reviewers, and manage their collaboration andworkflow to produce a unified document. Use report packages to create, for example,

2-1

internal management reports that may require some level of collaboration to develop,but may not undergo a highly intensive review. Or, you can create external reports thatrequire a high level of scrutiny, multiple reviews, and significant process management.

Report packages help you manage the lifecycle of your deliverables. With them, youcan:

• Assign content to multiple authors, who each contribute individual pieces of thereport

• Gather comments from multiple reviewers

• Provide an electronic sign off on the completed report

• Manage the report lifecycle by providing notifications to users, managing theworkflow, and coordinating the processes

• Combine data points with textual narrative

• Secure and control access to the report content, enabling users to see only thecontent that they are permitted to see at the time that they are permitted to see it

Next, let’s look at some key components of a report package.

Report Package ComponentsA report package is made up of several components:

• Doclets are individual pieces of a report that can be assigned out to authors toprovide the content.

• Optional: Supplemental doclets are managed exactly the same way as a doclet,with respect to workflow and content management, except that the content of thefiles is not merged into the report package.

• Reference Doclets are managed exactly the same way as a doclet, with respect toworkflow and content management, except that the content of the files is notmerged into the report package.

Chapter 2Report Package Components

2-2

• Sections help group and organize doclets in a report package.

• Development phases enable you to select which of three phases you require foryour development: an author, review, and sign off phase.

Doclets

A core feature of report packages is the ability to break down a report intosubcomponents called doclets. What makes up a doclet varies, depending on the typeof report that you are creating. For example, a sales report might have separatedoclets for each geographical region, and a financial disclosure might have doclets foreach of the various financial statements, tax statements, and notes.

Alternatively, if one person is responsible for all of the income statement information ina report, for example, those income statement documents can be all classified as asingle doclet. How you define a doclet is completely up to you. See "IdentifyingDoclets" in Report Package Design Considerations.

After you identify the doclets in a report, you assign them to authors, who providecontent. For example, in a report that breaks down revenue by categories, you canhave doclets for services, hardware, and software licenses. Then, you could assigneach doclet to the management team in charge of that category.

Supplemental Doclets

Supplemental documents such as procedures, instructions, reference material, and soon, can be uploaded into a report package as a supplemental doclet. Supplementaldocuments can be any type of document file (for example, PDF, Excel, Word, and soon). As the content for supplemental doclets is not included within the merged report,these doclets are excluded from the review and sign off processes. The supplementaldoclet contents cannot be viewed online, but users can download and use nativeprograms to open the supplemental doclet in the same way that you can work withthird party artifacts in the library.

Chapter 2Report Package Components

2-3

See this video also Managing Supplemental Doclets in Oracle EnterprisePerformance Reporting Cloud.

Reference Doclets

A Reference doclet can be used as a container to store contents such as namedranges from an Excel file or charts and graphs created from Management Reporting,see Adding a Management Report to a Reference Doclet and consumed by one ormore regular doclets (non-supplemental).

The file content for Reference doclets is not directly included in any report packageoutputs, such as preview, publish, review instances or signoff instances. However,embedded content within a consuming doclet is displayed as part of the reportpackage outputs - even though the actual reference doclet is not directly merged in theoutputs. Reference doclets can participate in the author phase, but not in the review orsignoff phases.

Sections

Sections enable you to group doclets for organization, or to keep doclets together thathave a common format or are intended for a common viewership. For example, youcan group all financial statements in a financial disclosure report into one section.Doing so provides a filtered view of only those doclets to the reviewers assigned tothat section.

Development Phases

Report package development occurs in three phases:

• Author phase—Compile the various report content and supporting details togetherinto a cohesive report package.

• Review phase—Gather commentary on multiple draft versions and revise thereport content accordingly.

• Sign Off phase—Gather electronic signatures from key constituents and securereport contents to prevent modifications.

You decide which development phases your report requires. If the report content isgoing to be provided primarily by one or two people, then you may not need an authorphase. If your report is being developed for a small group of internal stakeholders and

Chapter 2Report Package Components

2-4

not a public audience, then you may not need a review phase. You can tailor thedevelopment phases to the type of report that you need. See "DeterminingDevelopment Phases" in Report Package Design Considerations.

Lets’s look at these development phases in a little more detail.

Author Phase

In the author phase, authors and approvers work with doclets to add content to areport package. Authors provide content, and approvers review and edit the content.

Benefits of the author phase include:

Content Management

Content management allows users to check doclets in and out of a central repository,ensuring that only one user at a time is updating a doclet. It also provides for versioncontrol. When a user checks in an updated version of a doclet, the previous version isautomatically stored. Previous versions can be easily accessed for comparison. Userscan store versions that they're still working on and can check versions in when they'reready for others to access them.

Flexible Workflow

Workflow enables doclet content to be developed collaboratively. An author canupdate the doclet, and an approver can review and edit the content. You can set upmultiple levels of approvals, and the number of approval levels can vary per doclet.For example, a doclet containing an introductory statement may not require anapproval, and a doclet containing revenue information may require multiple approvallevels.

Using workflow, users scheduled for later in the review process can take control of adoclet sooner. For example, if a doclet is assigned to an author, an approver or theowner of the report package can take action on the doclet without waiting for the docletauthor. This flexibility eliminates bottlenecks and speeds up content development.

Chapter 2Report Package Components

2-5

Process Reporting

Process reporting enables you to view the author phase status on two levels:

• Summary level—Provides statuses for the entire author phase, such as theoverall completion percentage of the author phase, a summary of the status of allthe doclets, and the due date and time remaining for the author phase.

• Doclet level—Provides the status for each individual doclet, the currentresponsibility, and whether the doclet is checked in or out. You can also tell at aglance the workflow level of the doclets, including the user assignments and thedue dates by user.

Review Phase

In the review phase, reviewers provide feedback, ask questions, and recommendchanges.

Benefits of the review phase include:

Multiple Review Cycles

In the review phase, multiple reviewers can review different versions of the report. Forexample, managers could review the first draft of the report, executives can review thesecond draft, and top management can review the third.

You can vary the review assignments by area. A user can be assigned to review theentire report, a section of the report, or a doclet.

Threaded Commentary

Reviewers provide feedback by commenting on different areas of the report. Thesecomments are threaded so other reviewers can participate in the discussion.Reviewers can provide attachments or links to their comments to provide supportingdetails. Reviewers can close comments after the outstanding issue is addressed.

Chapter 2Report Package Components

2-6

Note:

Comments persist across review cycles in context, so that reviewers can seehow comments are addressed in subsequent drafts.

Multiple Platforms

You can comment on reports in these ways:

• Desktop or mobile web browser

• Microsoft Office, through Oracle Smart View for Office

Process Reporting

Process reporting enables the report package owner to view the review phase statuson two levels:

• Summary level—Provides statuses for the entire review phase, such as theoverall completion percentage of the review phase, the number and percentage ofreviews completed, the number of open comments, and the due date and timeremaining for the review phase.

• Doclet level—Provides review status for each doclet, such as the reviewscompleted per doclet and the number of open and closed comments raised foreach doclet.

Sign Off Phase

The Sign Off phase enables you to finalize your report content and get sign off fromyour key stakeholders.

Benefits of the sign off phase include:

Chapter 2Report Package Components

2-7

Locked Content

In the sign off phase, you lock your report to prevent changes. The report signersreview the final report and either sign off or reject the report content. If the report isrejected, the report package owner can unlock and correct the report content. If thereport is signed off, the process is complete, and the report is ready for publication.

Multiple Platforms

You can provide sign off in these ways:

• Desktop or mobile web browser

• Microsoft Office, through Oracle Smart View for Office

Process Reporting

Report package owners can view a summary of the sign off phase. The summary caninclude completion percentage, number of sign offs and rejections, due date, and daysremaining, as well as who signed off and any sign off notes.

Chapter 2Report Package Components

2-8

3Learning About an Oracle EnterprisePerformance Reporting Cloud Application

This topic covers:

• What is an Enterprise Performance Reporting Cloud application?

• Reasons to create an application to bring data into the Cloud

• Understand how to use the sample application

• High level steps to create a custom application

• Broad concepts about working with dimensions & models

• Application, dimension, and data access security

See this video also Application Overview in Oracle Enterprise PerformanceReporting Cloud

What is an Oracle Enterprise Performance Reporting CloudApplication?

An application is a storage container for data that you want to centrally store in theCloud. It contains one or more models which are made up of a set of relateddimensional definitions and corresponding data. An application can have up to fivemodels.

3-1

Working with DataTo work with data in the Cloud, you need to set up an application, model, anddimensions and then load your data. Once that is done, you can access theapplication data using Oracle Smart View for Office’s Enterprise PerformanceReporting Cloud data source.

You can also work with Smart View to access data in an existing on-premiseEnterprise Performance Management or Business Intelligence product such asPlanning, or Essbase as well as other Cloud services that Smart View supports suchas Planning. This method does not require an Oracle Enterprise PerformanceReporting Cloud application to be set up.

Chapter 3Working with Data

3-2

Both methods of working with data allow you to perform interactive analysis and easilyrefresh updated data into a report package. See Learn About Smart View and Example: Work with Enterprise Performance Reporting data in Smart View.

Reasons to Create an ApplicationThere are two main reasons to create an application. The first is if you don’t have anexisting system that contains all the data you need to work with. By creating anapplication, you can centralize the data required for one or more report packages. Thisprovides additional analytic capabilities against the data used in a report packageincluding ad hoc analysis.

The second reason is that you may have all your data in an existing system but need asubset (or slimmer) model. For example, you might want to work with a subset of datain a Payroll system that’s currently in a very large and complex human resourcessystem. In both cases, an application allows you to work with exactly the data youwant in the Cloud.

Using the Sample or Custom ApplicationYou can have only one application per environment (for example, one in Test and onein Production) and have a choice between creating a sample or custom application.

Chapter 3Reasons to Create an Application

3-3

When you first get started, you can use the sample application to see a finishedapplication with its dimensional hierarchies in a model, and use Smart View to interactwith data in a doclet in a sample report package. Once you are familiar with thesample application functionality, you can create your custom application. See Workingwith the Sample Application and Creating a Custom Application.

Creating Your Custom ApplicationBefore you begin to create your custom application, determine what type of applicationyou need to create by knowing what data you need to work with, where that dataresides now, what dimensions you need to include, and the formatting necessary forload.

Using Oracle Enterprise Performance Reporting Cloud:

• Name the application

• Create dimensions and either add to a new model or include in an existing model

• Create or load members

• Deploy dimensions to the model

• Load data into the model

• Validate application works as expected through Smart View

• Apply security to the application, dimensions and data in the model

See Create a Custom Application for more information.

Artifact LockingTo prevent concurrent editing of application and model artifacts, simultaneousoperations on the same artifact are not permitted. This locking feature ensures theintegrity of data and the model. The lock is applied during either a bulk operation or adimension edit, and it is unlocked upon completion. If another user attempts to accessan artifact that has already been locked, an error message is displayed. For example,you cannot delete a model while another user is deploying that model.

Chapter 3Creating Your Custom Application

3-4

Application Locking and Unlocking

Application locking is applied during bulk type operations, such as the load or extractof either data or metadata, deployment of a model, or deletion of an application. Bulkoperations lock the application and all associated dimensions or artifacts.

If a Service Administrator needs to perform a bulk operation, such as deploying amodel, and other users have locked one or more dimensions, the ServiceAdministrator can override other users’ locks by using the Release All Locks option.

To release all locks on an application, on the Overview tab, select Actions, and thenRelease All Locks. All locks are removed.

Dimension Locking and Unlocking

Dimension locking is applied in the following situations:

• When a dimension is selected for editing.

• When a dimension is being edited during the member/dimension selections fordata grants. These locks are obtained at the dimension level and are based onwhich dimensions are in use at that moment.

• When a bulk operation is performed on a application, associated dimensions arelocked.

When a lock is applied, you see a lock icon next to the dimension name on theDimensions and Models tab or in the dimension title on the Overview tab. When youclose the edit dialog box, the lock is automatically removed.

You may need to unlock a dimension if a process fails before a dimension edit iscomplete.

To unlock the dimension, select Unlock from the drop-down menu next to the name ofthe dimension that is locked. The lock is removed.

Dimension BasicsHere’s some basic information about dimensions and dimension types:

There are seven standard dimension types:

Chapter 3Dimension Basics

3-5

• Account* (required)

• Time* (required)

• Currency

• Entity

• Scenario

• Year

• Generic

You can enable up to 20 dimensions per model.

• Each model must have one Account and one Time dimension

• For Currency, Entity, Scenario, and Year, you can have either zero or onedimension

• You are allowed up to 18 Generic dimensions.

When you create dimensions using the standard dimension types, you can createthem by using either predefined properties for that type or load dimension properties ofyour own.

See "Creating Dimensions" in Create a Custom Application for more details.

SecurityThere are different levels of security in an application. At the application level, yougrant users access to the application. At the dimension level, you can grant access tothe dimensions. Security on the data level is achieved through data grants that provideaccess to individual or the combinations/intersections of dimensions.

For more information, see Learn About Security, Grant Access, and Set Up DataGrants. See the following video as well on security Understanding Security.

Chapter 3Security

3-6

4Learning About Smart View

In this topic, you’ll learn how to use Oracle Smart View for Office to interact withOracle Enterprise Performance Reporting Cloud data and report packages.

What is Smart View?

Smart View uses a Microsoft Office interface designed for Oracle EnterprisePerformance Management System, Oracle Business Intelligence, and Oracle FusionFinancials products. When working with report packages in Smart View, you can:

• Author doclets using familiar Microsoft Office tools to access and work with datawithout having to download and work on them locally.

• Complete review and sign off tasks for report packages.

• Perform complex analyses on your data.

Working with Smart View in Excel

In Excel, Smart View allows you to perform ad hoc queries on Oracle EnterprisePerformance Reporting Cloud data and other EPM and BI data sources. You caneasily embed data points from ad hoc queries into your report narratives in OracleEnterprise Performance Reporting Cloud. The data points in your narratives arerefreshable, meaning the data will always be the latest.

Working with Smart View Word or PowerPoint

4-1

When you work with doclets in Word or PowerPoint, you can use Smart View toinclude data from Oracle Enterprise Performance Reporting Cloud data sources andother EPM System data sources, including on-premises and cloud data sources. Forexample, you can incorporate data from a profit and loss statement in Oracle EssbaseStudio and an income statement from a Planning source. The data points for the areasthat you copy remain in Word or PowerPoint, and you can refresh the doclet to see thelatest data values.

For more information about working with Smart View in Oracle Enterprise Performance

Reporting Cloud, see this video Using Smart View in Oracle EnterprisePerformance Reporting Cloud and these topics:

• Setting Up Enterprise Performance Reporting in Smart View

• Connecting to Enterprise Performance Reporting in Smart View

• Authoring Doclets in Smart View

• Using Performance Reporting Home

• Approving Doclets in Smart View

• Performing Reviews in Smart View

• Performing Sign Offs in Smart View

• Working with Distributions

• Example: Working with Enterprise Performance Reporting Data in Smart View

Chapter 4

4-2

5Learning About the Library

The library is the Oracle Enterprise Performance Reporting Cloud artifact repository.Use it to organize and manage content in a familiar, intuitive interface, which borrowsfrom well-known applications. Its interface and functionality borrows from existingdesktop and web-based file and document management systems. For example, uselibrary folders to organize and store artifacts such as report packages, applications,audit log files, graphic files, Microsoft documents, and so on. You can also createshortcuts to artifacts, and use system-generated personal folders such as Recent,Favorites, and My Library to organize content. You can also create your own folders.After creating the folders, you can grant other users access to them. Learn more about

the library from this video Learning About the Oracle Enterprise PerformanceReporting Cloud Library.

Users with the library administrator role can:

• Create folders and see all child folders and folder contents however, they cannotopen and view the contents of folders unless they have the appropriatepermissions.

• Create shortcuts in any folder where they have write permissions.

Figure 5-1 Example of the Library

A user with the service administrator role has the complete ability to perform any of theactions or tasks to any artifact or folder in the library. The service administrator cansee each users My Library folder and has unrestricted access to the service. However,

5-1

they cannot see other users Favorites or Recent folders since these only containshortcuts.

The library provides these benefits:

Migrating

You can migrate folders, report packages, Word documents, graphic files, andapplications between environments and within them. You can migrate artifacts usingthe export, download, and import functionality in the library or by using the FileTransfer Utility. See Migrate Artifacts and Use File Transfer Utility.

Auditing

An administrator of an artifact can run audit reports for their artifact. The serviceadministrator can run additional audit reports for the entire system. Additionalinformation on audits:

• Actions in the system are captured in a running system audit.

• You can extract audit entries for folders or artifacts to which you haveadministrator permissions.

• An extract file is created from the running system audit that falls within the timeframe that you entered in Create Audit File and is saved in the Audit Logs folder inthe library.

For more information on audits, see Using Audits.

Built-In Intelligence

The library is role-based, and a user is either shown content that they have been givenexplicit access to, or content that has been made available to them from the reportpackage workflow. For example, a doclet author cannot see a report package in thelibrary until the author phase has started. See Creating Artifacts in the Library.

Customizing and Inspecting

A user can customize their view of the library by Setting Default Views for ContentPane Folders and Artifacts. For example, set a default view preference for a folder orall folders and sort the contents of a folder. You can inspect or review a folder’sproperties. For example, as a service administrator, from the properties tab of theInspect dialog you can edit the artifact name, view the artifact type, the location of theartifact in the library or path, the description, and so on. You can assign access for anartifact so only a limited audience can see or open it. You can also review the historyand actions taken on an artifact. See Inspecting Folders and Artifacts.

Using the LibrarySelect one of the following to open the library:

• From the Welcome Panel on the Home page, select Open:

Chapter 5Using the Library

5-2

• On the Home page, select .

The library opens to the Recent folder by default. Example of the library UI:

Figure 5-2 Sample Library

Chapter 5Using the Library

5-3

Learning About the Navigation and Content PanesThe library's navigation pane contains a list of default, system-generated, and personalfolders. The content pane contains the contents of the folders in the navigation pane.Click and drag the vertical separator to adjust the windows.

