Appendix: PeopleSoft-Delivered Security Data

This appendix summarizes the PeopleSoft-delivered security data and discusses:

Click to jump to parent topicSummary of Delivered Security Data

The following list provides an overview of important security information:

Note. When enabling role grant security, you must include the roles PeopleSoft User and PAPP_USER. These roles are required for access to base portal functionality.

Click to jump to parent topicPermission Lists and Roles Cloned When Creating Sites

When you create sites, the system clones and uses special permission lists and roles on the site. This section describes:

Click to jump to top of pageClick to jump to parent topicPermission Lists Cloned When Creating Sites

When you create a site, the system clones and uses the following permission lists on the site content and folder definitions. The Installation Options page lists which permission lists to clone during site creation. These are delivered as PAPP5000, PAPP5060, PAPP5070. The generated permission lists are listed in the following table, where XXX represents the site name.

Permission List

Description

SITE_XXX_ADM

Gives site-specific access for the site administrator to set navigation defaults, set security access to the site, and review and override Branding elements for the site. It is generated by cloning PAPP5000 during site creation.

SITE_XXX_PUB

Gives site-specific access for publishing menu items in the navigation of the site. It is generated by cloning PAPP5060 during site creation.

SITE_XXX_VWR

Gives site-specific access to view the site. It is generated by cloning PAPP5070 during site creation.

Click to jump to top of pageClick to jump to parent topicRoles Cloned When Creating Sites

When you create a site, the following roles are generated and assigned site-specific permission lists. These roles are attached to the appropriate user who is assigned security access to the site.

Role

Description

SITE_XXX_ADM

Gives site-specific access for the site administrator to set navigation defaults, set security access to the site, and review and override Branding elements for the site. It contains the matching permission list SITE_XXX_ADM which is generated during site creation.

SITE_XXX_PUB

Gives site-specific access for publishing menu items in the navigation of the site. It contains the matching permission list SITE_XXX_PUB which is generated during site creation.

SITE_XXX_VWR

Gives site-specific access to view the site. It contains the matching permission list SITE_XXX_VWR which is generated during site creation.

See Also

Permission Lists with Special Uses

Click to jump to parent topicPermission Lists

This section describes:

Click to jump to top of pageClick to jump to parent topicPermission Lists with Special Uses

The following table describes permission lists that have special meaning and usage in PeopleSoft Enterprise Portal.

Permission List

Description

PAPP9000

Includes every delivered PeopleSoft Enterprise Portal object (excluding Pagelet Wizard and Resource Finder objects). This permission list is included in the role PAPP_SYSTEM_ADMIN.

PAPX9000

Includes every delivered Resource Repository object. This permission list is included in the role PAPP_SYSTEM_ADMIN.

PAPP0000

Required to access the PeopleSoft Enterprise Portal base features. This permission list is included in the roles PAPP_USER and PAPP_GUEST.

PAPX0000

Required to access the Resource Repository base features. This permission list is included in the roles PAPP_USER and PAPP_GUEST.

PAPP0001

Required for the Guest tab. This permission list is included in the role PAPP_GUEST.

PAPP0002

Required for Personalize Content and Layout links on the homepage and the My Links feature in the portal header. This permission list is included in the role PAPP_USER.

   

PAPQnnnn

Required for access to Internal Controls Enforcer Portal items in the left navigation and for access to Internal Controls Enforcer pagelets.

PAPJnnnn

Required for access to EnterpriseOne applications from the Enterprise Portal.

PTPT1000

Required to access the PeopleTools base portal features. This permission list is included in the PeopleTools role PeopleSoft User.

If you use a cloned version of this permission list, make sure to retain the needed iScripts and component interfaces security required to access the portal and end-user base access items, such as changing a password.

PTPT1400

Required to access the PeopleTools base portal features for a guest user. This permission list is included in the PeopleTools role PeopleSoft Guest.

Click to jump to top of pageClick to jump to parent topicDelivered Permission Lists

The following table lists all permission lists delivered with PeopleSoft Enterprise Portal.

Permission List

Description

Usage

PAPP0000

Base PeopleSoft Enterprise Portal objects.

Base access to the navigation and template iScripts (Web Libraries), portal search results page, Take a Survey page, Workspace error access page, Site Manager error access page, template pagelets (Content Ratings, Related Information, Related Contacts), menu item file attachment viewer pages, and the Language Selection pagelet. Note: This permission list is required for all users, including GUEST.

PAPP0001

Base Guest objects.

Access the homepage tab Guest Page and the Sign On pagelet.

