AP: Security Profile/Multi Organisation Access Control (MOAC) - Optional

 

Security Profile/Multi Organisation Access Control (MOAC) - Optional
		EBS
		Resp1	OU1
		Resp2	OU2
		Resp3	OU3
		* In EBS directly we cannot assign one responsibility to user
		so that is the reason we are creating each OU for separate responsibility.
		MOAC
		* By using MOAC we can create only one responsibility
				OU1
* Assign this responsibility to user	* Assign this Security Profile to Responsibility		* Assign these OU to Security Profile	OU2 * Here we are grouping the OU's.
				OU3
					OU1
		User1	Responsibility	Security Profile	OU2
					OU3
					* In this example if user wants to create the transaction for OU2
					he has to switch from Resp1 to Resp2.
			In Fusion
			User	Role	Business Units
			ABC	Accounts Payable Manager	BU1
			ABC	Accounts Payable Manager	BU2
			ABC	Accounts Payable Manager	BU3
			* In the above example the user wants to have access to accounts payable manager and those 3 business units
			here in fusion we can select the same combination in the system by using Manage Data Access Set Data Access for Users Task.
			here the user need not to switch from one role to another role and if user is in invoice creation page they can see all the business units
			like BU1, BU2 and BU3.
			* Here in fusion switching is not required. Whereas in EBS Switching is required.
Setups
1. Create User: Egoss SP	Path	Tools >> Security Console >> User >> Add User Account
2. Create Security Profile ( Group the BU's)	Task	Manage Organisation Security Profile
3. Create Data Role (Job Role + Security Profile)	Task	Manage Data Role and Security Profile
* Here inside of the security profile we have multiple BU's
4. Assign Data Role to User
5. Assign Roles to User
6. Assign Business Unit to User Roles	Task	Manage Data Access Set Data Access for Users
7. Run LDAP	Path	Tools >> Schedule Process >> %LDAP%
Process
1. Create User
* While creating the user assign one role to user
2. Create Security Profile
3. Create Data Role
* Here we have to provide some dummy value and check the checkbox called "Secure by Business Unit".
* Here we have to select our security profile in person tab
* Again we have to select the same in the Public Person tab
4. Assign Data Role to User
Path: Tools >> Security Console >> Users
5. Assign Business Unit (BU) to user roles
* After that login with the new user and check whether this user is having the access to business unit