Oracle® Identity Manager Administrative and User Console Customization Guide Release 9.0.3 Part Number B32452-01 |
|
|
View PDF |
This chapter describes how to specify which Oracle Identity Manager Administrative and User Console menu items are available to a particular group. The menu items are displayed as links in the left panel of the Oracle Identity Manager Administrative and User Console.
This chapter contains these topics:
You can set the menu items for groups you manage by using the group menu items page. Menu items listed in the group menu items page are available to that group. You can add items to the page and remove items from it. If a user is a member of multiple groups, they have access to all of the menus associated with each of the groups to which they belong.
Note:
To ensure that all users of the Administrative and User Console have access to at least the most basic menu items, assign those menu items to the All Users group.For example, if User A was a member of two groups, ABC and XYZ, and members of the ABC group were entitled to access Requests.Create while members of XYZ were enabled to access Requests.Track, User A would be able to access both the Create (under Requests) and Track (under Requests) pages of the Administrative and User Console.
Each menu group has the menuGroup.menu group code
property associated with it. Each menu item has two associated properties: menuItem.menu group code.menu item code
, which gives the display label of the menu item; and menuItem.menu group code.menu item code.link
, that defines the link destination.
To create new menu items for groups, you add entries using the Form Information form. Then you add the corresponding properties.
Table 9-1 presents the complete list of Oracle Identity Manager Administrative and User Console menu items to which a user group can be granted access:
Table 9-1 Administrative and User Console Menu Items to Which Groups Can Be Added
Menu Item Name | Function |
---|---|
Self Account Profile |
Allows users to access their account profiles. |
Reset self password |
Allows users to change their passwords. |
Change Challenge Q&A |
Allows users to change their challenge questions. |
My Proxy |
Allows users to view their proxy details. |
My Resources |
Allows users to view their provisioned resources. |
My Requests |
Allows users to view their requests (raised for them or by them). |
Request New Resources for self |
Allows users to initialize and/or submit requests to provision resources to themselves. |
Request Resources |
Allows users to make requests. |
Track Requests |
Allows users to track existing requests. |
ToDo List Pending Approvals |
Allows users approve tasks within existing requests. |
ToDo List Open Tasks |
Allows users to view open tasks assigned to them, or to users they manage. |
Create Users |
Allows users to create user accounts. |
Manage Users |
Allows users to view, edit, and otherwise manage users they administer. |
Create Organizations |
Allows users to create organizations. |
Manage Organizations |
Allows users to manage organizations they administer. |
Create User Groups |
Allows users to create groups. |
Manage User Groups |
Allows users to view, edit, and otherwise manage groups they administer. |
Create Access Policies |
Allows users to create access policies. |
Manage Access Policies |
Allows users to view, edit, and otherwise manage access policies they administer. |
Manage Resources |
Allows users to view, edit, and otherwise manage resources they administer. |
Deployment Management Export |
Allows the user to export Xellerate entities as XML files. |
Deployment Management Import |
Allows the user to import Xellerate entities from XML files created by using the Deployment Manager Export feature. |
Operational Reports |
Allows the user to view a list of available Operational Reports and run them. |
Historical Reports |
Allows the user to view a list of available Historical Reports and run them. |
Attestation Configuration Create |
Allows the user to create an attestation process. |
Attestation Configuration Manage |
Allows the user to view, edit and otherwise manage the attestation processes. |
To-Do List Attestation |
Allows the user to view pending attestation requests assigned to them. |
Attestation Configuration Dashboard |
Allows the user to view active attestation processes. |
Create Generic Technology Connector |
Allows the user to create a generic connector |
Manage Generic Technology Connector |
Allow the user to view, edit and otherwise manage a generic connector |
To assign a menu item to a user group, do the following:
Log in to the Administrative and User Console as an administrator.
Click User Groups then Manage.
Search to find the group to which you want to assign a menu item.
Select the group name.
From the additional details menu, select Menu Items.
Click Assign Menu Items. The Assign Menu Items page appears.
From the Assign Menu Items page, select the Assign option for any menu item that you want to assign to the selected group.
Note:
If there are more items than are displayed in the table, click Next to view the rest of the items.Click Assign.
Click Cancel to return to the Assign Menu Items page.
or
Click Confirm Assign.
The items are added to the group users the next time they log in.
To remove a menu item from a user group, do the following:
Log in to the Administrative and User Console as an administrator.
Click User Groups, then click Manage.
Search to find the group from which you want to remove the menu item.
Click the group name.
From the Additional Details menu, select Menu Items.
Select the Delete option for each of the desired menu items.
Highlight the Administrative and User Console menu item you wish to prevent the user group from accessing.
Click Delete.
Click Confirm Delete.
To rename a menu item, do the following:
In order to change the menu group or item names, only the xlWebAdmin.properties file or locale-specific file (such as the xlWebAdmin_jp.properties file for Japanese) needs to be changed. No change is required in the database or code.
Identify the group item name that needs to be changed.
Get the class name of that menu item from the system using the Form Information form in the client.
For example, for the menu item Request New Resources from My Resources, the class name is My Resources.Request New Resources. This name is in the database in the WIN
table. This menu item shows that the menu group code is My Resources and the menu item code is Request New Resources.
Record the menu group and menu item codes, and open the xlWebAdmin.properties
file.
Search for the property name in the xlWebAdmin.properties
file.
Change the Right Hand Side (RHS) value of this property to the new label. This changes the name of the menu group.
In the xlWebAdmin.properties
file, the property name for a menu item display label has the form menuItem.menu group code.menu item code
with the spaces replaced by hyphens. For menu item with code Request New Resources under menu group with code My Resources, the property name is menuItem.My-Resources.Request-New-Resources
.
Locate the property name in the xlWebAdmin.properties
file.
Change the RHS value of this property to the new label. This changes the name of the menu item.