AP: Custom Roles

 

Custom Roles
There are 4 types of Roles
1. Duty Role
2. Job Role
3. Abstract Role
4. Data Roles		* we have assigned Primary Ledger (PL) to General Ledger (GL) Roles.
		* We have assigned Business Unit (BU) to Accounts Payable (AP) Roles.
1. Job Role
* It may or maynot belongs to specific application.
		Job Roles
2. Duty Role			* Within Job roles there are Duty Roles
* Within the job role we will have duty role.		Duty Roles
Eg: Accounts Payable Manager is a job role and within that we will have			* Within Duty Roles we have Privilages.
a. Invoice Creation		Privilages
b. Payment Creation	* These are Duty Roles
* Directly we cannot assign Duty roles to users.
* Duty Roles are inside of the job roles.		* All the reports prefix starts with "Submit".
3. Abstract Role
* Role which we use in multiple applications is called as Abstract Role
Eg: Employee Role.
Data Role Example
General Accounting Manager Egoss USA Primary Ledger
		This is Ledger
	This is Role
	Here we are combining ledger with role.
* Oracle has stopped Data roles from release 11
Concepts
1. Find all Roles	Path	Tools >> Security Console >> Analytics
2. Compare Roles
3. Simulate Role
4. Copy and Edit Role
5. Create Role/Custom Roles
1. Find all Roles
Path: Tools >> Security Console >> Analytics
Here we can see what are all the roles in the system.
2. Compare Roles
* Here in this pic we have to clickon compare roles if we want to compare the role.		* This is graphical View of the roles	* This is Table view of Roles.
* If you want to compare roles goto Tools >> Security Console >> Roles >> Compare Roles
* Here Green tick indicates that this role is having privilage and red tick indicates that this role is not having that privilage.
* We can export the roles data into excel. Find the data in below excel.
3. Simulate Roles
* If you want to simulate the role
Path: Tools >> Security Console >> Roles >> Search a Role >> Clickon LOV >> From LOV select Simulate Navigator.
* After clicking simulate role this screen will open.
* From the same screen we have to click on LOV and select Access Granted.
* We have to clickon view "View Privileges Required for Menu".
* In this menu we can see the list of items.
* If you want to see the privilages we have to clickon LOV and clickon Edit roles. Here we can see what are all the privilages that this role will have.
* If you want to change the prefix and suffix in the role
Path: Tools >> Security Console >> Administration >> Roles
* If you want to add the duty role to a job role. Firstly we have to create a duty role and assign it to a job role. Since we cannot assign the duty role directly to user.
in functional security policies we have to clickon add functional security policy and add the duty role here in this job role.
* If you want to create a role from the scratch we have to clickon add role.
* While creating the duty role from the scratch we have to give role category as Duty Roles.
* While creating the job role we have to select the role category as Job Roles.
* we have to provide the data security policy while creating the role and you have to provide access for business unit in condition name. and the same can be seen in the below image.
* Here in actions we can select any one of the option this is not mandatory since oracle is saying it is mandatory we are populating a value.
* In oracle seeded roles we cannot add additional privilages into that role. And we cannot edit the seeded roles which are provided by oracle.