Advisor Webcast Fusion Role Customization Jul2014
-
Upload
anandg7720 -
Category
Documents
-
view
226 -
download
2
Transcript of Advisor Webcast Fusion Role Customization Jul2014
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
1/60
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
2/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
ATTENTIONAUDIO Options
You can:
Either listen the audio broadcast on your computer
Or join teleconference (dial in)
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
3/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Voice StreamingAudio Broadcast
Listen only mode
Advantage: no need to dial in What about Questions?
Type your questions into WebEx Q&A panel
If you prefer full audio access in order to ask
questions directly, please connect to ourteleconference
Connect details you will find at next slide
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
4/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
ATTENTIONAUDIO INFORMATION
Teleconference Connect details:
1. Conference ID: Complete your ID here2. International dial in: +44 (0) 1452 555 566
3. US Free call: 1866 966 9439
4. List with national toll free numbers is available
Note ID: 1148600.1
You can view this info anytime during the conference using
Communicate > Teleconference > Join Teleconference
from your WebEx menu
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
5/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
The following is intended to outline our general product diIt is intended for information purposes only, and may not b
incorporated into any contract. It is not a commitment to d
any material, code, or functionality, and should not be relie
in making purchasing decision. The development, release,
timing of any features or functionality described for Oracle
products remains at the sole discretion of Oracle.
Safe Harbor Statement
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
6/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Oracle Advisor Webcast
Lakshmi Reddeppa NooluSenior Principal Software EngineerOracle Fusion Security, Global Customer ServicesJuly 10, 2014
Customizing Roles in Oracle Fusion Applications
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
7/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Safe Harbor StatementThe following is intended to outline our general product direction. It is inteninformation purposes only, and may not be incorporated into any contract.commitment to deliver any material, code, or functionality, and should not in making purchasing decisions. The development, release, and timing of anfunctionality described for Oracles products remains at the sole discretion
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
8/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Objectives
Understand various types of roles in FA
Know tools for managing various roles
Look at steps to create custom roles
Review steps to provision roles to users
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
9/60Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Agenda
1
2
3
4
5
All about RolesTools for Managing Roles
Creating custom roles
Data Roles & Security Policies
Provisioning roles to users
Demo6
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
10/60Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Fusion Role Terminology
Privilege
Job Role
Data Role
Application Role
Enterprise Role
Entitlement
Abstract Role
Duty Role
?
?
Policy
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
11/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Fusion Roles Overview
Job Role - represent the job that you hire a worker to perform.
Human Resource Analyst, Payroll Manager, Sales Representative
Abstract Role - represent a worker's role independently of the jhire the worker to do. For e.g,
Employee, Line Manager, Resource
Data Role - combine a worker's job and the data that users wit
must access. For e.g, Payroll Administrator US, Human Resource Specialist R&D
Duty Role - represent the individual duties that users perform atheir job. For e.g,
Worker Duty, Sales Forecasting Duty
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
12/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Fusion Roles Overview
Oracle Fusion Apps Oracle Identity Manager
(OIM)
Authorization
Manager (APMJob Role Role External Role
Abstract Role Role External Role
Data Role Role External Role
Duty Role Application Ro
Function Security Privilege Entitlement
Service/Taskflow etc. Resource
Database Table Database Reso
Data Security Privilege Action
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
13/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Security Model Comparison
E-Business Suite
Data Role
Job Role
Duty Role
PrivilegePermission
PeopleS
Employee
Top Leve
Role(s)
PermissioExecutab
Responsibility
Top Level Menu
Sub Menu
Form FunctionExecutable
Fusion Applications
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
14/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Role Inheritance
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
15/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Tools To Manage Fusion Roles
Role ToolJob / Abstract Role Oracle Identity Manager (OIM
Duty Role Authorization Policy Manage
Data Role (HCM) Fusion HCM UI / APM
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
16/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Role Customization Scenario
Show / Hide menu links
Seeded Role has access more than needed
Seeded Role has less access than needed
Submenu / Links need to be hidden for a set of users
Seeded Role does not meet Implementation objectives
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
17/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Ways to Customize Roles
Menu Customization
Create New Custom Role (Recommended)
Modify Seeded Role (Not Recommended) !