The navigation pane’s user-created folders and system-generated personal foldershelp you stay organized.

• User-created folders; for example John Smith Report Packages.

• System-generated personal folders; Recent, Favorites, and My Library:

Note:

The menus and actions available for the following are role based.

RecentContains shortcuts to recently accessed content. The number of recent shortcutsretained is set in preferences, see the Library tab in Managing User Preferences. Youcan inspect shortcuts, which are read only, to view artifact properties. Refresh toupdate the contents. See Inspect. See the Using the Action Menus for moreinformation on how to access the action menus to select these options. Additionalrules for this folder are:

• Only the given user can see the shortcuts in this folder.

• The user cannot copy, move, or rename the shortcuts in this folder.

• The user can delete shortcuts in this folder.

• If the name of the artifact to which the Recent shortcut points to is changed, thename of the shortcut is also changed.

• If the source artifact is deleted, the recent shortcut is deleted.

• The ability of the given user to access the artifact that the Recent shortcut pointsto is governed by the user’s permissions on the base artifact, not the shortcut.

• The artifact properties shown in the Inspect dialog for a recent artifact are fromthe source artifact.

FavoritesContains shortcuts to artifacts marked as favorites. Includes the same optionsavailable as the Recent folder. Additional rules for this folder are:

• Only the given user can see the shortcuts in this folder.

• The user can rename and delete shortcuts in this folder, and add or change adescription.

• The user can move a sub-folder or shortcut contained in this folder only within theFavorites folder or its children.

• The user cannot copy or move artifacts to or from outside the Favorites folder, thisincludes the copy and move of shortcuts.

Chapter 5Learning About the Navigation and Content Panes

5-4

• The name of the favorite shortcut does not need to match the source artifact, andif the source artifacts name changes, the name of the shortcut contained in theFavorites does not change.

• If the source artifact is deleted, the favorite artifact is deleted.

• The artifact properties shown in the Inspect dialog for a Favorites artifact (shortcutor folder) are from the favorites artifact.

My LibraryPersonal artifacts such as Excel spreadsheets, Word documents, shortcuts, andfolders. Includes the same options as the Recent and Favorites folders, plus addsauditing. You cannot give another user access to the content in My Library. The audittype artifact file is created in the Audit Logs folder and audit is added to the artifactname, for example Audit — reportpackageRP1. Additional rules for this folderare:

• Only the service administrator or given user can see the artifacts in this folder.

• You can't create report packages in the My Library folder, or move or copy reportpackages to it. However, you can use shortcuts to report packages in the MyLibrary folder.

• Other artifacts can be copied or moved into or out-of this folder.

System-generated folders; Audit Logs, Report Packages, Application, Fonts, DataSources, and Reports:

• Audit Logs—Contain system and artifact type audit files created from the systemlevel or artifact.

• Report Package—Contain report packages that reside elsewhere in the folders ofthe library, where they are created.

• Application—Contain application that has been created.

• Fonts—Contain fonts that can be used for artifacts.

• Data Sources—Contain the data source connections created for ManagementReporting reports. See Designing Reports in the Designing with ManagementReporting for Oracle Enterprise Performance Reporting Cloud guide.

• Reports—Contain reports that reside elsewhere in the folders of the library, wherethey are created.

• Disclosure Management—Contain Disclosure Management reports that resideelsewhere in the folders of the library, where they are created.

Using Locator LinksUse the locator link at the top of the content area to keep track of folder and artifactlocations in the library. Locator links especially helps when you are deep in a directory.Use the link to click back to previous directory levels. Use the link to click back to aprevious level in the library structure.

Chapter 5Using Locator Links

5-5

Figure 5-3 Locator Links in Content Pane

Using the Action MenusUse the Actions menu to act on library artifacts:

• Use the Actions menu at the top of the navigation paneto take action on the folders in the navigation pane. The actions that you can takevary according to folder to your access permissions. Viewers, for example, cannotrun Audits. For example, you can Inspect, Audit, and Refresh system-generatedfolders. You can take any action on folders that you have created.

• Use the Actions menu at the top of the content area toact on one or more artifacts in the content area. For example, you can use theActions menu to edit the properties of a report package or select several folders tomove or copy to another location.

Making a copy of an existing Report PackageYou can make a copy of an existing report package and use that as the basis for thenext reporting cycle. The copy function makes a complete copy of the report packagedefinition. This includes all of the report package properties, all of the doclets, all of theuser assignments, and all of the variables. The doclets contain the last checked inversion of the doclet file(s). The copy does not include any of the details related to thedevelopment of the source report package. The copy will not include any of the history,prior versions, review instances, or sign off instances from the source report package.All that is required is to update the dates and check the assignments.

To make a copy of the report package:

1. From the folder in the Library where the original report package is located, selectthe report package you want to copy but do not open it.

2. Select next to the report package to be copied and then Copy.

3. Select an existing folder or create a new one using the for where you wouldlike to place the copied report package.

Chapter 5Using the Action Menus

5-6

Note:

If copying to an existing folder, you must have write-access to the folderwhere you are placing the copied report package.

4. Select OK from dialog displayed.

Note:

This topic also applies to other artifacts in the library you have access to,for example reports.

Moving a Report PackageYou can relocate a report package to another location.

To move a report package:

1. From the folder in the Library where the original report package is located, selectthe report package you want to move but do not open it.

2. Select next to the report package to be moved and then Move.

3. Select an existing folder or create a new one using the for where you wouldlike to move the report package.

Note:

When moving to an existing folder, you must have write-access to thefolder where the report package is being moved to.

4. Select OK from dialog displayed.

Note:

This topic also applies to other artifacts in the library you have access to,for example reports.

Using the Create MenusThe Create menus allow users with the appropriate roles to create the following:

• Use the Create icon at the top of the navigation paneto create a folder to store artifacts.

Chapter 5Moving a Report Package

5-7

• Use the Create icon at the top of the content pane tocreate artifacts. For example, create folders and report packages and upload filesand system audit files.

Note:

When selecting the option to create report packages, the Create ReportPackage wizard is displayed. See Create Report Packages.

Accessing other Users LibrariesSystem and library administrators can search for and retrieve the contents of anotheruser’s system-generated personal folders or user-generated folder, for example a MyLibrary folder. These permissions enable service administrators to view and retrieve afile from another user who isn’t available. For example, if someone is on vacation, thereport package production workflow can continue.

The service administrators can search a user’s library by selecting the select user iconfrom the User Libraries area of the navigation pane and entering John Smith’s name inthe search field for John Smith’s library and to retrieve the missing file required tocomplete the report package in John Smith’s personal My Library folder.

Chapter 5Accessing other Users Libraries

5-8

For information on granting access to library artifacts, see this video GrantingAccess to Library Artifacts.

Setting Default Views for Content Pane Folders and ArtifactsTo set a default view for a folder or all folders and artifacts listed in the content area of

the library select and clear available column names by selecting the Actions menuand then the View menu. See Setting Default Views for Content Pane Folders andArtifacts. For example, in the figure below Favorite, Type, and Modified On arechecked from the View menu, and the respective columns are displayed in the Contentarea of the library.

Note:

The list of column names that are displayed for the View menu aredetermined by artifact, folder type, and a user’s privilege.

Figure 5-4 View Menu

Sorting the Contents of a Folder

You can sort the contents of a folder from the header titles in tables by hovering your

cursor in the header title areas and selecting sort ascending or descending icons.

Using AuditsAudits are stored in the system-generated Audit Logs folder. It contains system-generated audits for the entire system and audit reports that were run on specificartifacts. Audit-type extracts that can be run on library artifacts and folders by a service

Chapter 5Setting Default Views for Content Pane Folders and Artifacts

5-9

administrator. An audit extract allows you to view who made changes to an artifact orfolder, when it was changed, and what was changed.

Considerations and actions for audits:

• Actions in the system are captured in a running system audit.

• Users can extract audit entries for folders or artifacts to which they haveadministrator permissions.

• Only audit log type artifacts are allowed in this folder.

• All users can view this folder, but are only allowed to view audit log artifacts thatthey created.

• Users with the Service Administrator role can view any audit log artifact.

• Users can’t copy or move any artifacts into or out of this folder.

• Users can download an audit log artifact and delete an audit log artifact.

For more information, see Perform an Audit.

Searching the LibraryTo search for a folder or artifact in the library enter search text in the Search Text box

at the top of the content pane and select the search icon, see Searching theLibrary. Search results are displayed in the content area. By default, the search isperformed in the current folder. Select Search Library to expand your search toinclude the entire library.

Figure 5-5 Search Result Options

Creating Artifacts in the LibraryThe library is adaptive and dynamically enforces specific folder rules and actionsavailable on types of artifacts. The actions that are available in the library are location-specific. That is, the actions available to you depend on where in the library you are.

Chapter 5Searching the Library

5-10

For example, you can create a personal folder to organize artifacts in the library. Click

in the navigation pane or content pane. If you create a folder in the navigationarea, the folder is added after the system generated folders but not within. In thecontent area, you can create a personal folder within any of the following folders thathave been selected in the navigation pane to help with organization:

• Favorites

• My Library

• Application

• Any personal folder that you created or can access

Depending on the folder type selected in the navigation pane, you might have moreoptions. For example, if the My Library folder is selected, you can inspect and audit.

Note:

For localized versions of Oracle Enterprise Performance Reporting Cloud,you should not create custom folders spelled the same as a translatedsystem folder. This is due to certain implications when opening the samelocalized version of Oracle Enterprise Performance Reporting Cloud inEnglish.

Organizing and Maintaining the LibraryFrom the navigation pane, here are some of the actions available to organize and

maintain the library using the Action icon to organize ormaintain the library.

Note:

Some of the following actions might not apply to system-generated personalfolders or system personal folders.

• Inspect—Review and change properties, access, view history. See InspectingFolders and Artifacts for more information.

• Move—Relocate a folder and the contents to a new location.

• Audit—Extract results that can be used to investigate a folder.

• Refresh—Update a folder to view the latest changes to the contents.

• Export—Makes a zip file of a folder and it’s contents and adds it to a location ofyour choosing.

From the content pane, depending on the folder type or artifact selected and securityapplied to the location (folder) or artifact, here are some of the actions available to

Chapter 5Organizing and Maintaining the Library

5-11

organize and maintain the library using one of the Action or icons:

• Download—Move or copy a folder or artifact to a different location.

• Inspect—Review or change; properties and access, and view history for a artifactor folder. See Inspecting Folders and Artifacts .

• Delete Favorites Shortcut—Removes shortcut from Favorites folder.

• Audit—Extract results that can be used to investigate a folder.

• Add to Favorites—Allows an artifact to be displayed in the system-generatedFavorites folder.

• Export—Makes a ZIP file of a folder and its contents and saves it where youchoose.

• Import—Imports a file from library or locally.

Note:

When an artifact is selected from the content pane of the library, itautomatically opens the artifact in its native environment. For example, whenyou select a report package it opens in the report center. You are promptedto open or save third-party documents, such as XLSX files.

Taking Actions for Report Packages, Reports, andApplications

Actions that you can take on report packages and applications vary.

Report Package

When you select a report package from the Report Packages folder of the library, itopens in the report center. The actions that you can take depends on your role and thestatus of the report package. See Create Report Packages. Available actions for reportpackages from the content pane:

• Edit—Edit report package in the report center.

• Inspect—View and change; properties and view access, and view the history.

• Audit—Extract audit entries for a report package. See Perform an Audit.

• Export—Makes a ZIP file of a folder and its contents and saves it where youchoose. See Migrate Artifacts.

• View in Library Folder —See the report package in its library location.

Note:

Available only when Report Packages folder is selected.

Chapter 5Taking Actions for Report Packages, Reports, and Applications

5-12

Reports

When you select a report from the Reports folder of the library, it opens the report inManagement Reporting. The actions that you can take depends on your role and thestatus of the report. Some of the available actions for reports from the content pane:

• Open—Open report in Management Reporting.

• Edit—Edit report in Management Reporting.

• Inspect—View and change; properties and view access, and view the history.

• Copy—Make a copy of a report.

• Move—Move a report to a different folder you have access to.

• Audit—Extract audit entries for a report . See Perform an Audit.

• Export—Makes a ZIP file of a folder and its contents and saves it where youchoose. See Migrate Artifacts.

• View in Library Folder —See the report in its library folder location.

Note:

Available only when Reports folder is selected.

• Change Data Source—Select a different source of data for a report.

Application

When you select the application from the Application folder of the library, it opens inthe application center. The actions that you can take on the application depend onyour role and permissions. Some actions that you can take from the content pane:

• Inspect—View and change; properties and view access, and view history from theInspect dialog.

• Audit—Extract audit entries for a report package. See Perform an Audit.

• Export—Makes a ZIP file of a folder and its contents and saves it where youchoose, see Migrate Artifacts. .

Rules for this folder are as follows:

• Only the application artifact resides in this folder. Other child folders and artifactsare also allowed.

• All system users can see the folder and have read access. Additional access to itscontent is through access security.

• Service administrators, application administrator, and library administrator(specifically for creating child folders) have write access to this folder.

For more information on applications and tasks, see Learn About an EnterprisePerformance Reporting Application.

Chapter 5Taking Actions for Report Packages, Reports, and Applications

5-13

Migrating Folders and ArtifactsFrom the navigation or content pane, depending on the folder type or artifact selectedand security applied to the location (folder) or artifact, you can do the following using

one of the Action or icons:

• Export—Creates a ZIP file of a folder and its contents and you are prompted toselect where to export the ZIP file, see Migrating Folders and Artifacts after theexport is complete.

– Select a folder to export, a Select Folder for Export File is displayed.

– Select a folder for export. You will receive a notification when the export iscomplete.

– A ZIP file is created in the folder you selected for export and the filename isprefixed with Export —.

Note:

To perform a successful folder export, the user must have administeraccess to all artifacts in the folder.

• Import—used as part of the migration process to import a file either from the libraryor locally, see Migrating Folders and Artifacts for more information on how tocomplete this task from the library.

Inspecting Folders and ArtifactsThe inspect dialog box has Properties, Access, and History tabs:

• Properties— Maintain properties as well as view other details for folders andartifacts.

• Access—Administer security, enable permissions from a parent folder, search forusers and groups to assign to this folder or artifact and provide administrative,write, and view access. You can also remove user access to folders and artifacts.

• History—Review the history of artifacts and folders.

Chapter 5Migrating Folders and Artifacts

5-14

Figure 5-6 Sample Inspect Dialog Box

You can access Inspect from the navigation and content panes for folders andartifacts. From the navigation pane, you can review and inspect the properties tab forthe following:

• System-generated personal folders:

– Recent

– Favorites

– My Library

• System-generated folders:

– Audit Logs

– Report Packages

– Application

Note:

For the Application folder, you can also review the Access andHistory tabs.

In Properties ,you can edit names and descriptions of personal folders andfolders that you created. You can also view properties related to a folder or artifact.

To assign or view access permissions for a folder or artifact and manage security for a

folder or artifact, use the Access tab . The Access tab is available only for foldersand artifacts that you have been given permission. For more information on theAccess tab, see Granting Access.

In History , you can view the history for a folder or an artifact. If you selectedinspect for a folder from either the navigation or content panes, the history tab displaysthe results for the folder. Only administrators see history for all of the artifacts in afolder.

Chapter 5Inspecting Folders and Artifacts

5-15

6Managing User Preferences

Manage your user badge photo, notifications, and other display items by modifyingyour personal preferences.

As a user, most of the standard preferences are inherited from the browser or youroperating system and set automatically. The following optional items on the Generaltab should be confirmed when you first start to use the service:

• My Photo—Photograph of user

• Locale—Language and Time Zone

• Show Confirmation Messages—Turn on or off system messages to the user

To modify settings, select Preferences from the menu beside your user name fromthe Home screen. Select one of the Preferences tabs, located on the left side, to viewand modify settings. If you decide not to keep the changes, see Resetting Preferencesbelow.

Preferences Dialog TabsThe following tabs are available from the Preferences dialog box:

6-1

• Using the General Tab

• Using the Notification Tab

• Using the Formatting Tab

• Using the Library Tab

• Using the Appearance Tab

Using the General TabUse the General tab to manage the main preferences such as the photo you want toassociate with a user, the language you want to use, and whether or not to displaysystem conformation messages:

• Under My Photo, select an image file to upload as a photo.

Select the Choose File button as shown in the figure below to select and upload aphoto.

An example of how this photo is used is to display beside a workflow task in areport package.

Use the Zoom control slide to size the image. Then, drag the highlighted squarearea to crop the image for best display or use the

Chapter 6Using the General Tab

6-2

buttons. The supported formats forphotos are: jpg, .png, and .gif.

• Under Locale, the default language for your browser is selected. Text, buttons,and messages are displayed in the selected language. You can select anotherlanguage, if desired. If you do so, you must sign out and sign in again for thelanguage setting to take effect. Select a time zone that you want to use fordisplaying time. The current date and time are displayed.

Chapter 6Using the General Tab

6-3

Note:

If you do not set your language in the Preferences - General tab, thenthe language displayed for the user interface is derived from yourBrowser settings. For email notifications, the default language is English.If you would like to receive notifications in a language other than English,select the specific language from the Language drop down menu (notDefault - "Language") from the Preferences - General tab. For example,if you want Spanish to be your default language, select Spanish from theLanguage drop down menu.

The time zone you select can be different than the time zone you are in.

• Under Show Confirmation Messages, if you have turned off the feature todisplay system confirmation messages, you can turn system confirmationmessages on again by selecting Show Messages.

Using the Notification TabAfter the author phase of the report package is started, notifications are sent to adviseusers that are impacted of any tasks to which you have been assigned, such ascreating a doclet, reviewing sections, signing off on a sign off instance, or approving areport package. You can also participate in email discussions related to the reportpackage with other users.

Note:

Although you have set the Date and Time format in the Preferences –Formatting tab, notifications that you receive may have a different format dueto internal architectural constraints.

