Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documentation
• Conventions

1 Introduction to Oracle Authorization Policy Manager

• 1.1 Audience and Prerequisites
• 1.2 What Is Oracle Authorization Policy Manager?
• 1.3 The Big Picture
  • 1.3.1 Installing and Configuring Oracle Authorization Policy Manager
    • 1.3.1.1 Installation
    • 1.3.1.2 High Availability
    • 1.3.1.3 SSL
    • 1.3.1.4 Loggers

2 The OPSS Authorization Model

• 2.1 The Basic Security Artifacts
• 2.2 External Roles
• 2.3 The Policy Model
  • 2.3.1 Application Role
  • 2.3.2 Principal
  • 2.3.3 The Resource Catalog
    • 2.3.3.1 Resource Type
    • 2.3.3.2 Resource
    • 2.3.3.3 Permission and Entitlement
  • 2.3.4 Application Policy
  • 2.3.5 Role Categories

3 Getting Started with Oracle Authorization Policy Manager

• 3.1 The Three Major Tabs
  • 3.1.1 The Authorization Management Tab
  • 3.1.2 The System Configuration Tab
  • 3.1.3 The Policy Upgrade Management Tab
• 3.2 The Welcome Page
• 3.3 The Navigation Panel
• 3.4 Finding Artifacts with a Simple Search
• 3.5 Online Help
• 3.6 Some Frequently Used Operations

4 Querying Security Artifacts

• 4.1 Searching External Roles
• 4.2 Searching Application Roles
• 4.3 Searching Application Resource Types
• 4.4 Searching Application Resources
• 4.5 Searching Application Entitlements
• 4.6 Searching Application Policies
  • 4.6.1 Finding Application Policies that Match Entitlements or Resources
  • 4.6.2 Finding Application Policies that Match Principals
• 4.7 Searching Data Role Templates
• 4.8 Reusing Search Parameter Values

5 Managing Security Artifacts

• 5.1 Managing Application Security Artifacts
  • 5.1.1 Managing Application Roles
    • 5.1.1.1 Creating a Role
    • 5.1.1.2 Modifying a Role
  • 5.1.2 Managing Application Resource Types
    • 5.1.2.1 Creating a Resource Type
    • 5.1.2.2 Modifying a Resource Type
  • 5.1.3 Managing Application Resources
    • 5.1.3.1 Creating a Resource
    • 5.1.3.2 Modifying a Resource
  • 5.1.4 Managing Application Entitlements
    • 5.1.4.1 Creating an Entitlement
    • 5.1.4.2 Modifying an Entitlement
  • 5.1.5 Managing Application Policies
    • 5.1.5.1 Creating a Policy
    • 5.1.5.2 Modifying a Policy
  • 5.1.6 Managing Application Role Categories
• 5.2 Viewing the External Role Hierarchy
• 5.3 Managing the Application Role Hierarchy
  • 5.3.1 Roles that an Application Role Inherits
  • 5.3.2 Roles that Inherit an Application Role
• 5.4 Mapping Application Roles to an External Role
• 5.5 Mapping External Roles to an Application Role

6 Delegated Administration

• 6.1 Delegated Administrators
• 6.2 Managing Delegated Administrators
  • 6.2.1 Managing Delegated Administrators
  • 6.2.2 Managing the Applications Assigned to a Delegated Administrator
  • 6.2.3 Managing the External Roles Mapped to a Delegated Administrator

7 Upgrading Oracle Fusion Applications Policies

• 7.1 Overview
  • 7.1.1 Terminology
  • 7.1.2 Upgrading Process Overview
• 7.2 Prerequisites to Patching Policies
• 7.3 The Policy Upgrade Management Tab
• 7.4 Analyzing Patch Differences
• 7.5 Resolving Patch Differences
  • 7.5.1 Changes and Conflicts
  • 7.5.2 Resolving Changes and Conflicts
• 7.6 Applying a Patch

8 Customizing the User Interface

• 8.1 Customizing Oracle Authorization Policy Manager
• 8.2 Customizing Headers, Footers, and Logo
• 8.3 Customizing Color Schemes
• 8.4 Customizing the Login Page

9 Internationalization

• 9.1 Language Support

10 Oracle Fusion Applications Data Role Templates

• 10.1 Prerequisites for Using Templates
• 10.2 Template Overview
• 10.3 Creating a Template
• 10.4 Running a Template
  • 10.4.1 Running Templates Programmatically
• 10.5 Updating a Template
• 10.6 Importing and Exporting a Template

11 Managing Oracle Fusion Applications Data Security Policies

• 11.1 Database Resources and Policies Overview
  • 11.1.1 Prerequisites and Best Practices for Creating Data Security Policies
  • 11.1.2 Process Overview for Creating Data Security Policies
• 11.2 Searching Database Resources and Policies
  • 11.2.1 Searching Database Resources
  • 11.2.2 Locating Policies Associated with a Database Resource
• 11.3 Managing Database Resources
  • 11.3.1 Specifying Database Resource Column Details
    • 11.3.1.1 Specifying the Primary Key Columns of the Policy's Database Resource
    • 11.3.1.2 Filtering Columns of the Policy's Database Resource
  • 11.3.2 Managing Database Resource Conditions
  • 11.3.3 Managing Database Resource Actions
• 11.4 Managing Data Security Policies
  • 11.4.1 Creating a Data Security Policy
  • 11.4.2 Modifying a Custom Data Security Policy

A Using an OpenLDAP Identity Store

• A.1 Using an OpenLDAP Identity Store

B Troubleshooting Oracle Authorization Policy Manager

• B.1 Unable to Login
• B.2 Need Further Help?

Index