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
18/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Menu Customization
Show / Hide menu items at Site level
Check / Uncheck Rendered property
Show / Hide menu items at Role level
Use EL Expression, #{securityContext.userInRole[']}
E.g., #{securityContext.userInRole['PER_HUMAN_RESOURCE_MANAGE
Multiple Roles can be entered as comma separated values For more details, refer doc:
How to Conditionally Hide/Show a Global Menu Node (Doc ID 1438414.1)
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
19/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
New Custom Job Role
Need: Menu Customization does not meet requirement
Suggestion: Create New Custom Job Role
Advantages:
Seeded roles are intact
Not overwritten by upgrades
New Job Role created in OIM
Duty Roles added to New Job Role via APM
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
20/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
New Custom Job Role - Steps
Navigate to OIM via task Manage Job Roles from FSM
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
21/60
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
22/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
New Custom Job Role - Steps
Associate new Job Role with seeded and/or custom ApplicationAPM
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
23/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Modify Seeded Job Role
Add / Remove duties from Job Role
Advantageeasy to customize
Disadvantages:
Seeded functionality is lost
Not easy to revert customizations
Upgrades might override customizations
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
24/60
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
25/60
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
26/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
New Custom Application Role
Always Create New Custom Application Role
Advantages:
Seeded roles are intact
Not overwritten by upgrades
Disadvantages:
Complicated and error prone Role copy functionality not yet available
New Application Role created and managed in APM
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
27/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
New Custom Application Role - Steps
Navigate to APM via task Manage Duties from FSM
Select stripe, then click on New Application Role and fill details
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
28/60
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
29/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
New Custom Application Role - Steps Add Entitlements via Create Policy button
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
30/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
New Custom Application Role - Steps Add Data Security Policies in Data Security tab
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
31/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
New Custom Application Role - Steps Add / Map Job Role in External Role Mapping tab
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
32/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Modify Seeded Application Role
Add / Remove Entitlements from Duty Role
Advantageeasy to customize
Disadvantages:
Seeded role reference is lost
Restoration of seeded role definition is difficult
Refer below docs for details on Duties and Privileges Mapping Mapping Of Roles, Duties and Privileges in Fusion Applications (Doc ID
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
33/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Modify Seeded Application Role - Steps
Navigate to APM via task Manage Role Templates from FSM
Search for Application Role for a stripe, open resultant Role
Add / Remove Duty role inheritance in Application Role Heirar
Add / Remove Entitlements via Find Policies => Functional Po
Add / Modify Data Security Policy via Find Policies => Data Sec
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
34/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Modify Seeded Application Role - Steps
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
35/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Modify Seeded Application Role - Steps
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
36/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
HCM Data Role - Steps
Go to task "Manage Data Role and Security Profiles from FSM
Enter New Data Role name and select Job Role
For each object type, include only one security profile
Create new Security Profile where needed
Review and Submit
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
37/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
HCM Data Role - Steps
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
38/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
HCM Data Role - Steps
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
39/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
HCM Data Role - Steps
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
40/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Modify Data Security Policies
Navigate to APM via task Manage Duties from FSM
Search for Application Role for a stripe, open resultant Role
Add / Modify Data Security Policy via Find Policies => Data Sec
Modify Condition from Rule tab
Choose Actions from Action tab
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
41/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Modify Data Security Policies
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
42/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Provision Roles to Users
Roles can be provisioned to Users Automatically or on Request
Define Role Mapping Rule via task Manage HCM Role Provisio
Choose conditions
Add Roles to definition and choose options (Auto-provision, ReSelf-Requestable)
Role Mapping Rules apply when User is created in FA
Apply Auto-provision assigns the roles to all users who meet th
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
43/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Provision Roles to Users
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
44/60
S
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
45/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Summary
We learned on: Various roles in Fusion
What Role name is called where
Where to manage each role
How to create new Job Role and Duty Role
How to provision Role(s) to Users
Whatwe covered today
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
46/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Helpful References
Mapping Of Duty Roles To Top Level Menu Entries in Fusion Ap
(Doc ID 1459828.1) Mapping Of Roles, Duties and Privileges in Fusion Applications
1460486.1)
How to Remove Menu Items in Fusion Applications using MenuCustomization (Doc ID 1550048.1)
How to Conditionally Hide/Show a Global Menu Node (Doc ID
Creating Custom Roles in Fusion Applications CRM (Doc ID 147
Customizing Roles In Fusion Applications (Doc ID 1595864.1)
L M
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
47/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Learn More
About Oracle Support Best Practices
www.oracle.com/goto/proactivesupport
Get Proactive in My Oracle Supporthttps://support. oracle.com| Doc ID: 432.1
My Oracle Support Blog
https://blogs.oracle.com/supportportal/
Ask the Get Proactive [email protected]
Available References and Resources to Get Proactive
Q & A
http://www.oracle.com/goto/proactivesupporthttps://support.us.oracle.com/https://blogs.oracle.com/supportportal/mailto:[email protected]:[email protected]:[email protected]:[email protected]://blogs.oracle.com/supportportal/https://support.us.oracle.com/http://www.oracle.com/goto/proactivesupport -
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
48/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Q & A
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
49/60
Wh C I G t Th Slid F Thi S i ?