An email notification channel is automatically assigned to the email addressassociated with your user profile set by your Identity Domain Administrator. You canadd three additional email addresses. You can manage which email addresses receivenotifications by selecting or deselecting the Email check box under Message Types.

Chapter 6Using the Notification Tab

6-4

Using the Formatting TabYou can define the display formats of numbers, dates, and times for your reportpackages with the settings on this tab as well as the unit of measurement formanagement reports for page size, margins, and indents.

Chapter 6Using the Formatting Tab

6-5

Use the Format Locale menu to select default values for numbers, dates, and times foryour location. For example, the "English (United States)" locale formats the thousandsseparator with a comma, the decimal separator with a period, and the date with thethree-letter abbreviation for month, followed by the day and year.

You can either change these settings manually, or you can use the Format Localemenu to select the default values for a different locale. For example, the "Spanish(Spain)" locale formats the thousands separator with a period, the decimal with acomma, and the date with the day, month, and year.

The following commonly used formats are available for thousands and decimalsseparators:

• Default is the value provided from your operating system.

• Comma (for example, 100,000 or 95,91).

• Period (for example, 100.000 or 95.91).

• Space (for example, 100 000 or 95 91).

• Apostrophe (for example, 100'000 or 95'91).

Similarly, for Date and Time, select the format that you want to use for displaypurposes.

Note:

You can customize your time formats, using the Customize option whichpresents a text box to enter a custom sequence for your unique requirementsusing standard time formats.

Date formats:

• M—Month

• d—Day

• y—Year

• E—Day of the Week

Time formats:

• a—AM/PM

• h—Hour

• m—Minute

• s—Second

• z—Timezone

Using the Library TabYou can set the maximum number of artifacts that you want to display on your Recentfolder in the library. For example, if you select ten as in the figure below, the last tenartifacts you accessed are listed in the Recent folder.

Chapter 6Using the Library Tab

6-6

Using the Appearance TabIf the Service Administrator has allowed users to override the background and logoimages as explained in Setting Appearance, then users can further customize theirexperience.

Default values are displayed in each user’s Appearance tab, however each user mayoverwrite the default values with their own preferences if so allowed by the ServiceAdministrator.

Enter URLs for logo and background as shown in the example below. See SettingAppearance for an example of how and where this is displayed.

Chapter 6Using the Appearance Tab

6-7

Note:

Both the Oracle logo and background image can be customized. Any logoimage smaller than 125px wide and 25px high can fit without scaling. Forlarge image logos, Oracle recommends you maintain a 5:1 ratio so the imageis scaled without distortion.

The default size for the background image is 1024x768. You can use a largerbackground image, however the image is scaled to fit the resolution settingof your display and the image is centered horizontally.

Resetting Preferences

To restore your preferences to the default values, select and use one ofthe following options:

• Reset name of tab, in this example Reset General to undo any modifications thatwere applied and restore default values on the Preferences tab.

• Reset All Tabs to Default option from any Preferences tab to reset everypreference value on all tabs of the Preference dialog box to the original defaultvalues from initial use.

Caution:

All changes, whether applied or not, are removed.

Chapter 6Resetting Preferences

6-8

Chapter 6Resetting Preferences

6-9

7Uploading Additional Fonts

Oracle recommends that as an initial startup task, the service administrator uploadsthe TrueType fonts that your company uses to produce reports. This will ensure themost accurate rendering of the documents when viewing on the web.

Without these uploaded fonts, Enterprise Performance Reporting Cloud Service usesa font mapping utility that attempts to properly render the report on the web. However,this mapping may introduce variances in the report layout when displayed on the web.Therefore, we highly recommend that you upload your TrueType fonts when you setup the service.

Note:

The system is not redefining or changing the fonts leveraged in the report,the font mapping only applies to the document rendered on the web.

The service administrator can upload individual font files or zipped files containingmultiple TrueType fonts to the Fonts folder in the library. You can also organize yourfont files by creating sub-folders in the Fonts directory.

The font file must be a TrueType font and cannot already exist in the font folderstructure. If you do upload a duplicate font, you will receive an error messageindicating the duplicate (or invalid) font file. If you uploaded multiple fonts in a zip file,all other valid files will be loaded.

Note:

You can migrate font files like any other artifact from one environment toanother or within the same environment. You can migrate using the export,download, and import functionality in the library. See Migrate Artifacts.

To upload additional font files:

1. Locate your additional TrueType fonts. If more than one is to be uploaded, createa zip file.

2. From the Home Page, select Library.

7-1

3. Select the Fonts folder.

4. From Create next to the Search icon, select Upload File.

5. Click Choose File to navigate to the TrueType fonts that you want to upload, andthen click OK.

Note:

Be aware that it may take some time to perform the upload depending onthe size of the font file.

The zip file is unzipped, and all the uploaded fonts are automatically extracted tothe Fonts folder. These fonts are now available when displaying your documents.

Chapter 7

7-2

Any custom fonts uploaded also appear in the font list for management reports.See the Designing With Management Reporting and Working with ManagementReporting Guides.

Note:

For PowerPoint report package types, custom fonts take effect after thenext scheduled daily maintenance. See Setting Service MaintenanceTime.

Chapter 7

7-3

8Installing Samples

Oracle Enterprise Performance Reporting Cloud provides samples to help you learnhow to use report packages, applications, and management reports. The samples letyou view and experiment with, report packages, management reports, a DisclosureManagement report and an application that includes a model, seven dimensions anddata. You can use:

• Sample report packages , with MS Word, PowerPoint and PDF report packagetypes, can help users become familiar with the report package functionality andcontent such as the report center, doclets, phases, embedded content andvariables, where applicable. For all three sample report packages types, phasesand user assignments have not been enabled and defined, however afterimporting the sample files, a report administrator can enable phases, define datesand assign users. To learn more how to use the sample report package, see Working with the Sample Report Package and watch the following video: GettingStarted with Oracle Enterprise Performance Reporting Cloud Sample ReportPackages.

• Sample management reports can help users become familiar with thefunctionality of Management Reporting. For the snapshot reports included with thesamples, you don’t need to use an application in order to view the samplemanagement report, but for the non-snapshot reports, you need the OracleEnterprise Performance Reporting Cloud sample application deployed to edit thereport and refresh data.

• Sample Disclosure Management report and taxonomy provide an abbreviatedUS SEC 10Q report with existing XBRL mappings to help users become familiarwith the Disclosure Management functionality. The corresponding sampletaxonomy needs to be loaded to the server using the Disclosure Managementtaxonomy manager.

• A sample application can be generated and is populated with one model, sevendimensions, and corresponding data. The sample application lets you examine thesample dimension hierarchies and use an application before deleting it and settingup your custom application. The sample application can be queried inManagement Reporting andOracle Smart View for Office. See Working with theSample Application for more information.

• Sample dimension load files show you the correct layout of a dimension load fileand lets you experiment with loading dimensions to a model. These seven filescontain the same dimension members as the sample application. See Workingwith the Sample Application and Load and Extract Dimension Members for moreinformation.

• A sample data load file contains the data that is loaded to the sample applicationand model and lets you see a layout of a data load file. See Working with theSample Application and Load, Extract, and Clear Data for more information.

8-1

Note:

The sample report packages, management reports and DisclosureManagement report need to be imported by a user with a report administratorrole.

To work with sample files, a service administrator must install the samples from theUser Menu:

To install samples:

From the User menu on the Home Page, select Downloads, and then select GetSample Content.

A Samples folder is created in the library containing the following ZIP files:

• Sample Management Reports.zip used for importing sample management report filesand management report snapshots.

• Sample Report Package- MS Word.zip used for importing to create the sample reportpackage using the MS Word Report file format.

• Sample Report Package- PPT.zip used for importing to create the sample reportpackage using the PowerPoint Report file format.

• Sample Report Package - PDF.zip used for importing to create the sample reportpackage using the PDF Report file format.

• Sample DM 10Q Report.zip used for importing to create a sample DisclosureManagement report

• Sample DM 10Q Taxonomy.zip is a sample taxonomy file used in conjunction with thesample Disclosure Management report

• Sample application data file.zip can be downloaded and unzipped on your localmachine.

• Sample application dim load files.zip can be downloaded and unzipped on yourlocal machine.

Note:

The Sample Application is generated directly from the Application icon and isnot part of the sample files shown here.

Chapter 8

8-2

Accessing the Sample Report Package

To access the sample report package:

1. Click to create a library folder in which to store the sample report package:

For example, SampleRP:

2. In the new folder, under Actions, select Import.

Chapter 8

8-3

3. In Import, click Browse to select the appropriate .zip file in the Samples folder inthe library (Sample Report Package- MS Word.zip, Sample Report Package-PDF.zip, or Sample Report Package- PPT.zip), and then choose Current Folderto put the Sample Report Package in the folder that you created.

4. A message is displayed saying that an import is running in the background. Toverify a successful import, go to Messages or refresh the SampleRP folder in thelibrary and locate the Sample Report Package.

Chapter 8

8-4

5. Use the Inspect option in the library to assign access to the sample reportpackage to the users who need to learn to create and work with report packages.

Note:

Before you can assign access to the sample report package, the IdentityDomain Administrator must create users and assign roles.

See Work with the Sample Report Package. for more information.

Accessing the Sample Management Reports

To access the sample management reports:

1. Click the to create a library folder in which to store the sample managementreports:

For example, SampleMP:

2. In the new folder, under Actions, select Import.

3. In Import, click Browse to select the appropriate .zip file in the Samples folder inthe library (Sample Management Reports.zip), and then choose Current Folder toput the Sample Management Reports in the folder that you created.

4. A message is displayed saying that an import is running in the background. Toverify a successful import, go to Messages or refresh the SampleMP folder in thelibrary and locate the Sample Management Report files.

5. Use the Inspect option in the library to assign access to the sample managementreports to the users who need to learn to create and work with managementreports.

Note:

Before you can assign access to the sample management reports, theIdentity Domain Administrator must create users and assign roles.

See the Designing With Management Reporting Guide and Working withManagement Reporting Guide for more information.

Chapter 8

8-5

Access the Sample Disclosure Management Files

This topic provides instructions for deploying the Oracle Enterprise PerformanceReporting Cloud Disclosure Management (DM) Sample 10Q report and correspondingtaxonomy. Two sample files are included:

• Sample DM 10Q Report.zip – Export file containing the DM Sample 10Q report,which needs to be imported.

• Sample DM 10Q Taxonomy..zip – XBRL taxonomy ZIP file, which needs to beloaded in the DM Taxonomy Manager.

To access the sample DM files:

1. In the Oracle Enterprise Performance Management Cloud web, navigate to theLibrary, select the Disclosure Management folder and in the Actions gear menu,select Import.

2. In the Import dialog, select Local and browse to your file system location of the"Vision 10Q Sample.zip" file. Click OK to begin the import.

Chapter 8

8-6

3. After receiving the Information dialog, click OK.

4. Perform a Refresh in the left panel to see the Samples folder appear. The Vision10Q report will appear in the Samples and Disclosure Management folders.

Chapter 8

8-7

Open the DM Report in Word and Load the Taxonomy

1. Ensure that the EPRCS and EPRCS DM Smart View extensions are installed, formore information, see Installing Disclosure Management:

2. In MS Office Word, via Smart View, log into your EPRCS instance.

3. In the Library, navigate to the Vision 10Q Sample and double click to open it.

4. In the DM Explorer, double click on the Vision 10Q Sample.docx top node toopen the report.

Chapter 8

8-8

5. Open the Taxonomy Manager, click on the + sign to add a taxonomy:

6. Browse to your file system location of the Sample DM 10Q Taxonomy.zip file andselect it.

7. Manually enter the following:

• Entry Point: visi-20170630.xsd

• Folder Name: Vision

• Taxonomy Name: visi-20170630

Chapter 8

8-9

Click Save, then close the Taxonomy Manager.

Accessing the Sample Dimension Load Files

To access the sample dimension load files:

1. Select Sample application dim load files.zip in the library. Thenunder Actions, select Download, and then save the ZIP file to your local drive. Or,you can open the zip file and then unzip to your local file system.

2. Unzip sample application dim load files.zip and save the files to yourlocal drive. These seven dimension load files populate the sample application. Youcan either use these to see the correct format since the format varies bydimension type or experiment by adding a dimension.

Chapter 8

8-10

3. To use these files as dimension load files, access the Dimension and Models tabin the Application icon. See Load and Extract Dimension Members for moreinformation.

4. If you want other users to have access to these files, you can import them into thelibrary and assign access to the sample application to the users who need to learnmore about working with an application by using the Access option in theApplication icon. See Grant Access for more information.

Note:

Before you can grant access to the dimension load files, the IdentityDomain Administrator must create users and assign roles.

Working with the Sample Application Data File

To work with the sample application data file:

1. Select Sample application data file.zip in the library, and then underActions, select Download . Save the ZIP to your local drive. Or, you can open thezip file and then unzip to your local file system:

2. If you have already generated a sample application, then this data is reflected aspart of that application.

From the Application icon, use the Load Data option on the Dimension andModel tab to see how to format a data load file or to experiment with thedata_export.txt. See Load, Extract, and Clear Data for more information.

3. If you want other users to access these files, you can import the files into thelibrary and use the Access option from the Application icon to assign access tothe sample application. See Grant Access for more information.

Chapter 8

8-11

Note:

The Identity Domain Administrator must create users and assign rolesbefore you can grant access to the sample application.

Chapter 8

8-12

9Working with the Sample Report Package

Use report packages to create reports quickly and easily. Oracle EnterprisePerformance Reporting Cloud includes three sample report packages (a Word-basedsample report package, a PowerPoint-based sample report package and a PDF-basedsample report package) to help you learn to use the product. Use the sample reportpackages to get familiar with report package functionality by performing these tasks:

• Navigate to the report center to learn about doclets and sections.

• Edit the report package to enable development phases, set timelines, and assignusers.

• Assign authors to doclets.

• Edit the style sample file to see how it affects the look and feel of the report.

• Work the report package through the three phases of development, from startingthe author phase to signing off on the report package.

Note:

An administrator must extract the sample report package and assign accessto you before you can view it. See Installing Samples.

This topic covers:

• Opening the Report Package

• Working with the Report Center

• Editing Report Packages

• Working with the Style Sample Document

• Working with Development Phases

Opening the Report PackageTo open the sample report package:

1. From the Home page, perform an action:

• Click and navigate to the folder in which the administrator extractedthe report package.

• Click to view the report packages that you have access to.

9-1

2. Click the name of one of the sample report packages. By default, they are SampleReport Package — MS Word ,Sample Report Package PPT and SampleReport Package — PDF.

For more information, see Welcome to Oracle Enterprise Performance ReportingCloud.

Working with the Report CenterWhen you click the name of the report package, the report opens in the report center.The report center enables report package owners to manage the report packagethrough all the phases of development.

Let’s look at some of the areas in the report center:

Doclets

Report packages are divided into subcomponents called doclets. The sample reportpackage contains seven doclets, one supplemental doclet, and two reference docletsfor you to work with:

• Cover page

• Table of contents

• Finance — Revenue report

• Finance — Consol Balancesheet

• Finance — Notes

• Profit by Segment Template (supplemental doclet)

• Metrics — Units

• Metrics — Backlog and delivery

• Vision Statements (Excel reference doclet)

• Vision Management Reports (Management Reporting reference doclet)

Chapter 9Working with the Report Center

9-2

Sections

Sections group and organize doclets. The sample report package contains twosections for you to work with:

• Finance

• Metrics

Toolbar

The toolbar provides these functions:

• Click to access the help center

• Click to act on the entire report package or a selected group ofdoclets or sections.

• Click to close the report center and return to the home screen.

Add Doclets and SectionsClick

and to add additional doclets and sections. See "Adding andOrganizing Report Package Content" in Create Report Packages

See "Navigating the Report Center" in Manage Report Packages.

Editing Report PackagesWhen you first access the sample report package, no development phases areenabled and no users are assigned. Edit the report package by clicking

, and then selecting Edit Report Package Properties to open theedit wizard. The edit wizard contains panels that enable you to edit the report packageproperties, enable development phases, and assign access. Let’s look at each panel:

Editing Report Package Properties

Chapter 9Editing Report Packages

9-3

In Enter Properties, you can edit the name of the sample report package and changeits location in the library. You can also upload a new style sample document. See Working with the Style Sample Document.

When you have finished editing the properties, click to continue.

Enabling Development Phases

Oracle Enterprise Performance Reporting Cloud provides three phases for developingreport packages:

AuthorCollaborate to develop the report content and supporting details.

ReviewGather comments on multiple draft versions and to revise the report content.

Sign OffLock report content and gather sign offs from key constituents.

To enable a phase, click the check mark in the corner of the phase:

. When you enable a phase, thephase tile changes color and the screen updates with the phase timeline.

Chapter 9Editing Report Packages

9-4

Click to select the start and end dates for the phases. You can also include docletapprovals in the author phase and additional review cycles in the review phase. See"Creating the Report Package Structure" in Create Report Packages.

After you enable each phase and set the timelines, click to continue.

Note:

You do not need to assign authors to all doclets (for example, the reportpackage owner can author doclet content). If you enable the Author phaseon the report package level, you can specify individual doclets that do notparticipate in the author phase by selecting next to the doclet, then EditDoclet Properties, and then selecting Exclude from Author Phase.

Assigning Users

Use the Assign Users screen to grant permissions to report package owners,reviewers, signers, and viewers.

To grant permission to a user:

Chapter 9Editing Report Packages

9-5

1. Select the responsibility that you want to grant to a user:

• Owners can modify the report package structure and properties, execute thephase processes, and assign users.

• Reviewers can review all or part of the report package and provide feedbackon potential modifications to the content.

• Signers can provide the final sign off for the report package so that it can bepublished.

• Viewers can view all or part of the report package but cannot makemodifications.

Note:

If you enabled the sign off phase, you must select at least one signerbefore you can close the edit wizard.

2. Click to open the Select User dialog box.

3. Perform these actions:

a. In the Search Text field, enter all or part of the name of the user or group that

you want to assign access to, and then click .

b. Select the name in the search result, and then click to close theSelect User dialog box.

