9 Customizing Group Menu Item Access

This chapter describes how to specify which Oracle Identity Manager Administrative and User Console menu items are available to a particular group. The menu items are displayed as links in the left panel of the Oracle Identity Manager Administrative and User Console.

This chapter contains these topics:

• Setting Menu Items for Groups

• Creating New Menu Items for Groups

• Assigning a Menu Item to a Group

• Removing a Menu Item from a User Group

• Renaming a Menu Item

Setting Menu Items for Groups

You can set the menu items for groups you manage by using the group menu items page. Menu items listed in the group menu items page are available to that group. You can add items to the page and remove items from it. If a user is a member of multiple groups, they have access to all of the menus associated with each of the groups to which they belong.

Note: To ensure that all users of the Administrative and User Console have access to at least the most basic menu items, assign those menu items to the All Users group.

For example, if User A was a member of two groups, ABC and XYZ, and members of the ABC group were entitled to access Requests.Create while members of XYZ were enabled to access Requests.Track, User A would be able to access both the Create (under Requests) and Track (under Requests) pages of the Administrative and User Console.

Each menu group has the menuGroup.menu group code property associated with it. Each menu item has two associated properties: menuItem.menu group code.menu item code, which gives the display label of the menu item; and menuItem.menu group code.menu item code.link, that defines the link destination.

Creating New Menu Items for Groups

To create new menu items for groups, you add entries using the Form Information form. Then you add the corresponding properties.

Table 9-1 presents the complete list of Oracle Identity Manager Administrative and User Console menu items to which a user group can be granted access:

Table 9-1 Administrative and User Console Menu Items to Which Groups Can Be Added

Menu Item Name	Function
Self Account Profile	Allows users to access their account profiles.
Reset self password	Allows users to change their passwords.
Change Challenge Q&A	Allows users to change their challenge questions.
My Proxy	Allows users to view their proxy details.
My Resources	Allows users to view their provisioned resources.
My Requests	Allows users to view their requests (raised for them or by them).
Request New Resources for self	Allows users to initialize and/or submit requests to provision resources to themselves.
Request Resources	Allows users to make requests.
Track Requests	Allows users to track existing requests.
ToDo List Pending Approvals	Allows users approve tasks within existing requests.
ToDo List Open Tasks	Allows users to view open tasks assigned to them, or to users they manage.
Create Users	Allows users to create user accounts.
Manage Users	Allows users to view, edit, and otherwise manage users they administer.
Create Organizations	Allows users to create organizations.
Manage Organizations	Allows users to manage organizations they administer.
Create User Groups	Allows users to create groups.
Manage User Groups	Allows users to view, edit, and otherwise manage groups they administer.
Create Access Policies	Allows users to create access policies.
Manage Access Policies	Allows users to view, edit, and otherwise manage access policies they administer.
Manage Resources	Allows users to view, edit, and otherwise manage resources they administer.
Deployment Management Export	Allows the user to export Xellerate entities as XML files.
Deployment Management Import	Allows the user to import Xellerate entities from XML files created by using the Deployment Manager Export feature.
Operational Reports	Allows the user to view a list of available Operational Reports and run them.
Historical Reports	Allows the user to view a list of available Historical Reports and run them.
Attestation Configuration Create	Allows the user to create an attestation process.
Attestation Configuration Manage	Allows the user to view, edit and otherwise manage the attestation processes.
To-Do List Attestation	Allows the user to view pending attestation requests assigned to them.
Attestation Configuration Dashboard	Allows the user to view active attestation processes.

Assigning a Menu Item to a Group

To assign a menu item to a user group, do the following:

1. Log in to the Administrative and User Console as an administrator.

2. Click User Groups then Manage.

3. Search to find the group to which you want to assign a menu item.

4. Select the group name.

5. From the additional details menu, select Menu Items.

6. Click Assign Menu Items. The Assign Menu Items page appears.

7. From the Assign Menu Items page, select the Assign option for any menu item that you want to assign to the selected group.

   
   

   Note: If there are more items then are displayed in the table, click Next to view the rest of the items.

   
   

8. Click Assign.

9. Click Cancel to return to the Assign Menu Items page.

   or

   Click Confirm Assign.

The items are added to the group users the next time they log in.

Removing a Menu Item from a User Group

To remove a menu item from a user group, do the following:

1. Log in to the Administrative and User Console as an administrator.

2. Click User Groups, then click Manage.

3. Search to find the group from which you want to remove the menu item.

4. Click the group name.

5. From the Additional Details menu, select Menu Items.

6. Select the Delete option for each of the desired menu items.

7. Highlight the Administrative and User Console menu item you wish to prevent the user group from accessing.

8. Click Delete.

9. Click Confirm Delete.

Renaming a Menu Item

To rename a menu item, do the following:

In order to change the menu group or item names, only the xlWebAdmin.properties file needs to be changed. No change is required in the database or code.

1. Identify the group item name that needs to be changed.

2. Get the class name of that menu item from the system using the Form Information form in the client.

   For example, for the menu item Request New Resources from My Resources, the class name is My Resources.Request New Resources. This name is in the database in the WIN table. This menu item shows that the menu group code is My Resources and the menu item code is Request New Resources.

3. Record the menu group and menu item codes, and open the xlWebAdmin.properties file.

4. Search for the property name in the xlWebAdmin.properties file.

5. Change the Right Hand Side (RHS) value of this property to the new label. This changes the name of the menu group.

   In the xlWebAdmin.properties file, the property name for a menu item display label has the form menuItem.menu group code.menu item code with the spaces replaced by hyphens. For menu item with code Request New Resources under menu group with code My Resources, the property name is menuItem.My-Resources.Request-New-Resources.

6. Locate the property name in the xlWebAdmin.properties file.

7. Change the RHS value of this property to the new label. This changes the name of the menu item.