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
50/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Where Can I Get The Slides From This Session?
1. PDF link from Doc ID 740966.1(within 48 hours)
2. RAC/Scalability Community >Content Tab > Documents (within 24 h
https://support.us.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=740966.1https://support.us.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=740966.1 -
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
51/60
Oracle Advisor Webcast Program
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
52/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Oracle Advisor Webcast ProgramLocating Current Schedule & Archived Recordings
From Note ID : 740966.1
drill down to your area
of interest
For us, Oracle Database
Access the DB page
directly via Note ID :
1455369.1
O l Ad i W b t P
https://support.us.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=740966.1https://support.us.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=1455369.1https://support.us.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=1455369.1https://support.us.oracle.com/oip/faces/secure/km/DocumentDisplay.jspx?id=740966.1 -
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
53/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Oracle Advisor Webcast Program
Note:
Click column headings to sort
Hover on Webcast Title for moreinformation
Recordings available within 48hours
Advisor Webcast Questions on awebcast or ask questions via theQuestions? link
Locating Current Schedule & Archived Recordings For DB
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
54/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
THANK YOU
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
55/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
56/60
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
57/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
Additional Resources
Oracle Corporate Photography
my.oracle.com\site\mktg\creative\graphics\photography
Oracle Corporate Hardware Photogra
my.oracle.com/site/mktg/creative/Graphics/Photograph
Academic Airline Analytics Application ATM
Oracle Corporate Icons
my.oracle.com/site/mktg/creative/Graphics/Icons/index.html
Oracle Corporate Logos
my.oracle.com/site/mktg/creative/Logos/index.h
AUDIO INFO Join Teleconference
http://my.oracle.com/site/mktg/creative/graphics/photographyhttp://localhost/var/www/apps/conversion/tmp/scratch_5/my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/Graphics/Photography/cnt1375391.htmhttp://my.oracle.com/site/mktg/creative/Graphics/Icons/index.htmlhttp://my.oracle.com/site/mktg/creative/Logos/index.htmlhttp://my.oracle.com/site/mktg/creative/Logos/index.htmlhttp://my.oracle.com/site/mktg/creative/Logos/index.htmlhttp://my.oracle.com/site/mktg/creative/Logos/index.htmlhttp://my.oracle.com/site/mktg/creative/Graphics/Icons/index.htmlhttp://my.oracle.com/site/mktg/creative/Graphics/Icons/index.htmlhttp://my.oracle.com/site/mktg/creative/Graphics/Icons/index.htmlhttp://my.oracle.com/site/mktg/creative/Graphics/Photography/cnt1375391.htmhttp://my.oracle.com/site/mktg/creative/Graphics/Photography/cnt1375391.htmhttp://my.oracle.com/site/mktg/creative/Graphics/Photography/cnt1375391.htmhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://my.oracle.com/site/mktg/creative/graphics/photographyhttp://localhost/var/www/apps/conversion/tmp/scratch_5/my.oracle.com/site/mktg/creative/graphics/photography -
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
58/60
Copyright 2014 Oracle and/or its affiliates. All rights reserved. |
AUDIO INFOJoin Teleconference
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
59/60
Question and Answer Instructions (cont)
-
7/24/2019 Advisor Webcast Fusion Role Customization Jul2014
60/60
your question pop-up here
Question and Answer Instructions (cont)