After you finish assigning users, click to save your changes, close thewizard, and return to the report center.

Note:

When you return to the report center, an error message says that there aredoclets that do not have authors assigned to them. See Editing ReportPackages

Assigning Authors and Approvers to Doclets

You use the Edit Report Package wizard to assign users (owners, reviewers, signers,and viewers) at the report package level. However, doclet authors and approvers areoptionally assigned at the doclet level. Therefore, you assign authors and approversdirectly from the report center.

To assign authors and approvers to doclets:

1. Select next to the doclet that you want to assign an author to, and then selectEdit Doclet Properties.

Chapter 9Editing Report Packages

9-6

2. In Doclet Properties, edit the name and description if desired, and then select thepermission that you want to grant.

Tip:

If the Approvers permission is not displayed, you didn’t enable docletapproval for the report package. Close the Doclet Properties screen andedit the report package properties to enable doclet approval. See"Adding Doclets" in Create Report Packages.

3. Click to open Select User.

4. Perform these actions:

a. In the Search text by, enter all or part of the name of the user or group that

you want to assign access to, and then click .

b. Select the name in the search result, and then click to close SelectUser.

5. When you have finished assigning authors and approvers to the doclet, click

to save the doclet edits and return to the report center.

6. Repeat steps 1–5 to continue assigning authors to any additional desired doclets.

After you finish assigning authors to your doclets, the error messages are no longerdisplayed.

Chapter 9Editing Report Packages

9-7

Working with the Style Sample DocumentThe report package style sample document contains the page attributes (for Word-based report packages) or slide masters and layouts (for PowerPoint-based reportpackages) for the report. When individual doclets are uploaded to the report package,the style sample is applied to each of them so that the final report is uniform andconsistent. We will work with the Word-based style sample document in this topic.

To get an idea of the style sample functionality, click the Preview tab on the leftside of the report center to preview the entire report. You can also preview anindividual doclet and section. Scroll through the report to look at a few sample pages

or click :Show Thumbnail to display thumbnails for the report or doclet.

Chapter 9Working with the Style Sample Document

9-8

Chapter 9Working with the Style Sample Document

9-9

Click to return to the report center.

Tip:

Do not click from the preview pane or the report package,doclet, or section will close and you will be returned to the home screen.

Next, download the style sample file.

To download the style sample file:

1. Click next to the name of the report package.

2. Select Download Style Sample File.

Chapter 9Working with the Style Sample Document

9-10

3. Perform an action:

• Select Save File, download the style sample file to your local drive, and thenopen the file in Microsoft Word.

• Select Open With, and leave the default selection of Microsoft Word.

The style sample file 0.Style Sheet.docx is displayed in Word.

Next, let’s add a DRAFT watermark.

To add a watermark:

1. From Microsoft Word, select the Page Layout tab.

2. Select Watermark.

3. Select DRAFT 1.

4. Click Save.

Next, upload the new style sample document.

To upload the style sample document:

1. In report center, click , and then select Edit Report PackageProperties to open the edit wizard.

2. In Style Sample, click Browse.

3. Navigate to where you saved the modified style sample sheet, and then clickOpen.

Chapter 9Working with the Style Sample Document

9-11

Note:

The system displays a warning message that the new style sample willbe applied to all of the doclets, and asks if you want to continue. ClickYes.

4. Click to save your changes, close the wizard, and return to the reportcenter.

5. Click Preview again to preview the changes.

Notice that the DRAFT watermark is now displayed on all of the doclets. You can editthe style sample document to make further changes to the report package. You canalso override the style sample document at the doclet level if you do not want the stylesample applied to that doclet.

Chapter 9Working with the Style Sample Document

9-12

Working with Development PhasesWith your users, phases, style, doclets, and sections in place, it is time to start thereport package development process to see how it all works! As a report packageowner, you can perform the same tasks as a doclet author and approver. However, ifyou also want to act as a reviewer or signer, you must assign yourself thosepermissions by editing the report package properties. See Editing Report Packages.

Author Phase

The author phase allows doclet authors to add content to doclets and doclet approversto review and approve that content. You must start the author phase before authorsand approvers can add content to doclets. To start the author phase, select

, and then select Start Author Phase.

Next, perform these actions to learn about the author phase:

• Check out, download, edit, upload, and check in a doclet.

• Submit a doclet for approval.

• Approve a doclet

• Undo the checkout of a doclet to discard changes

• Restart the workflow on a doclet

• Mark the author phase complete

See Managing the Author Phase.

Review Phase

In the review phase, users review content and add comments to the document. Youstart a review cycle by creating a review instance and then starting the cycle.

To start a review cycle:

1. Select , and then select Create Review Instance.

2. Select to start the review cycle. Click Start Review Cycle x. Xrepresents the number of the next review cycle; for example, Start Review Cycle1.

After you have started the review cycle, perform these actions to learn about thereview phase:

• Post a comment to a doclet.

• Mark a comment closed.

• Reopen a comment.

• Mark a review cycle complete.

• Create another review instance and start another review cycle. Notice that reviewcomments are carried forward in context from previous review cycles.

Chapter 9Working with Development Phases

9-13

See "Managing the Review Phase" in Manage Report Packages.

Example 9-1 Sign Off Phase

The sign off phase locks down the report package content and submits it to the signersfor final approval. After a sign off instance is created, no changes to the report

package are allowed. To create a sign off instance, select , and thenselect Create Sign Off Instance.

After you have created the sign off instance, perform these actions to learn about thesign off phase:

• Request sign off on the report package.

• Cancel the sign off and unlock the report package for additional edits.

• Reject the sign off (you must have the Signer permission).

• Sign off on the report package (you must have the Signer permission).

See "Managing the Sign Off Phase" in Manage Report Packages.

After you guide the report package through each development phase, you are ready tocreate your own report package. Remember that you can always return to the samplereport package to experiment and become familiar with different report packagefunctionality. For more detailed information about the tasks and responsibilities of areport package owner, see these topics:

• Learn About Report Packages

• Report Package Design Considerations

• Create Report Packages

• Understand Style Samples

• Manage Report Packages

Chapter 9Working with Development Phases

9-14

10Working with the Sample ManagementReports

After a service administrator installs the sample files and you import the samplemanagement reports (see Installing Samples), the following sample managementreports are available to work with:

• Sample Report 1 - contains a grid with income statement accounts in the rowsand Scenarios in the columns, with two formula columns to display the "% of NetSales" for each account in the row.

• Sample Report 1 Snapshot

• Sample Report 2 - contains three charts (pie, bar, and line charts) that are eachdriven by grids that are part of each chart definition.

• Sample Report 2 Snapshot

• Sample Report 3 - contains a grid and a chart, where the grid has Entities in therows and Scenarios in the columns. The chart is driven by the displayed grid.

• Sample Report 3 Snapshot

• Sample Report 4 - contains a grid with income statement accounts in the rows,Scenarios and Fiscal Calendar dimensions in the columns. The grid displays arolling report with:

– January to the currently selected month in the POV (June by default) forActual data.

– The Current POV + 1 (July by default) to December for Plan data.

– You can change the POV to select a different month. The columns use acombination of the Current POV, Range and Relative Member selectionfunctions.

• Sample Report 4 Snapshot

• Sample Report 5 (Prompts) - contains a grid with prompts for:

– One or more Segments in the rows

– Children of the select Quarter in the columns

– One or more Entities in the POV with Printable Pages enabled.

• Sample Report 6 (Cond. Format & Suppression) – contains a grid with Entitiesin the rows and Scenarios in the columns with the following applied:

– Conditional formatting on the "Act vs. Plan Var" column that colors the cellbackground red, green or yellow, depending on the cell value.

– Conditional suppression on the Entity row to suppress all rows where thevalue is less than 1,000,000.

• Sample Report 7 (Zoom and Drill) – contains a grid with Accounts in the rowsand Scenarios in the columns with the following Zoom and Drill definitions:

10-1

– Zoom to Children for "Gross Profit" and "Net Income"

– Drill to URL for the "Gross Profit" and "Net Income" row headers with links tocorresponding Wikipedia pages

– Drill to "Sample Report 3" for the "Gross Profit" and "Net Income" data cells inthe "Actual" column. The POV for the Account is passed to the target report.

Note:

The drill definitions to "Sample Report 3" require that this reportexists in the "Samples" folder. If the sample management reports aredeployed to a different folder, the drill definitions must be updated tothe new location, in order for the drill links to function properly.

• Snapshot Reports – for all the sample management reports, except "SampleReport 5 (Prompts)". Snapshot reports contain data within the report and do notrequire connectivity to the Oracle Enterprise Performance Reporting CloudSample Application. They are available for preview only, as the definition ofsnapshot reports cannot be edited.

Note:

All the sample management reports contain:

– An image object in the header with a company logo

– Images in the header and footer with a gradient striped thick border

– A text box with text functions in the header which returns the reportdescription and some point of view information and report run date

– A text box with a function in the footer to return the page number

Chapter 10

10-2

11Working with the Sample Application

We provide a sample application with Oracle Enterprise Performance Reporting Cloudas a learning tool. Use the sample application to:

• See what an application looks like after it is created. The sample applicationincludes:

– One sample model

– Seven dimensions with their members loaded

– Data loaded into the sample model

• Learn how the dimension hierarchy works

• View the proper format of dimension load files and proper format of a data load file

• View application history

• Learn how to grant access to the application to users and groups

• Learn how data grants work by creating a data grant within the sample model

• Experiment with refreshing data (from an application) in a doclet within a reportpackage by using Smart View

This topic shows you how to generate the sample application and guides you to topicsthat help you learn about an Oracle Enterprise Performance Reporting Cloudapplication.

Generating the Sample ApplicationOnly one application can be active at a time in one environment, so use the sampleapplication to learn about and experiment with a completed application. Afterward, youcan delete the sample and create your custom application.

To generate a sample application:

1. From the Application icon, under Sample Application, select Create.

Note:

This User Interface (UI) that is displayed below is only displayed whenyou have not already created an application.

11-1

The Sample Application is generated.

2. Click Sample Application to open it.

Experimenting with a Complete Application1. Open the Sample Application. It contains one model called Sample Model and

these dimensions with the members loaded:

Chapter 11Experimenting with a Complete Application

11-2

• Accounts—Categorize revenue, expense, asset, equity, liability, andstatistical entries in the system.

• Fiscal Calendar—Displays the fiscal calendar year and period, such as Q1,Jan Feb, Mar; as well as time period aggregations such as YTD and QTD.

• Years—Displays the fiscal or actual year for example, FY 2015 or 2015.

• Scenarios—Provides versions of data, such as Budget, Actual, Forecast. Youcan compare scenarios to determine the variance.

• Entities—Describes the structure of your organization.

• Currency—List of reporting currencies for the model.

• Generic—A user-defined dimension.

You can see when the application was created, when it was last updated, and howmany users have access to this sample application.

2. Click the Dimensions and Models tab to see the dimensions and which modelscontain each dimension. Here, only one model is pre-populated.

Chapter 11Experimenting with a Complete Application

11-3

You can use the sample application to experiment with adding, editing and viewingdimensions. You can create and modify models and assign dimensions to them.See Create a Custom Application.

Learning How the Dimension Hierarchy WorksTo view the dimension hierarchy and member properties for the Accounts dimension:

1. Select Edit from the drop-down menu: The table view is displayed.

2. Expand the Accounts dimension.

3. To see the detailed view, select Detailed View.

Chapter 11Learning How the Dimension Hierarchy Works

11-4

See Manage Dimensions Using the Hierarchy Editor for information on how to setvarious dimension properties in the Dimension Hierarchy Editor.

Viewing the Proper Format of Dimension Load and DataLoad Files

Dimensions and data are already loaded into the sample application. To see anexample of formatting, view the load files provided by your administrator.

To learn how to create dimension load files, see Load and Extract DimensionMembers and see Load, Extract, and Clear Data to learn how to create data load files.

Dimension Load Files

For example, if you open the SampleApp.Accounts.txt file, this formatting is displayed:

Chapter 11Viewing the Proper Format of Dimension Load and Data Load Files

11-5

See Load and Extract Dimension Members to learn more about loading dimensionsand members.

Data Load File

The sample application is prepopulated with data in the model. To view the correctformat of a data load file, open data.export.txt which your administrator canprovide.

Here is data.export.txt:

See Load, Extract, and Clear Data to learn more about loading data.

Viewing Application HistoryTo see the history of actions, click the History icon. In this example, you can see theactions that were taken to prepopulate the sample application:

Chapter 11Viewing Application History

11-6

Granting Access to the ApplicationYou can use the sample application to try granting access to users or groups.

Note:

Before you can grant access, the Identity Domain Administrator must havealready created users and assigned roles.

To grant access to users:

1. Access the Grant Access tab from the sample application.

2. See Grant Access to learn how to grant access to the application to users andgroups.

Chapter 11Granting Access to the Application

11-7

Learning How to Set Up Data GrantsYou can use the sample application to practice setting up data grants. Learn how tolayer the rows in a data grant to create the effective permissions you want for data inyour model.

To learn to work with data grants:

1. Access the Data Grants tab from the sample application.

Chapter 11Learning How to Set Up Data Grants

11-8

2. See Set Up Data Grants for further information.

Refreshing Data in a DocletYou can use the sample application to refresh data in a doclet in which the dataresides in the sample application. To become familiar with this feature of OracleEnterprise Performance Reporting Cloud, see Example: Working with OracleEnterprise Performance Reporting Cloud data in Oracle Smart View for Office and Work with the Sample Report Package.

Chapter 11Refreshing Data in a Doclet

11-9

12Learning About Security

In this topic, you will gain a high-level understanding of the layers of security that youcan implement in Oracle Enterprise Performance Reporting Cloud Service to ensurethat each user has the appropriate access to information and system administration.The three layers of security:

• System Level Security

• Artifact Level Security

• Data Level Security

Levels of SecurityOracle Enterprise Performance Reporting Cloud Service security is achieved througha combination of system level roles, corresponding artifact level permissions, and datasecurity:

• System Level security – Restricts Oracle Enterprise Performance Reporting CloudService to users that are created by the Identity Domain Administrator in OracleCloud, My Services and assigned at least one role.

• Artifact Level security – Restricts access to report packages, third-partydocuments, folders, and the application by granting permissions to users andgroups.

• Data Level security – Identifies the users and groups that have specified access todata.

12-1

System Level SecurityThe first level of security is created at the Oracle Cloud, My Services Users level whenthe Identity Domain Administrator for your company creates users and assigns rolesas outlined in: Learning About Security.

Oracle Enterprise Performance Reporting Cloud Service includes five predefinedroles:

Service AdministratorsCreate and maintain all aspects of the system, except for user management

Reports AdministratorsCreate report packages and management reporting definitions

Application AdministratorsCreate and maintain all application artifacts, such as applications, models,dimensions, and data grants

Library AdministratorsCreate folders, including root-level folders

UsersThe minimum role required to log in to and use the service, and to view artifacts towhich the user has access

Artifact Level SecurityThe second level of security is the artifact level, in which access permissions aregranted to users, groups, or users and groups for:

• Report packages

• External Third-Party Content such as PDFs, images and Microsoft Officedocuments

Chapter 12Levels of Security

12-2

• Folders in the library

• An application

• Management Reports

When you see the keys in Oracle Enterprise Performance Reporting Cloud Service,you can grant access to users, groups, or users and groups.

When you create an artifact (report package, folder, application), you automaticallyhave permission to edit, delete, and maintain that artifact. In addition, you can giveother users, groups, or users and groups the ability to maintain or view that artifact bygranting access to those users. Users who do not have access cannot see or accessthat artifact.

The permissions you can grant on an artifact depend on the artifact. For example, youcan grant "Administer" or "View" permissions to Third-Party artifacts in a folder,whereas you can grant "Administer", "Write", or "View" permissions on a folder in alibrary. For an application, you can grant “ADMINISTER” or “USE” permissions. See Learning About Security for details on all the permissions.

Chapter 12Levels of Security

12-3

You can grant permissions to artifacts in the library using the concept of “inheritedpermissions.” This gives you the ability to easily grant the same permissions that youset at a parent folder to the child folder(s) and artifacts underneath it. By default,folders are created with the Inherit Permissions box checked by default, but you canclear it if you wish. And, you may also individually override the inherited permissionsfor certain users and/or groups by directly assigning or revoking a permission. Notethat the inherited permission check box is not the default for a report package, sincegranting access allows other users to view it immediately. A report package ownerusually waits until a more appropriate time in the report package lifecycle rather thangranting access at creation time.

See Granting Access for more details.

Management Reporting Permissions

1. In order to run a management report, the user must have at least the "View"permission on the artifact.

2. In order to save a management report as a snapshot the user must have "View"permission on the artifact. Saved management reports can only be written tofolders to which a viewer has "Write" access.

3. When a management report snapshot is created, the system grants that user withthe Report Administrator permission on the snapshot.

4. When a management report snapshot is created from the definition, the snapshotdoes not get the permissions applied to the management report definition.

Data Level SecurityThe third level of security is the data level, in which data access permissions can begranted to users. Data level security can be set in the following ways:

• You can take a broad approach and grant access on a dimension by dimensionbasis, either by setting the Default access on a dimension to READ from thedefault of NONE, or by granting access to a particular dimension to users, groups,or users and groups.

Chapter 12Levels of Security

12-4

• On a granular level, you can create data grants to grant access to portions of datain a model. This grant can be individual or combinations/intersections ofdimensions.

Access on a Dimension by Dimension Basis

You can grant access to users on a dimension by dimension basis. When you createthe dimension, you can change the default access of NONE to READ to enable allusers to see that dimension.

The challenge with dimension by dimension data access is that most often you want torestrict access on a more granular level. For example, if someone in your company isresponsible for the Human Resources budget, that person needs access to all theexpense accounts: salary, benefits, office supplies, travel and entertainment, etc.across the company. That same HR person is also responsible for the benefitsaccount in every cost center. On a dimension by dimension basis, you would have togive them access to all cost centers. And that’s not what you really want. Ideally, userswould have access only to their own cost centers rather than all cost centers andaccess to the one they need such as “Benefits”. A data grant addresses this need bygranting access at dimensional intersections.

Creating Data Grants

A data grant allows you to specify the portions of data within the model that can beaccessed by users, groups or users and groups. When you see the data grants icon,you can create and manage data grants. To create a data grant, select a model andspecify, for each dimension, the access that users and groups have for specificmembers. You “layer” each row so what you add for row 1 is the base layer, and eachsubsequent row refines the access you grant.

Chapter 12Levels of Security

12-5

The rows within a data grant determine the security outcome (effective permissions).The top row (base layer) is evaluated first. Some best practice ideas:

• Apply broad rules for the majority of cases, and then create exceptions. You caneither grant the greatest access in the base layer, or start with a restrictive baselayer and then grant greater access.

• Try to create security in the data grant in the fewest steps to simplify maintenance.

The key to creating data grants is to understand how the order of the rows affects theeffective permissions and steering clear of creating conflicting rules between rows. Incases of conflict, the least restrictive access rules takes precedence. See Setting UpData Grants for more details on the rules and logic applied to creating data grants inOracle Enterprise Performance Reporting Cloud Service, The chapter includes sampledata grants to increase your understanding of them.

Chapter 12Levels of Security

12-6

13Granting Access

To control which users can access content within Oracle Enterprise PerformanceReporting Cloud, you must grant access to users for the following artifacts:

• Report Packages

• Folders

• Management Reporting reports

• Third-party Artifacts, such as MS Office documents, PDFs, and images

• Dimensions

• An Application (includes the application artifact, dimensions, and data grants)

Note:

Access to models and data is granted through Data Grants . See SetUp Data Grants. For System audit logs, no access can be granted to otherusers. Only the Service Administrator and the creator of the System audit logcan view them.

The access to artifacts is managed by a combination of the role assigned to the userand the associated permission that is assigned to a user for the artifact. As a generalrule, access is managed as follows:

• The Role (such as Service Administrator, Reports Administrator, ApplicationAdministrator, Library Administrator, and User) enables an administrative user tocreate an artifact. For example, the report package owner creates the reportpackage, or the Library administrator creates a root level folder. See Learn AboutSecurity for more information on security roles.

• Permission is granted to a selected user or group to maintain the specified artifact,based on the assigned permission, such as edit, view, administer, or remove.

You assign permission to access artifacts to individual users or groups. Generally, untilaccess is assigned to an artifact, it is invisible to the user, with the followingexceptions:

• The Administrator who created the artifact can always see it, as long as theadministrator’s permission has not been removed.

• Depending on the artifact, some Administrator roles can see it as part of their role.

• The Service Administrator can always see everything.

As a best practice, to minimize maintenance, you can group users who have the sameaccess level. Permission is then assigned to the group rather than each individualuser.

13-1

Types of Permission

The following types of permission may be granted on different artifact types:

Table 13-1 Types of Permission

Permission Type Permission Artifact Type

Administer Users can create and manage theartifact. The Administrator hasunrestricted access to the artifact.

• Report Packages• Folders• Management Reporting reports• Third-party Content (such as MS

Office documents, PDFs andimages)

• Dimensions

Write For folders only, enables users toadd content to the folder.

Folders

View Users can view the artifact. • Report Packages• Folders• Management Reporting reports• Third-party Content (MS Office

documents, PDFs and images)

Use Users can see the Application in thelibrary. The scope of the access tothe application is governed by anyadditional restrictions or permissionsfor that user, such as:• View permissions applied to any

artifact• Write permissions applied to a

folder artifact• Additional permissions applied

to the model, data, andmetadata

Application

Direct and Inherited Permissions

For report packages, folders, and third-party content, you can assign permissionsdirectly or by inheritance from the parent folder:

• Direct permissions are used to assign access for a single artifact to specified

users and groups. Click the check box on the Access tab of the associatedInspect dialog box to add or remove that permission for the selected user or group.When you hover over the selected permission, it is identified as “DirectPermission.”

Chapter 13

13-2

• Inherited permissions are used to assign the permissions granted to a parentlevel artifact to all its children to avoid having to set individual user permissions foreach artifact. The permissions applied to the parent flow down to all child artifactsfor that parent. You can adjust the inherited permissions by revoking permissionfor a particular user or group, for example, if you have confidential data that you donot want everyone to see.

You can assign both Administer and View permissions at the folder level and theobjects in the folder will inherit those permissions if Inherit permissions from parentfolder is turned on.

By default, inheritance is turned on for folders and third-party artifacts. Inheritance isturned off by default for report packages and reports so users are granted appropriateaccess to the report package and reports during the development of the report.

The inheritance icon is displayed beside users with inherited permissions.Hovering over a permission displays the path to the location of the permission.

If you add or remove an inherited default permission on the Access tab, a new icon

is displayed beside the modified permission to indicate the change. Click again torevert to the original inherited permission, if required.

Chapter 13

13-3

Granting Access to Report PackagesReport package owners are automatically granted the Administer permission for thereport package that they create. If you assign the Administer permission to other userson a report package, then they are also displayed as report package owners.

Caution:

As a best practice, Report Package Owners and Viewers should be assignedin the Report Package rather than the Library.

The report package owner can assign access to the report package, using one of thefollowing methods:

• When creating the report package, select and assign users, as described in Create Report Packages.

• Through the Library, using the Inspect dialog box, as described in this document.

Available Permissions

Only Administer and View (report package viewer) permissions can be assignedthrough the Library. Report package authors, approvers, and reviewers must beassigned from the report package itself. See Create Report Packages for additionalinformation.

The following permissions are available for the Report Package:

• Administer—Enables the user or group to edit, delete, and import or export theartifact to which the permission has been applied for that user or group. TheAdministrator user in the Report Package is displayed in the Library and theAccess tab with direct Administer permission. If you assign other users theAdminister permission on a report package, then they are also displayed as reportpackage owners.

• View—Enables the user or group to see the report package. The View user in theReport Package is displayed in the Library, and from Inspect on the Access tabs ofthe report package as having direct View permissions.

To grant access to report packages:

1. From the Home page, select an option to access the report package:

• Report Packages on the Home Page

• Library, and then Report Packages

• Library, and then Folder

Caution:

As a best practice, Report Package Owners and Viewers should beassigned in the Report Package rather than the Library.

Chapter 13Granting Access to Report Packages

13-4

2. Highlight the report package to which you want to assign access.

3. Under Actions, select Inspect.

4. Select the Access tab .

5. Click and select the users to which you want to assignaccess, as follows:

a. Select the user type:

Chapter 13Granting Access to Report Packages

13-5

• Users

• Groups

• Users and Groups

b. On the Select User dialog box, enter the first few letters for the user name in

the text box, and then click Search to populate the list of names. Todisplay all users and groups, enter an asterisk "*" as a wildcard in the Searchfield.

c. Select the users and groups to which you want to assign access, and thenclick OK.

6. From Access , assign direct or inherited permission to the report package:

a. Optional: To assign direct permission for each user or group, click the checkbox under the appropriate columns, or by selecting Grant Permission from

User or Group Actions :

• Select Administer to enable the user or group to edit, delete, and importor export all artifacts.

• Select View to enable the user or group to see all or part of the reportpackage. The user cannot modify the report package.

• Select Remove to delete the selected user or group from the list. Highlightthe name, and then click X to remove the name and any associatedpermissions immediately.

Note:

To remove the original administrator, you must assign theadministrator permission to another user, who can then remove theoriginal Administrator.

b. Optional: To apply inherited permissions, select Inherit permissions fromparent folder to apply the parent-level permissions to artifacts.

Inheritance is turned off by default for report packages so users are grantedappropriate access to the report package during the development of thereport.

The inherited permissions provide the following access:

• If View is inherited, users can view the Report Package in its current state,including Not Started. In addition, these users are displayed in the ReportPackage as Report Package Viewers.

• If Administer is inherited, users can view, manage, and edit the ReportPackage in its current state, including Not Started. In addition, these users aredisplayed in the Report Package as Report Package Owners.

The icon indicates inherited permission. When you hover over the inheritedpermission, the complete path to the original artifact is displayed.

7. Click Close.

Chapter 13Granting Access to Report Packages

13-6

Granting Access to Folders and Third-party DocumentsThird-party documents or external content include artifacts that were generatedoutside of Oracle Enterprise Performance Reporting Cloud, such as MS Officedocuments, images, and PDFs. These artifacts are stored in created folders.

You assign access to folders and third-party content from the Inspect dialog box fromthe Library.

By default, inheritance is turned on for folders and third-party content. You can removea user or group from inheritance, and assign direct permission to the artifact.

See the following video also Granting Access to Library Artifacts.

Available Permissions

The following permissions are available for the folders and third-party content:

• Administer – Enable the user or group to read, edit and delete artifacts.

• Write – For folders only, enable the user to import third-party content or otherartifacts as a new file into the parent container or folder.

• View — Enables the user or group to see all authorized folder artifacts within theapplication. The View permission may be applied directly to the artifact or inheritedfrom a parent folder hierarchy.

• Remove – Allows the user to delete a selected user or group from the list.Highlight the name, and then click X to remove the name and any associatedpermissions.

To grant access to folders and third-party content:

1. From the Home page, select Library.

2. In the Library, select the folder or artifact for which you want to assign access.

3. Under Actions, select Inspect, and then Access.

Chapter 13Granting Access to Folders and Third-party Documents

13-7

Users or groups who are inheriting permissions from the parent folder are

indicated by the inheritance icon .

4. Click and select the users to which you want to assignaccess, as follows:

a. Select the user type:

• Users

• Groups

• Users and Groups

b. On the Select User dialog box, enter the first few letters for the user name in

the text box, and then click Search to populate the list of names. Todisplay all users and groups, enter an asterisk "*" as a wildcard in the Searchfield.

c. Select the users and groups to which you want to assign access, and thenclick OK.

5. From Access , assign direct or inherited permission to the report packageusing one of the following methods:

a. Optional: To assign direct permissions for each user or group, click the checkbox under the appropriate columns, or select Grant Permission from User or

Group Actions .

• Select Administer to enable the user or group to read, write and delete,and import or export artifacts.

• Select Write for folders only to enable the user to import third-partycontent or other artifact as a new file into the parent container or folder.

Chapter 13Granting Access to Folders and Third-party Documents

13-8

• Select View to enable the user or group to see all authorized folderartifacts within the application. The View permission may be applieddirectly to the artifact, or inherited from a parent folder hierarchy.

• Select Remove to delete a user or group from the list. Highlight the name,and then click X to remove the name and any associated permissionsimmediately.

b. Optional: To inherit the same permissions that have been assigned to aparent artifact, click Inherit permissions from parent folder. Inherited

permission is indicated by the icon . When you hover over the inheritedpermission, the complete path to the original artifact is displayed

6. Click Close.

Granting Access to an ApplicationAfter an application is created by the Application Administrator, you must assignaccess to that application. You can grant permission directly from the Application iconon the Home Page, or from the Library Inspect dialog box.

• To grant access to an application from the Home Page

• To grant access to an application from the Library

Only direct permissions are available for an application.

Caution:

If you apply access to the Application system folder listed under the leftcolumn of the Library using the Inspect option without opening theapplication, the associated permission is applied to the system folder and notto the application itself.

Available Permissions

The following permissions are available for the application:

• Administer—Allows the user or group to perform the following tasks within theapplication, to enable the ongoing management of all application artifacts:

– See and manage all models in the application

– Edit and delete any artifact in the application

– Import and export all application artifacts (models, dimensions, and datagrants)

– Add, edit, and remove users and groups

• Use—Allows a user to see the Application in the Library. The level of accesswhich the user is allowed is also governed by any additional permissionsrestricting the user, such as:

– View permissions applied to any artifact

– Write permissions applied to a folder artifact

– Additional permissions applied to the model, data and metadata

Chapter 13Granting Access to an Application

13-9

Granting Access to an Application from the Home Page

To grant access to an application from the Home Page:

1. From the Home page, select Application, and then click the application name.

2. From the Overview screen in Application, select Access .

The creator of the application is displayed as the Administrator.

Chapter 13Granting Access to an Application

13-10

3. Click and select the users to which you want to assignaccess, as follows:

a. Select the user type:

• Users

• Groups

• Users and Groups

b. On the Select User dialog box, enter the first few letters for the user name in

the text box, and then click Search to populate the list of names. Todisplay all users and groups, enter an asterisk "*" as a wildcard in the Searchfield.

c. Select the users and groups to which you want to assign access, and thenclick OK.

4. From Access , click the check box under the appropriate columns, or select

Grant Permission from User or Group Actions to assign the level of accessfor each user or group:

• Select Administer to enable the user or group to perform ongoingmanagement of all application artifacts.

• Select Use to allow a user to see the Application in the Library. The level ofaccess which the user is allowed is also governed by any additionalpermissions restricting the user.

5. Optional: Select Remove to delete the selected user or group from the list.Highlight the name, and then click X to remove the name and any associatedpermissions:

6. Click Close.

Granting Access to an Application from the Library

To grant access to an application from the Library:

1. On the Home Page, select Library, and then, in the left pane, select theApplication system generated folder.

2. Select the application in the Content pane, then Actions arrow next toapplication , and then select Inspect.

Chapter 13Granting Access to an Application

13-11

3. From Properties on the Inspect dialog box, select Access .

The creator of the application is displayed as the Administrator.

4. Click and select the users to which you want to assignaccess, as follows:

a. Select the user type:

• Users

• Groups

• Users and Groups

b. On the Select User dialog box, enter the first few letters for the user name in

the text box, and then click Search to populate the list of names. Todisplay all users and groups, enter an asterisk "*" as a wildcard in the Searchfield.

c. Select the users and groups to which you want to assign access, and thenclick OK.

5. From the Access tab , assign the level of access for each user or group byclicking the check box under the appropriate columns, or select Grant Permission

from User or Group Actions :

• Select Administer to enable the user or group to perform ongoingmanagement of application artifacts.

• Select Use to allow a user to see the Application in the Library. The level ofaccess which the user is allowed is also governed by any additionalpermissions restricting the user.

Chapter 13Granting Access to an Application

13-12

6. Optional: Select Remove to delete the selected user or group from the list.Highlight the name, and then click X to remove the name and any associatedpermissions.

7. Click Close.

Granting Access to DimensionsBefore you can assign access to dimensions, the user must be assigned access to theapplication and the dimensions must be created.

The Application Administrator can assign direct permission to users or groups to editor delete dimensions. The permissions are applied through the application, rather thanthe Inspect dialog box.

Note:

In addition to applying access to specific dimensions through the applicationas described in this document, you can also control access using datagrants:

• Create data grants that restrict which portions of a model can be accessed.

• Set Default Access when you create or modify a dimension to READ from theDefault NONE to enable all users to view but not modify the dimension.

For more information on data grants, see Set Up Data Grants.

To grant access to dimensions:

1. On the Home page, select Application, and then click the application name todisplay the Application Overview.

2. From the application Overview screen, select Dimensions and Models.

Chapter 13Granting Access to Dimensions

13-13

3. Click the name of the dimension for which you want to grant access.

4. From the Dimension Overview screen, select Access. The name of the selecteddimension is displayed at the top of the screen.

5. Click and select the users to which you want to assignaccess, as follows:

a. Select the user type:

• Users

• Groups

• Users and Groups

b. On the Select User dialog box, enter the first few letters for the user name in

the text box, and then click Search to populate the list of names. Todisplay all users and groups, enter an asterisk "*" as a wildcard in the Searchfield.

c. Select the users and groups to which you want to assign access, and thenclick OK.

6. From the Access tab , select Administer to enable the user or group to view,modify, or delete the dimension.

7. Optional: Select Remove to delete the selected user or group from the list.Highlight the name, and then click X to remove the name and any associatedpermissions.

8. Click Close.

Chapter 13Granting Access to Dimensions

13-14

14Setting Up Data Grants

Data grants enable you to apply a level of security to the data stored in a model and tocontrol who can access sensitive or confidential information. You can create datagrants for dimension intersections that identify users or groups who are allowed toaccess that data. At least one model must exist before you can apply a data grant.

Usually, you create data grants only for dimensions to which you need to allow orrestrict access; otherwise, you can use the Default Access to set the access for theentire dimension. For example, in the Sample Application, you can set the DefaultAccess to Read for the dimensions that do not need access restriction, and then setyour specific data grants on the remaining dimensions, where Default Access is None,to grant access as required.

Carefully constructed data grants can ease security maintenance by adaptingautomatically to changes in your application, such as members being added ordropped.

See these sections for more information:

• Understanding How Data Grants Work

• Selecting Member Functions

• Data Grants Processing and Conflict Resolution Rules

• Creating Data Grants

• Sample Data Grant

Understanding How Data Grants WorkData grants are assigned to members or groups of members to manage who canaccess that information.

Data grants are created in layers or rows, with each successive layer refining theaccess to data by users and groups. Each row of a data grant defines an intersectionof data to which a selected user will have READ or NONE access. When creating thedata grants, you select member functions to define the set of members to be included.See Selecting Member Functions.

Key to creating data grants is understanding the rules that affect how rows areprocessed and how conflicts between data grants are resolved. Row order determinesthe effective permission of the grant. The rows within a data grant are evaluated insequence, starting with the first or base layer, and then refining the permissions witheach additional row, until the final effective permission is established.

Let’s look at the following simple example. The following assumptions apply:

• Default Access for the Scenario dimension has been set to None, so we aresetting individual permissions from that baseline.

• The Accounting Manager is also part of the Accounting Group.

14-1

The rows are read in sequence, from the top down, and the results for each rowculminate in the effective permission for the selected data. For more information onprocessing data grants, see Data Grants Processing and Conflict Resolution Rules.

The result of the calculations returns the following effective permissions:

• The Accounting Group has access to Actual and Plan

• Accounting Manager has access to Actual, Plan and Forecast.

Note:

In the first row of the data grant, Actual and Plan are used in a single rowbecause they have the same criteria. Alternatively, you can create two rowsinstead; however, combining members minimizes the number of rows in thedata grant.

After the data grant is created, it is recommended that you validate the data grant. TheValidate operation checks the data grants to determine whether member names usedin the data grant are still valid. For example, if a member that was selected for a datagrant is removed from a dimension, that data grant becomes invalid. If the data grantis not valid, an alert icon is displayed for the data grant and the data intersection rowinside the data grant. Open the data grant to see the affected model, and correct thesituation.

Caution:

The Validate operation does not automatically change any data grants.

After validating the data grant, review the assigned permissions on the Data GrantsAccess screen. Select each individual user or group, and verify that the data grantsreflect the restrictions that you require. If you created multiple data grants, thenconflicting rows likely exist. The background resolution of multiple competing orconflicting data grants may not create the final result that you expect, so you mightneed to refine your data grants to ensure the proper access.

Best practice suggestions:

• Grant the broadest rules that apply to the most people in your base layer for firstrow of the data grant, and then add exception rows to reduce access.

• Try to create your security model in the fewest possible steps, to easemaintenance.

Chapter 14Understanding How Data Grants Work

14-2

For more details on the rules and logic applied to creating data grants in OracleEnterprise Performance Reporting Cloud, see Data Grants Processing and ConflictResolution Rules.

Selecting Member FunctionsYou can use member functions to select a set of members to include in a data grant.This selection method promotes flexibility and control, easing maintenance of datagrants.

The function icon in the Select Members dialog box is available for every memberlevel in the hierarchy, and offers the following member functions to select the membersto be included in a data grant:

• Member —Assign the data grant to the selected member only.

• Children—Assign the data grant to the children of the member only. The memberis not included.

• IChildren (Inclusive Children) —Assign the data grant to the target member andits children.

• Descendants —Assign the data grant to the entire tree under the selectedmember. The member is not included.

• IDescendants (Inclusive Descendants) —Assign the data grant to the targetmember and the entire tree under the selected member.

Chapter 14Selecting Member Functions

14-3

• Bottom —Under the target member, include all members that have no children(the lowest hierarchy members).

The following example shows the results for each assigned function based on theFiscal Year dimension in the Sample Application:

Table 14-1 Member Functions Examples

Member Function Affected Members Results

Fiscal Calendar Member Only the member Fiscal Calendar

Fiscal Calendar Children Only the children but notthe member

Q1, Q2, Q3, Q4

Fiscal Calendar IChildren Fiscal Calendar and itsChildren

Fiscal Calendar, Q1, Q2,Q3, Q4

Fiscal Calendar Descendants The tree under FiscalCalendar but not themember

• Q1, Jan, Feb, Mar,• Q2, Apr, May, Jun,• Q3, Jul, Aug, Sep,• Q4, Oct, Nov, Dec

Fiscal Calendar IDescandants Fiscal Calendar plus theentire tree

• Fiscal Calendar• Q1, Jan, Feb, Mar,• Q2, Apr, May, Jun,• Q3, Jul, Aug, Sep,• Q4, Oct, Nov, Dec

Fiscal Calendar Bottom All members under FiscalCalendar that have nochildren.

Jan, Feb, Mar, Apr, May,Jun, Jul, Aug, Sep, Oct,Nov, Dec

As an example of automatic updating, if you set up dimension members as “Children”or “Bottom”, when any dimension members are added or removed, the functionperforms its task as designed and selects current members of the function for the datagrant. The changes are captured automatically based on their location in the hierarchy,rather than having to monitor individual members.

For example, if a Manager has access to the calendars for all the members of aProject team and the data grants are set to Bottom for the member Project, whenevera team member joins or leaves the team, the data grant will always correctly reflect thecurrent Project team members and their associated calendars. You do not need tokeep track of team members, and no changes are required until the process itselfchanges. Security is maintained because the Manager only sees the calendars forcurrent members of the Project team.

Data Grants Processing and Conflict Resolution RulesThe following rules govern how data grants are processed and how row conflicts areresolved:

• Default access for the dimension must be set to Read or None for all members toset a baseline for the data grants.

• If you have two rows in the same data grant, the second (last) row takesprecedence.

• If a parent/child relationship assignment within a Data Grant presents a conflict, itis resolved by row order.

Chapter 14Data Grants Processing and Conflict Resolution Rules

14-4

• If you alter the sequence of rows within a data grant, you also change the effectivepermissions of that data grant.

• When processing a data grant, it does not matter whether the designated user isan individual or a group.

• If you have two different data grants for the same dimension, the least restrictivedata grant takes precedence. In cases where there are conflicting rules betweenrows, the last row prevails.

Creating Data GrantsBefore you begin, at least one model must have been created.

To create a data grant:

1. From the Home page, select Application, and then click the application name.

2. From the Overview screen in Application, select Dimensions and Models , andthen click the name of the dimension to which you want to assign the data grant.

3. On the Dimension Overview for the selected dimension, under DefaultAccess, check the default access setting for the baseline access for thisdimension for all users because it may affect how you set the data grant:

• If the default dimension access is set to None, you might need to allowpermissions to Read in your data grant, or

• If the default dimension access is set to Read, you may need to restrict accessto members in the dimension by setting the permissions to None.

Determining the default access ensures a common starting point for all users,easing construction of the data grant. If your company prefers a most restrictiveenvironment, create no more than one data grant per dimension and ensure allNone rows are at the bottom or lower rows of the data grant.

4. From the dimension Overview tab, select Data Grants .

Chapter 14Creating Data Grants

14-5

5. Click to open a new data grant.

6. Enter a name for the new data grant, and then click Access to set thepermissions for the new data grant.

7. Under Models, select at least one model that contains the dimension for whichyou want to set the data grant. The screen is activated when the model isselected.

Chapter 14Creating Data Grants

14-6

8. Click to select the dimension, and then click OK. Thedimension name is displayed on the Permissions table.

9. Under the dimension name (for example, Fiscal Calendar), click Select Membersto display the Select Members dialog box.

10. Under All Members, click the member name to expand the list of members to therequired level.

Chapter 14Creating Data Grants

14-7

11. Click the function icon beside the required level of member to select thefunctions for the members to be included in the data grant. The selections areautomatically moved to the Selections column. For a list of member functions, see Selecting Member Functions.

To redisplay any members, click the previous level in the navigation.

12. Optional: On the Select Members dialog box, click Actions to select one ormore display options for the dimension and its members:

• Show Alias Instead of Name

• Show Member Counts

• Sort Alphabetically

13. Click Close.

14. Under Users, click Add to select the users and groups that you want to include inthe data grant on the Select User dialog box.

15. Optional: Under Users, click the number of users to view all selected users in alist, or add another user.

Chapter 14Creating Data Grants

14-8

16. Under Permission, click Select Permission to display the Permissions dialogbox, and then select the appropriate permission for the selected users:

• None – The selected user cannot view or modify the specified member for thedimension.

• Read – The selected user can view, but not modify the specified member forthe dimension.

• Delete Permission – Click to remove the entire permission from thePermissions table.

17. Optional: From the drop-down arrow beside each row in the data grant, selectfrom the available options to perform other actions for permissions for the row:

• Add Another Permission–Enables you to add another permission for theselected row, without re-entering the member details.

• Move Up or Move Down–Moves the selected row up or down in the tablerows. Because rows are evaluated from top to bottom to determine the dataavailable to users and groups, you should be aware that any moves to therows will affect the effective permissions.

• Add Row–Use to add another row to the data grant.

• Duplicate-Use to add another row with the same criteria to the data grant.

• Delete-Use to delete the row for the data grant.

Chapter 14Creating Data Grants

14-9

18. After all rows for the selected data grant are added, click Save, and then Close.

19. On the Data Grants tab , click .

The Validate operation checks the data grants to determine whether the membernames used in the data grant are still valid. For example, if a member that wasselected for a data grant is removed from a dimension, that data grant becomesinvalid. If the data grant is not valid, an alert icon is displayed for the data grantand the data intersection row inside the data grant. Open the data grant to see theaffected model, and correct the situation.

Caution:

The Validate operation does not automatically change any data grants.

20. From the list of users on the Data Grants Access tab , select the user orgroup that is assigned to this data grant, and verify that the assigned permissionsare correct.

Although the data grant may be valid, it might not accurately represent the accessthat you intended to assign. Review all data grants for the selected user or groupto refine the access and ensure only the authorized user or group can access therequired data.

Sample Data GrantThe following sample data grant shows a simple example of how you can create adata grant for your application.

1. Because the access restrictions will be set across only three dimensions, from theOverview for each dimension, set the Default Access for Entities, Scenarios, andFiscal Calendar dimensions to None.

Chapter 14Sample Data Grant

14-10

2. Set the Default Access for the remaining dimensions (Accounts, Years, Currencies,and Segments) to Read.

3. Set the access permissions for each user and dimension to Read, as follows:

Table 14-2 Sample Access Permissions

Dimension Rodney P. Ray Ocean E. OBrien

Entities IDescendants (E01_101_300) IDescendants (Total Entities)

Scenarios Actual Plan

Fiscal Calendar IDescendants (Q1) IDescendants (FiscalCalendar)

4. Create one Data Grant for each dimension.

Because each user has differing member access permissions, each Data Grant willhave two rows, one for each user, defining their member selection access in thedimension.

Figure 14-1 Data Grant: Entities

Figure 14-2 Data Grant: Scenarios

Chapter 14Sample Data Grant

14-11

Figure 14-3 Data Grant: Fiscal Calendar

When logged in as Rodney, notice how the data grant is applied in an ad-hoc query inSmart View.

When logged in as Oceana, notice how the data grant is applied in an ad-hoc query inSmart View.

Chapter 14Sample Data Grant

14-12

Setting Up Data GrantsData grants enable you to apply a level of security to the data stored in a model and tocontrol who can access sensitive or confidential information. You can create datagrants for dimension intersections that identify users or groups who are allowed toaccess that data. At least one model must exist before you can apply a data grant.

Usually, you create data grants only for dimensions to which you need to allow orrestrict access; otherwise, you can use the Default Access to set the access for theentire dimension. For example, in the Sample Application, you can set the DefaultAccess to Read for the dimensions that do not need access restriction, and then setyour specific data grants on the remaining dimensions, where Default Access is None,to grant access as required.

Carefully constructed data grants can ease security maintenance by adaptingautomatically to changes in your application, such as members being added ordropped.

See these sections for more information:

• Understanding How Data Grants Work

• Selecting Member Functions

• Data Grants Processing and Conflict Resolution Rules

• Creating Data Grants

• Sample Data Grant

Chapter 14Setting Up Data Grants

14-13

15Performing an Audit

All actions performed in the system or on artifacts and folders are tracked in a runningsystem audit that details who modified an artifact or folder, when it was changed, andwhat was changed.

Any changes are automatically tagged with a timestamp that reflects the date and timethat the action occurred.

Two types of files can be generated for audits based on your role or permission:

• System Audit File—Only the Service Administrator can generate a System AuditFile to capture all entries between the default first timestamp (date and time) forthe system log and a selected end timestamp. The starting timestamp of therecords cannot be edited.

• Artifact or Folder Audit File—Can be generated for selected artifacts or folders bythe user who has Administer permission for the artifact or folder, or the ServiceAdministrator. This audit file provides an extract of the transactions, based on aselected date range. An audit file can be created for the following systemgenerated and system personal folders and user created folders:

– My Library

– Report Packages

– Application

– Folders

Note:

You cannot create an audit log for the system generated Recent or Favoritesfolders.

The audit logs are stored in the system-generated Audit Logs folder in the library. Allusers can view the Audit Logs folder, but they can view only the audit files that theycreated. Users cannot copy or move artifacts into or out of this folder. You cannotgrant access to audit logs to another user. Only the Service Administrator and thecreator of an audit log can view them.

After you create the audit files, you can download them to your local file system forreview.

Creating a System AuditThe system audit file includes all records in the audit log between the timestampsdefined by the Service Administrator. By default, From displays the earliest timestampin the audit log and cannot be changed. The Service Administrator can select the Totimestamp to control the range for the system audit.

15-1

Caution:

When creating the system audit file, you can choose an option to remove allentries for the selected system audit file from the audit logs after they havebeen extracted. Because the entries have been removed, the new Fromtimestamp for all entries changes to the first timestamp after the removedentries. For example, if you remove all entries up to Mar 16th, the new Fromtimestamp becomes March 17.

To create a System Audit log:

1. On the Home Page, use one of these options:

• On the Welcome Panel, select Create , and then select System AuditFile.

• From the Library, select Audit Logs in the left pane, and click Create inthe right pane, and then select System Audit.

Chapter 15Creating a System Audit

15-2

2. From the Create System Audit File dialog box, use the calendar icon toselect the To timestamp for the end of the range for the audit file.

Note:

By default, From displays the earliest timestamp in the audit log andcannot be changed.

3. Enter the name for the audit file that will be automatically stored in the Audit Logsfolder in the Library.

4. Optional: Select Remove extracted entries from the active system audit log toclear the entries in the audit log after the audit file has been created.

Chapter 15Creating a System Audit

15-3

Caution:

If you remove extracted entries, the From entry in the System Audit filechanges to reflect the next timestamp. For example, if the range for theaudit extract that was removed covered the period from March 15th toMarch 31st, then the new From timestamp will be April 1st.

5. Click OK to create the audit file.

6. Click OK to dismiss the confirmation message. The audit file is created in thebackground, and a notification is sent when the audit log is complete.

7. Optional: On the Home page, select Messages to verify that the audit iscomplete.

8. From the Library, select Audit Logs.

9. Select the audit log that you want to view, then click Actions, and then Downloadto save the audit file to your local File System.

You may need to scroll over to the far right on the screen to see the Actions menu.Make a note of the location to which you are saving the audit file.

10. Navigate to the audit file on your local File System to review the results.

The System Audit Log contains details for each transaction, including thefollowing:

• Timestamp

• User and IP Address

Chapter 15Creating a System Audit

15-4

Note:

In most instances, the IP address displayed may not be the user’sactual IP address.

• Event Category, Type, and Status

• Artifact ID, Name, and Location

• Actions and Changed Values

11. Optional: Click Actions to perform these additional tasks:

• Select Inspect to review the audit log Properties and the History for the file.

• Select Delete to remove the system audit file. A confirmation dialog boxconfirms the deletion.

• Click Rename to enter a new name for the audit log file.

Creating an Artifact or Folder AuditAny user who has Administer permission on an artifact or folder can create an auditfile for it. That audit file can be viewed only by the user who created it and by theService Administrator.

The audit file includes all records in the Audit Log between the timestamps defined bythe user. By default, From displays the earliest timestamp in the audit log, and Toreflects the latest timestamp.

An audit file can be created for the following system-generated and personal foldersand user-created folders:

• My Library

• Report Packages

• Application

• Folders

Chapter 15Creating an Artifact or Folder Audit

15-5

• Third-party content, such as PDFs

Note:

You cannot create an audit log for the system-generated Recent or Favoritesfolders.

To create an Audit file:

1. On the Home Page, select Library, and then, in the left pane, select the artifact forwhich you want to create an audit log.

2. For the chosen artifact, select Actions, and then select Audit.

3. From the Create Audit File dialog box, use the calendar icon to select theFrom and To timestamp range for the audit file.

Chapter 15Creating an Artifact or Folder Audit

15-6

4. Enter the name for the audit file that will be automatically stored in the Audit Logsfolder in the Library, and then click OK.

5. Click OK.

6. Click OK to dismiss the confirmation message. The audit file is created in thebackground, and a notification is posted when the audit log is complete.

7. Optional: On the Home page, select Messages to verify that the audit iscomplete.

8. From the Library, select Audit Logs.

9. Select the audit log that you want to view, then click Actions, and then Downloadto save the audit file to your local File System.

You may need to scroll over to the far right on the screen to see the Actions menu.Make a note of the location to which you are saving the audit file.

10. Navigate to the audit file on your local File System to review the results.

Chapter 15Creating an Artifact or Folder Audit

15-7

The System Audit Log contains details for each transaction, including thefollowing:

• Timestamp

• User and IP Address

Note:

In most instances, the IP address displayed may not be the user’sactual IP address.

• Event Category, Type, and Status

• Artifact ID, Name, and Location

• Actions and Changed Values

11. Optional: Click Actions to perform these additional tasks:

• Select Inspect to review the audit log Properties and the History for the file.

• Select Delete to remove the system audit file. A confirmation dialog isdisplayed to confirm the deletion.

• Click Rename to enter a new name for the audit log file.

Chapter 15Creating an Artifact or Folder Audit

15-8

16Migrating Artifacts

In Oracle Enterprise Performance Reporting Cloud, you can migrate folders, otherartifacts such as report packages, and an application from one environment toanother, or within the same environment. You can migrate artifacts using the export,download, and import functionality in the library or by using the File Transfer Utility.

• Migrating Artifacts within the Same Environment

• Migrating Artifacts Using the File Transfer Utility

• Migrating Artifacts from One Environment to Another Environment

• Importing Artifacts into the New Environment Using the Library

• Exporting and Downloading Artifacts Using the Library

Migrating Artifacts from One Environment to AnotherEnvironment

Moving artifacts from one environment to another involves exporting the artifact,downloading the export file to your local file , and then importing into the newenvironment. Migrating from one environment to another consists of these high levelsteps:

• Export the artifact from the current environment and download the export file toyour local file

• Log into the new environment where you already have activated your service

• Import the downloaded export file from your local file into the new environment

• Optionally, move data from your application by extracting from the currentenvironment and loading into the new environment or just reload data from thesource.

Note:

Comments and statuses in a report package are not migrated with the reportpackage.

Exporting and Downloading Artifacts Using the LibraryTo export an artifact (report package, folder, or an application) from your currentenvironment and download to your local file system using the Library:

16-1

Note:

Oracle recommends that you use the File Transfer Utility for export if the sizeof your artifacts (including folders) is larger than 256 MB.

To export and download artifacts using the library:

1. From the Home page, select Library.

2. Do one of the following, depending on the artifact:

a. For a root level folder, in the navigation pane, select the folder, then click ,then click Export

b. For other artifacts (folder, report package, or application), in the right pane,

select the artifact to export, then click then select Export.

3. Choose a folder to put the export file in, then click OK. The export process runs inthe background. Check Messages to view the notification once the export iscomplete.

4. Validate that the export was successful by checking the folder you exported theartifact to and that the name of the export zip file is prefixed with Export. Forexample, Export - MyReportPackage.zip.

5. Download the export file to your local file system by clicking Download next to theexport file name and save the export zip file to your local file system.

6. Optionally: If you want to move data in an application from your currentenvironment, use the Extract Data procedure. See Load, Extract, and Clear Data.

7. Log out of the current environment.

Importing Artifacts into the New Environment Using theLibrary

To import artifacts in a new environment using the Library:

1. In your new environment, make sure Oracle Enterprise Performance ReportingCloud is activated and log in to the service.

Note:

Some browsers have restrictions on the size of files that can beuploaded. If the zip file size of the export file is beyond the capacity ofyour browser, use the upload_file command in the File Transfer Utility.See Using the File Transfer Utility.

Oracle recommends that you use the File Transfer Utility for import if thesize of your artifacts (including folders) is larger than 256 MB.

2. Select Library from the Home Page.

Chapter 16Importing Artifacts into the New Environment Using the Library

16-2

3. To import the artifact to a different location than the export file, navigate to thatfolder location. Otherwise, skip this step.

4. Select the menu in the upper right corner of the Library and then Import.

5. Select Local and browse to the export zip file you want to import.

6. Select Overwrite Existing Objects to replace any existing artifact with the newimported artifact.

7. Select Include Access Permissions to include the already defined accesspermissions on the imported artifact to the existing one.

8. Select OK. The import process runs in the background.

9. Check Messages to view the notification once the import is complete.

10. Check in the library folder you specified to verify that the file has been imported.

11. Optionally: If you extracted data from an application in your current environment,you can now load the data into your new environment.

Migrating Artifacts Using the File Transfer UtilityTo export, download and import artifacts using the File Transfer Utility:

1. In your Windows workstation, open a command prompt window and navigate tothe directory where you unzipped the File Transfer Utility.

2. Enter the export command as one of the following:

a. Using an XML file: eprcsctl operation=exporttenantid=<tenantid> user=<user> password=<password>file=<parameter_xml_file_path>.

b. Example using an XML file: eprcsctl operation=exporttenantid=myidentitydomain user=johndoe password=pwdfile=c:\exportfile.xml

c. Without using an XML file: eprcsctl operation=exportserver=<EPM server URL> tenantid=<tenantid> user=<user>password=<password> artifact_path=<exportpathofartifact>artifact_type=<type> filename=<remotefolder>remotefolder=<libfolder>

d. Example without using an XML file: eprcsctl operation=exportserver=myserveraddress tenantid=myidentitydomainuser=johndoe password=pwd artifact_path=Library/myfolder1artifact_type=FolderResourceType filename=myexportfileremotefolder=Library/myexportlocation

3. Wait for the system to return a success indicator and a Job ID. The systemperforms the export in the background.

4. Optional: Enter the get_stat command with the Job ID to confirm the export isrunning in the background or if it has completed. Repeat until you receive amessage showing that the background job completed executing. Enter theget_stat command as one of the following:

a. Using an XML file: eprcsctl operation=get_stattenantid=<tenantid> user=<user> password=<password>file=<parameter_xml_file_path>

Chapter 16Migrating Artifacts Using the File Transfer Utility

16-3

b. Example using an XML file: eprcsctl operation=get_stattenantid=myidentitydomain user=johndoe password=pwdfile=c:\get_stat.xml

c. Without using an XML file: eprcsctl operation=get_statserver=<EPM server URL> tenantid=<tenantid> user=<user>password=<password> jobid=<id of job>

d. Example without using an XML file: eprcsctl operation=get_statserver=myserveraddress tenantid=myidentitydomainuser=johndoe password=pwd jodid=myjobid

5. Optional: Enter the get_detailed_stat command as one of the following with theJob ID to get all the details on what occurred in processing.

a. Using an XML file: eprcsctl operation=get_detailed_stattenantid=<tenantid> user=<user> password=<password>file=<parameter_xml_file_path>

b. Example using an XML file: eprcsctl operation=get_detailed_stattenantid=myidentitydomain user=johndoe password=pwdfile=c:\get__detailed_stat.xml

c. Without using an XML file: eprcsctl operation=get_detailed_statserver=<EPM server URL> tenantid=<tenantid> user=<user>password=<password> jobid=<id of job>

d. Example without using an XML file: eprcsctloperation=get_detailed_stat server=myserveraddresstenantid=myidentitydomain user=johndoe password=pwdjodid=myjobid

6. From the Home page, select Library and navigate to the path that contains theexported .zip file and confirm that the exported .zip file is there.

7. If you are migrating artifacts to a new environment, use the download_exportcommand to transfer the export zip file to your local file system. If you are notmoving artifacts to a new environment, you can skip this step. Enter thedownload_export command as one of the following:

a. Using an XML file: eprcsctl operation=download_exporttenantid=<tenantid> user=<user> password=<password>file=<parameter_xml_file_path>

b. Example using an XML file: eprcsctl operation=download_exporttenantid=myidentitydomain user=johndoe password=pwdfile=c:\download_export.xml

c. Without using an XML file: eprcsctl operation=download_exportfileFullPath=<location of file in library to download>localfolder=<local download location> server=<EPM serverURL> tenantid=<tenantid> user=<user> password=<password>

d. Example without using an XML file: eprcsctloperation=download_export fileFullPath=Library/myfolder/myfile localfolder=c:\myfolder server=myserveraddresstenantid=myidentitydomain user=johndoe password=pwd

8. Enter the import command as one of the following:

Chapter 16Migrating Artifacts Using the File Transfer Utility

16-4

a. Using an XML file: eprcsctl operation=importtenantid=<tenantid> user=<user> password=<password>file=<;parameter_xml_file_path>

b. Example using an XML file: eprcsctl operation=importtenantid=myidentitydomain user=johndoe password=pwdfile=c:\importfile.xml

c. Without using an XML file: eprcsctl operation=importserver=<EPM server URL> tenantid=<tenantid> user=<user>password=<password> importfile=<filename>remotefolder=<libfolder> overwrite=<true or false>includeAccesspermission=<true or false>

d. Example without using an XML file: eprcsctl operation=importserver=myserveraddress tenantid=myidentitydomainuser=johndoe password=pwd importfile=c:\myexportedfile.zipremotefolder=Library/mylibrayfolder overwrite=trueincludeAccesspermission=true

9. Wait for the system to return a success indicator and a Job ID. The systemperforms the import in the background.

10. Enter the get_stat command as one of the following:

a. Using an XML file: eprcsctl operation=get_stattenantid=<tenantid> user=<user> password=<password>file=<parameter_xml_file_path>

b. Example using an XML file: eprcsctl operation=get_stattenantid=myidentitydomain user=johndoe password=pwdfile=c:\get_stat.xml

c. Without using an XML file: eprcsctl operation=get_statserver=<EPM server URL> tenantid=<tenantid> user=<user>password=<password> jobid=<id of job>

d. Example without using an XML file: eprcsctl operation=get_statserver=myserveraddress tenantid=myidentitydomainuser=johndoe password=pwd jodid=myjobid

11. Optional: Enter the get_detailed_stat command as one of the following with theJob ID to get all the details on what occurred in processing.

a. Using an XML file: eprcsctl operation=get_detailed_stattenantid=<tenantid> user=<user> password=<password>file=<parameter_xml_file_path>

b. Example using an XML file: eprcsctl operation=get_detailed_stattenantid=myidentitydomain user=johndoe password=pwdfile=c:\get__detailed_stat.xml

c. Without using an XML file: eprcsctl operation=get_detailed_statserver=<EPM server URL> tenantid=<tenantid> user=<user>password=<password> jobid=<id of job>

d. Example without using an XML file: eprcsctloperation=get_detailed_stat server=myserveraddresstenantid=myidentitydomain user=johndoe password=pwdjodid=myjobid

Chapter 16Migrating Artifacts Using the File Transfer Utility

16-5

Migrating Artifacts within the Same EnvironmentMigrating artifacts within the same environment involves exporting the artifact, andthen importing the export zip file. Migrating from one environment to another consistsof these high level steps:

• Export the artifact from the current environment.

• Import the downloaded export file from your local file system into the newenvironment.

Exporting and Importing Artifacts Using the Library

Export an artifact (report package, folder, or an application) within your currentenvironment using the Library.

To export and import artifacts using the library:

1. Select Library from the Home Page.

2. Do one of the following, depending on the artifact:

a. For a root level folder, in the navigation pane, select the folder, then click ,then click Export.

b. For other artifacts (folder, report package, or application), in the right pane,

select the artifact to export, then click then select Export.

3. Choose a folder to put the export file in, then click OK. The export process runs inthe background.

4. Validate that the export was successful by checking the folder you exported theartifact to and that the name of the export zip file is prefixed with "Export". Forexample, Export - MyReportPackage.zip.

5. Check Messages to view the notification once the export is complete.

6. To import the artifact to a different location than the export file, navigate to thatfolder location. Otherwise, skip this step.

7. Select the menu in the upper right corner of the Library and then selectImport.

8. Select Library and browse to the export zip file you want to import.

9. Select Overwrite Existing Objects to replace any existing artifact with the newimported artifact.

10. Select Include Access Permissions to include the already defined accesspermissions on the imported artifact to the existing one. Then select OK.

11. The import process runs in the background.

12. Check Messages to view the notification once the import is complete.

13. Check in the library folder you specified to verify that the file has been imported.

Chapter 16Migrating Artifacts within the Same Environment

16-6

17Using the File Transfer Utility

The File Transfer Utility provides an alternate way of performing the following tasks:migrating artifacts, performing backup and restore, data load and data extract,uploading and downloading files.

For a list of commands you can use for the command driven File Transfer Utility, see Using the File Transfer Utility Commands and Parameters or enter eprcsctl in acommand prompt window.

Note:

In Windows, the File Transfer Utility runs using Java and JRE is packagedalong with the utility. In Linux and UNIX, set a JAVA_HOME environment topoint to the latest 1.8 version of the JRE.

Installing the File Transfer Utility

To install the File Transfer Utility:

1. Access Oracle Enterprise Performance Reporting Cloud.

2. From the Home page, select Settings and Actions from the user menu, thenDownload the File Transfer Utility.

3. Click Save File to save the eprcsctl.zip and then extract eprcsctl.zip locally.

Using XML Files

There are two ways of executing commands in the File Transfer Utility:

• Use an editable XML file that contains the command and parameters

• Type out the whole command with parameters, see Using the File Transfer UtilityCommands and Parameters for list of commands with usage and example.

The editable XML files provided are the following:

• data_extract_template

• data_load_template

• download_dbsnapshot_template

• download_export_template

• download_file_template

• download_joboutput_template

• export_template

• get_detailed_stat_template

• get_stat_template

17-1

• import_template

• import_library_template

• upload_dbsnapshot_template

• upload_file_template

To use the File Transfer Utility with an XML file:

1. First download the .XML file by entering this command: eprcsctl<XML_template_filename>=<path><filename>, where:

Note:

If you would just like to see the contents of a template file, you can entereprcsctl <XML_template_filename>. If you would like to use the templates,Oracle recommends that you download them.

• XML_template_filename = the name of the XML template for the command youwant to execute

• path = the location you want to save the file to

• filename = the name of the local XML file

For example, eprcsctl download_dbsnapshot_template=C:\download_snapshot_command_parameters.xml

2. Edit the XML file to insert your specific parameter information. The template hasinstructions built in and shows you what to enter.

3. Save the XML file.

Running the File Transfer UtilityYou can execute the utility by entering all parameters and values at once as shown inthis procedure.

To execute the File Transfer Utility:

1. Open a command prompt window and navigate to the directory where youunzipped the File Transfer Utility. See "Installing the File Transfer Utility" in Usingthe File Transfer Utility.

2. Run the executable, eprcsctl.exe. In Linux and UNIX, run the executable using thefollowing command: $JAVA_HOME/bin/java –jar ./eprcsctl.exe

3. Enter a command similar to the following to specify all required parameters totransfer file:

eprcsctl operation=upload_dbsnapshot file=restoreSnapshot.xml, where:

file=restoreSnapshot.xml = the edited XML file used to execute the command

Using the File Transfer Utility Commands and ParametersUsing commands and parameters, you can complete tasks in the File Transfer Utility.

Chapter 17Running the File Transfer Utility

17-2

File Transfer Utility Common Parameters

You can execute the File Transfer Utility by entering values for these parameters thatapply to all commands:

• operation: specifies the operation to carry out

• server: EPM server URL protocol://server:port

• tenantId: identity domain

• user: user name

• password: user password

• file: (optional) If operation specific additional parameters are specified in XML file,then the file parameter value should be the full path to the XML file.

• proxy: If the client networks requires all the internet traffic to go through a proxy,specify the proxy server information as a value of this parameter server:port

For example, this is what a common command with parameters should look like:eprcsctl operation=upload_file server=myserveraddress tenantid=myidentitydomain

user=johndoe password=pwd

Note:

This does not include parameters file and proxy listed above.

Additional Notes

General guidelines for the commands are:

• The Service Administrator can perform all functionality.

• For import and export, the entire application is considered a unit. Users cannotimport and export any child artifacts of an application. Models, data grants anddimensions are examples of child artifacts that cannot be imported or exported.However, you can load and extract dimensions from the Applications area, underDimensions and Models.

• Application import and export does not include model data. Model data isseparately managed using data_load and data_extract commands.

Using Special Characters

When using the delimiter and quoteChar parameters with commands, you mustenclose the character with double quotes. For example, delimiter="\\t" andquoteChar="\"" where \\t is for the tab character and \" is for the double quote andboth are enclosed with the double quotes. Colon and slash characters do not needquotes if they are in a path parameter. All other special characters, for example "@"and "^" characters, used in other parameters must be surrounded by quotes.

List of quote characters that the UI allows:

• Double Quotation Marks (“)

• Single Quotation Marks (‘)

Chapter 17Using the File Transfer Utility Commands and Parameters

17-3

In addition, if you have a parameter value with an open space, you must enclose thevalue with double quotes. For example, appName="Sample Application". The followingexample encompasses both from above: operation=data_extract user=Administratorpassword=welcome1 tenantid=7777 secret=thisissecret server=http://

slc09eor.us.oracle.com:9100 remoteFolder=Folder_1 fileName=SApp.zip delimiter="\

\t" quoteChar="\"" appName="Sample Application"

resourceType="ApplicationResourceType" modelName="Sample Model"

Listing of CommandsThe following is a list of commands that can be used with the File Transfer Utility.

• data_extract

• data_load

• download_dbsnapshot

• download_export

• download_file

• download_joboutput

• export

• get_detailed_stat

• get_stat

• import

• import_library

• upload_dbsnapshot

• upload_file

data_extract

data_extract command is used to create a copy of the data within a model. It is used inconjunction with the download_file and data_load commands.

• Command usage without an XML file: eprcsctl operation=data_extractserver=<EPM server URL> tenantid=<tenantid> user=<user> password=<password>

delimiter=<delimiter used in the data file> remotefolder=<location in library

where data is to be extracted> filename=<data extract file name>

quoteChar=<the character used for quotes in the data file> appName=<name of

the application to extract the data> modelName=<name of the model to extract

the data>

• Command example without an XML file: eprcsctl operation=data_extractserver=myserveraddress tenantid=myidentitydomain user=johndoe password=pwd

delimiter=, remotefolder=Library/myfolder filename=mydata quoteChar='

appName=myapp model=mymodel

• Command usage with an XML file: eprcsctl operation=data_extracttenantid=<tenantid> user=<user> password=<password>

file=<parameter_xml_file_path>

• Command example with an XML file: eprcsctl operation=data_loadtenantid=myidentitydomain user=johndoe password=pwd file=c:\data_extract.xml

Chapter 17Listing of Commands

17-4

• Additional Parameters:

– fileName: name of the file that will have extracted data

– remoteFolder: library location in which data should be extracted

– delimiter: delimiter used in the data file

– quoteChar: the character used for quotes in the data file

Addtional Parameters: (cont)

• appName: :name of the Application

• modelName: name of the model to upload the data to

data_load

data_load command is used to fill a model with data. It is used in conjunction with thedata_extract command.

• Command usage without an XML file: eprcsctl operation=data_load server=<EPMserver URL> tenantid=<tenantid> user=<user> password=<password>

delimiter=<delimiter used in the data file> fileFullPath=<full path of the

file in library> quoteChar=<the character used for quotes in the data file>

appName=<name of the application to upload the data to> modelName=<name of the

model to upload the data to>

• Command example without an XML file: eprcsctl operation=data_loadserver=myserveraddress tenantid=myidentitydomain user=johndoe password=pwd

delimiter=, fileFullPath=Library/myfolder/mydata quoteChar=' appName=myapp

model=mymodel

• Command usage with an XML file: eprcsctl operation=data_loadtenantid=<tenantid> user=<user> password=<password>

file=<parameter_xml_file_path>

• Command example with an XML file: eprcsctl operation=data_loadtenantid=myidentitydomain user=johndoe password=pwd file=c:\data_load.xml

• Additional Parameters:

– delimiter: delimiter used in the data file

– fileFullPath: full path of the file in library

– quoteChar: the character used for quotes in the data file

– appName: name of the application to upload the data to

– modelName: name of the model to upload the data to

download_dbsnapshot

The download_dbsnapshot command is used to transfer the backup image that occursnightly at the Settings — Daily Maintenance screen. It can be saved on local filesystem for restoration at a later date. download_dbsnapshot is used in conjunction withupload_dbsnapshot, which returns the snapshot at the next Settings — DailyMaintenance screen.

• Command usage without an XML file: eprcsctl operation=download_dbsnapshotlocalfolder=<localmachinefolder> server=<EPM server URL> tenantid=<tenantid>

user=<user> password=<password> secret=<passphrase used for encryption>

localfolder=<local download location>

Chapter 17Listing of Commands

17-5

• Command example without an XML file: eprcsctl operation=downlad_dbsnapshotlocalfolder=c:\myfolder server=myserveraddress tenantid=myidentitydomain

user=johndoe password=pwd secret=mypassphrase

• Command usage with an XML file: eprcsctl operation=download_dbsnapshotlocalfolder=<localmachinefolder> tenantid=<tenantid> user=<user>

password=<password> secret=<passphrase used for encryption>

file=<parameter_xml_file_path>

• Command example with an XML file: eprcsctl operation=downlad_dbsnapshotlocalfolder=c:\myfolder tenantid=myidentitydomain user=johndoe password=pwd

secret=mypassphrase file=c:\download_dbsnapshot.xml

• Additional Parameters:

– localfolder: location on local machine where the file needs to be downloadedto

– secret: text that will be used as an encryption key which can be any text

download_export

download_export is used to move previously exported content from the service to thelocal file system. Both download_file and download_export can be usedinterchangeably.

• Command usage without an XML file: eprcsctl operation=download_exportfileFullPath=<location of file in library to download> localfolder=<local

download location> server=<EPM server URL> tenantid=<tenantid> user=<user>

password=<password>

• Command example without an XML file: eprcsctl operation=download_exportfileFullPath=Library/myfolder/myfile localfolder=c:\myfolder

server=myserveraddress tenantid=myidentitydomain user=johndoe password=pwd

• Command usage with an XML file: eprcsctl operation=download_exporttenantid=<tenantid> user=<user> password=<password>

file=<parameter_xml_file_path>

• Command example with an XML file: eprcsctl operation=download_exporttenantid=myidentitydomain user=johndoe password=pwd file=c:

\download_export.xml

• Additional Parameters:

– localfolder: location on local machine where the file needs to be downloaded

– fileFullPath: full path of the file in library

download_file

download_file is used to move general third party content from the service to the localfile system. Both download_file and download_export can be used interchangeably.

• Command usage without an XML file: eprcsctl operation=download_filefileFullPath=<location of file in library to download> localfolder=<local

download location> server=<EPM server URL> tenantid=<tenantid> user=<user>

password=<password>

• Command example without an XML file: eprcsctl operation=download_filefileFullPath=Library/myfolder/myfile localfolder=c:\myfolder

server=myserveraddress tenantid=myidentitydomain user=johndoe password=pwd

Chapter 17Listing of Commands

17-6

• Command usage with an XML file: eprcsctl operation=download_filetenantid=<tenantid> user=<user> password=<password>

file=<parameter_xml_file_path>

• Command example with an XML file: eprcsctl operation=download_filetenantid=myidentitydomain user=johndoe password=pwd file=c:\download_file.xml

• Additional Parameters:

– localfolder: location on local machine where the file needs to be downloaded

– fileFullPath: full path of the file in library

download_joboutput

download_joboutput is used in conjunction with commands that generate output and runin the background; namely data_extract and export.

• Command usage without an XML file: eprcsctl operation=download_joboutputjobId=<jobid> localfolder=<location to downloadjob output> server=<EPM server

URL> tenantid=<tenantid> user=<user> password=<password>

• Command example without an XML file: eprcsctl operation=downlad_joboutputjobId=id143 localfolder=c:\myfolder server=myserveraddress

tenantid=myidentitydomain user=johndoe password=pwd

• Command usage with an XML file: eprcsctl operation=download_joboutputtenantid=<tenantid> user=<user> password=<password>

file=<parameter_xml_file_path>

• Command example with an XML file: eprcsctl operation=downlad_joboutputtenantid=myidentitydomain user=johndoe password=pwd file=c:

\download_joboutput.xml

• Additional Parameters:

– localfolder: location on local machine where the file needs to be downloadedto

– delete: delete the job output from server

– jobid: job id number

export

The export command is used to move Oracle Enterprise Performance Reporting Cloudartifacts between environments. It is used in conjunction with the import command.Only Oracle Enterprise Performance Reporting Cloud artifacts can be exported. Thirdparty artifacts, such as Office documents, cannot, although third party content isincluded as part of the export of their parent containers. Specifically, if a library folderis exported, all of its children are exported as well, including third-party artifacts.Applications are exported in their entirety. Child artifacts of Applications (Dimensions,Data Grants, Models) cannot be exported as standalone exports.

• Command usage without an XML file: eprcsctl operation=export server=<EPMserver URL> tenantid=<tenantid> user=<user> password=<password>

artifact_path=<exportpathofartifact> artifact_type=<type>

filename=<remotefolder> remotefolder=<libfolder>

• Command example without an XML file: eprcsctl operation=exportserver=myserveraddress tenantid=myidentitydomain user=johndoe password=pwd

Chapter 17Listing of Commands

17-7

artifact_path=Library/myfolder1 artifact_type=FolderResourceType

filename=myexportfile remotefolder=Library/myexportlocation

• Command usage with an XML file: eprcsctl operation=export tenantid=<tenantid>user=<user> password=<password> file=<parameter_xml_file_path>

• Command example with an XML file: eprcsctl operation=exporttenantid=myidentitydomain user=johndoe password=pwd file=c:\exportfile.xml

• Additional Parameters:

– export: Full path to the file on local machine which needs to be imported.

– remotefolder: Library folder to which file should be imported.

– artifact_path: File path of the artifact to export.

– artifact_type: The type of artifact.

get_detailed_stat

get_detailed_stat provides a log of the detailed information in the user console. Sameinformation which is available in the status file generated in the My Library folder.

• Command usage without an XML file: eprcsctl operation=get_detailed_statserver=<EPM server URL> tenantid=<tenantid> user=<user> password=<password>

jobid=<id of job>

• Command example without an XML file: eprcsctl operation=get_detailed_statserver=myserveraddress tenantid=myidentitydomain user=johndoe password=pwd

jodid=myjobid

• Command usage with an XML file: eprcsctl operation=get_detailed_stattenantid=<tenantid> user=<user> password=<password>

file=<parameter_xml_file_path>

• Command example with an XML file: eprcsctl operation=get_detailed_stattenantid=myidentitydomain user=johndoe password=pwd file=c:

\get__detailed_stat.xml

• Additional Parameter: jobid: id of job

get_stat

The get_stat command is used to retrieve the existing job status of any backgroundprocess. This can include import, export, and import_library. get_stat always returns acompleted, and in process status or failed status.

• Command usage without an XML file: eprcsctl operation=get_stat server=<EPMserver URL> tenantid=<tenantid> user=<user> password=<password> jobid=<id of

job>

• Command example without an XML file: eprcsctl operation=getstatserver=myserveraddress tenantid=myidentitydomain user=johndoe password=pwd

jodid=myjobid

• Command usage with an XML file: eprcsctl operation=getstattenantid=<tenantid> user=<user> password=<password>

file=<parameter_xml_file_path>

• Command example with an XML file: eprcsctl operation=getstattenantid=myidentitydomain user=johndoe password=pwd file=c:\get_stat.xml

Chapter 17Listing of Commands

17-8

• Additional Parameter: jobid: id of job

import

The import command is used to import content from a local file system. It is used inconjunction with the export command to migrate files between environments.

• Command usage without an XML file: eprcsctl operation=import server=<EPMserver URL> tenantid=<tenantid> user=<user> password=<password>

importfile=<filename> remotefolder=<libfolder> overwrite=<true or false>

includeAccesspermission=<true or false>

• Command example without an XML file: eprcsctl operation=importserver=myserveraddress tenantid=myidentitydomain user=johndoe password=pwd

importfile=c:\myexportedfile.zip remotefolder=Library/mylibrayfolder

overwrite=true includeAccesspermission=true

• Command usage with an XML file: eprcsctl operation=import tenantid=<tenantid>user=<user> password=<password> file=<parameter_xml_file_path>

• Command example with an XML file: eprcsctl operation=importtenantid=myidentitydomain user=johndoe password=pwd file=c:\importfile.xml

• Additional Parameters:

– importfile: Full path to the file on local machine which needs to be imported.

– remotefolder: Library folder to which file should be imported.

– file: full path location on local file system of the XML file

– overwrite: If set to true, it will overwrite if the file exists on the server. If it isfalse, then import will not happen if the file already exists on the server.

– includeAccesspermission: If set to true then permissions are imported. If set tofalse, then permissions are not imported.

import_library

The import_library command is used to import a previously uploaded file in the library.It is used in conjunction with the export command to migrate files betweenenvironments.

Note:

For import and export purposes, the entire application is considered a unit.Users cannot import or export any child artifacts of an application. Models,Data Grants and Dimensions are examples of child artifacts that cannot beimported or exported. Application import and export does not include modeldata. Model data is separately managed using data_load and data_extractcommands. You can specify the name of the .zip or .csv file from which datais to be imported.

• Command usage without an XML file: eprcsctl operation=import_libraryserver=<EPM server URL> tenantid=<tenantid> user=<user> password=<password>

importfile=<filename> remotefolder=<libfolder> overwrite=<true or false>

includeAccesspermission=<true or false>

Chapter 17Listing of Commands

17-9

• Command example without an XML file: eprcsctl operation=import_libraryserver=myserveraddress tenantid=myidentitydomain user=johndoe password=pwd

importfile=myexportedfile.zip remotefolder=Library/mylibrayfolder

overwrite=true includeAccesspermission=true

• Command usage with an XML file: eprcsctl operation=import_librarytenantid=<tenantid> user=<user> password=<password>

file=<parameter_xml_file_path>

• Command example with an XML file: eprcsctl operation=import_librarytenantid=myidentitydomain user=johndoe password=pwd file=c:\importlibrary.xml

• Additional Parameters:

– importfile: Full path to the file on local machine which needs to be imported.

– remotefolder: Library folder to which file should be imported.

– overwrite: If set to true, it will overwrite if the file exists on the server. If it isfalse, then import will not happen if the file already exists on the server.

– includeAccesspermission: If set to true then permissions are imported. If set tofalse, then permissions are not imported.

upload_dbsnapshot

upload_dbsnapshot uploads a previously saved maintenance snapshot. Once uploaded,the service is returned to the state defined in that snapshot at the next scheduledmaintenance.

• Command usage without an XML file: eprcsctl operation=upload_dbsnapshotoverwrite=<true or false> uploadFile=<localfile> secret=<same secret code that

was used to encrypt the file at the time of downloading> server=<EPM server

URL> tenantid=<tenantid> user=<user> password=<password>

• Command example without an XML file: eprcsctl operation=upload_dbsnapshotoverwrite=true uploadFile=c:\backup.tar.gz secret=<same secret code that was

used to encrypt the file at the time of downloading> server=myserveraddress

tenantid=myidentitydomain user=johndoe password=pwd

• Command usage with an XML file: eprcsctl operation=upload_dbsnapshotsecret=<same secret code that was used to encrypt the file at the time of

downloading> tenantid=<tenantid> user=<user> password=<password>

file=<parameter_xml_file_path>

• Command example with an XML file: eprcsctl operation=upload_dbsnapshotsecret=<same secret code that was used to encrypt the file at the time of

downloading> tenantid=myidentitydomain user=johndoe password=pwd file=c:

\upload_dbsnapshot.xml

upload_file

The upload_file command is used to bring files into Oracle Enterprise PerformanceReporting Cloud. The files are typically third-party content, but they can also beexported Oracle Enterprise Performance Reporting Cloud artifacts to move to thelibrary.

• Command usage without an XML file: eprcsctl operation=upload_file server=<EPMserver URL> tenantid=<tenantid> user=<user> password=<password>

uploadfile=<filepath> remotefolder=<libfolder>

Chapter 17Listing of Commands

17-10

• Command example without an XML file: eprcsctl operation=upload_fileserver=myserveraddress tenantid=myidentitydomain user=johndoe password=pwd

uploadfile=c:\myfile.gif remotefolder=Library/myLibraryfolder

• Command usage with an XML file: eprcsctl operation=upload_filetenantid=<tenantid> user=<user> password=<password>

file=<parameter_xml_file_path>

• Command example with an XML file: eprcsctl operation=upload_filetenantid=myidentitydomain user=johndoe password=pwd file=c:\uploadfile.xml

• Additional Parameters:

– uploadfile: Full path to the file on local machine which needs to be uploaded.

– remotefolder: Library folder to which file should be uploaded.

Chapter 17Listing of Commands

17-11

18Performing Backup and Restore (SystemClone)

Every day, during the operational maintenance of the service, Oracle backs up thecontent of your service instance to create a complete backup snapshot of existingartifacts and data. Backup snapshots are created for use in the event that you everwant to restore your service to a prior known state.

Note:

Before attempting to restore your service from a backup snapshot, makesure the destination service is the same release or newer. You cannotrestore a backup snapshot into a service that has an older release. You canconfirm release numbers by selecting the User menu from the Home page,About, and then selecting Version.

Backup

Oracle recommends that you download the backup snapshots regularly to a local filesystem, using the File Transfer Utility, so you have them available in case you wish torestore your service to a saved, prior snapshot. See Saving Backup Snapshots.

Note:

During Daily Maintenance, the service automatically creates a backupsnapshot of data and artifacts. When Daily Maintenance executes, itreplaces the prior backup snapshot with a new backup snapshot. You shouldschedule the execution File Transfer Utility on a daily basis to download thebackup snapshot to a local computer.

A saved snapshot is used to provide a specific restore point. For example,

• The state of the system immediately when going live, or immediately after a criticalpoint, like the finalization of a quarterly reporting period. In this case, the snapshotwould be restored if you ever want to further review or investigate prior activities.

• A saved snapshot could also be used if you discover that something went wrongprior to the most recent snapshot. You can select one of the snapshots from yourlocal file system that you saved in order to restore the service to a known state.

Restore

Restore can be done either through the Settings on the Home Page or by using theFile Transfer Utility. When you restore a backup snapshot, your system will return tothat prior state. Any changes that may have occurred subsequent to the time of the

18-1

backup, will not be reflected in the restored system. You can perform the followingtasks:

• Restore using the most recent daily backup snapshot Restore Using the MostRecent Daily Backup Snapshot.

• Restore using a saved backup snapshot from your local file system Restore Usinga Saved Backup Snapshot.

Note:

This can be only be done from the library after first uploading a snapshotusing the upload_dbsnapshot command from the File Transfer Utility.

Saving Backup SnapshotsOracle recommends that you periodically save backup snapshots to your local filesystem. You can save these backup snapshots by using the download_dbsnapshotcommand in the File Transfer Utility.

To download the backup snapshot using the File Transfer Utility:

1. In your Windows workstation. open a command prompt window and navigate tothe directory where you unzipped the File Transfer Utility. See Using the FileTransfer Utility.

2. Enter eprcsctl operation=download_dbsnapshot secret=<secret>tenantid=<tenantid> user=<user> password=<password>file=<parameter_xml_file_path>

where

• secret = any phrase that is used to encrypt the backup

• tenantid = identity domain

• user = user name

• password = user password

• file = full path location on local file system of the XML file

For example, eprcsctl operation=download_dbsnapshotsecret=myencryptionphrase tenantid=myidentitydomainuser=johndoe password=pwd file=c:\dbdownload.xml This downloadsthe latest backup snapshot to your local file system, created at the last dailymaintenance time.

Note:

The backup snapshots should be managed on the Service Administrator’slocal file system as part of the regular backup plan.

Chapter 18Saving Backup Snapshots

18-2

Restore Using the Most Recent Daily Backup SnapshotYou can perform a restore using the most recent daily backup snapshot.

To restore the service from the most recent daily backup snapshot:

1. Select Settings from the Home Page.

Note:

You must be a Service Administrator to access this.

2. Select Using the most recent daily backup option.

Note:

The most recent snapshot from the last maintenance window is alwaysavailable.

3. Validate the daily maintenance time or reset the time.

4. Optionally: Notify the user community if the daily maintenance time is differentthan the usual set time since the service is unavailable during that time. Forexample, if the users usually expect the daily maintenance time to be 2:00 am, but

Chapter 18Restore Using the Most Recent Daily Backup Snapshot

18-3

the administrator decides this is an emergency and is taking it offline at 11:00 am,then the administrator should inform the user community.

Restore Using a Saved Backup SnapshotYou can restore using a saved backup snapshot.

To restore using a saved backup snapshot from your local file system:

1. In your Windows workstation open a command prompt window and navigate to thedirectory where you unzipped the File Transfer Utility. See Using the File TransferUtility.

2. Enter eprcsctl operation=upload_dbsnapshot secret=<secret>tenantid=<tenantid> user=<user> password=<password>file=<parameter_xml_file_path>

where

• secret = any phrase that is used to encrypt the backup

• tenantid = identity domain

• user = user name

• password = user password

• file = full path location on local file system of the XML file

For example, eprcsctl operation=upload_dbsnapshotsecret=myencryptionphrase tenantid=myidentitydomainuser=johndoe password=pwd file=c:\dbupload.xml

3. Optionally: Notify the user community if the daily maintenance time is differentthan the usual set time since the service is unavailable during that time. Forexample, if the users usually expect the daily maintenance time to be 2:00 am, butthe administrator decides this is an emergency and is taking it offline at 11:00 am,then the administrator should inform the user community.

Note:

A message indicates that the snapshot will be restored at the next dailymaintenance time. If you need to cancel the scheduled restore, see Cancel aScheduled Restore.

Cancelling a Scheduled RestoreYou may cancel a scheduled restore.

To cancel a restore that is currently scheduled to take place:

1. Select Settings from the Home Page.

Chapter 18Restore Using a Saved Backup Snapshot

18-4

Note:

You must be a Service Administrator to access this.

2. Select Cancel Restore to cancel the scheduled restore option.

3. Select OK in response to the warning prompt to continue with the cancellation ofthe restore.

Cloning EnvironmentsThe backup and restore procedures in this topic also serve as a way to clone from oneservice instance to another.

To clone environments:

1. On the source instance, download the backup snapshot as outlined in SavingBackup Snapshots.

2. On the target instance, restore the backup snapshot that you downloaded to yourlocal file system. See Restore Using the Most Recent Daily Backup Snapshot or Restore Using a Saved Backup Snapshot.

3. Verify and adjust the daily maintenance time on the target instance, if necessary.

Chapter 18Cloning Environments

18-5