Note. This permission list is required for the GUEST user.

PAPP0002

Logged in user access.

Access the homepage Personalize Content and Layout pages, and My Links pages, the user profile pages, and the Related Discussion Template pagelet. Required access for all users, except Guest.

PAPP0010

PeopleTools Notification.

Access the email notification pages from the PeopleTools Notify button.

PAPP1000

External News pagelets.

Access the integrated External News feed and RSS News pagelets.

PAPP1100

Company News pagelets.

Access the News Publication pagelets, pagelet personalization, and pagelet enhancement pages for viewing sections and published articles.

PAPP1110

Company Promotions pagelet.

Access the Company Promotions pagelet and pagelet personalization.

PAPP1120

Web Magazine pagelet.

Access the Web Magazine pagelet and Web Magazine viewing.

PAPP1130

Promotions by Role pagelet.

Access the Promotions by Role pagelet.

To access the results page, roles with this permission list must also include permission list PAPP2030 (Manage Company Promotions).

PAPP1140

My Managed Content Pagelet

Access the My Managed Content pagelet and pagelet personalization.

Note. To access the links on this pagelet, roles with this permission list must also include permission list PAPP2010 (Access Content Management).

PAPP1150

My News Content Pagelet

Access the My News Content pagelet.

Note. To access the links on this pagelet, roles with this permission list must also permission list PAPP2010 (Access Content Management). To access the Review for Publishing link, roles with this permission link must also include permission list PAPP2020 (Publish News Articles).

PAPP1160

Submitted Promotions pagelet.

Access the Submitted Promotions pagelet.

To access the links on this pagelet, roles with this permission list must also include permission list PAPP4110 (Submit Promotion Items).

PAPP1170

Poll Pagelet

Access published Poll pagelets to respond to the current poll question.

Note. Users must be included in the Poll definition's respondent roles to respond or view any given poll. Users do not need member privileges or access to the Poll definition in order to respond to a poll question.

PAPP1200

Tasks pagelet.

Access the Integrated Task List pagelet, pagelet personalization, pagelet enhancement pages, and to the PeopleTools Worklist and Worklist Details pages.

Note. To access links for action items, roles with this permission list must also include permission list PAPP5600 (Access Action Items).

PAPP1210

View Community Calendars

View Community Calendars in display-only mode. Access the Community Calendar search results page. Calendar access is restricted by member privileges on the Calendar definition.

Note. This permission list is required to view the links on the Pagelet Wizard generated Community Calendar pagelets.

PAPP1300

Email/Calendar pagelets.

Access the Email and Calendar pagelets and pagelet personalization pages.

PAPP1500

Internet Information pagelets.

Access the Internet HTML pagelets and associated component interfaces and web libraries.

PAPP1600

Saved Searches pagelets.

Access the Saved Searches pagelets, pagelet personalization, and pagelet enhancement Search Results pages.

PAPP2000

Access Published Content

Access the Content Management published content viewer pages, hierarchy viewer pages, and Browse by Category viewer pages. Content and folder access is restricted by member privileges on the Folder definition, or content viewer roles on the Content definition, or folder viewer roles on the Folder definition.

Note. This permission list is needed for all users when Content Management folders and content items are published as menu items in the left navigation or published as pagelets or available from the portal search.

PAPP2010

Access content management.

Access the hierarchy management pages, hierarchy search pages, content definition pages, folder definition pages, the My Content Status pages, and the content web services. Content Management access and actions are restricted by member privileges on the Folder definition, or to users listed as Top Administrators for the Content Management feature.

PAPP2020

Publish News Articles

Access the News Publications Publish Articles page, the Unpublish Articles page, and the Choose Top Stories page.

Note. To access the pages for viewing and editing content, roles with this permission list must also include permission list PAPP2010 (Access Content Management)

PAPP2025

Administer News content.

Administer News Publication articles and images. These pages allow the user to delete, add, and update news articles and images, ignoring the privilege set or status of the content.

This permission list should only be granted to high-level content administrators.

To access the pages for viewing and editing news content, roles with this permission list must also include permission list PAPP2010 (Access Content Management).

PAPP2030

Manage Company Promotions.

Manage Company Promotions by publishing submitted promotions, and inquiring on viewer roles assigned to Company Promotion items.

PAPP2035

Administer Company Promotions.

Administer Company Promotions by creating and updating promotion targets and categories.

PAPP2045

Run Categorization Spider.

Run the Categorization Spider process to pull categories and content into the Categorized Content feature.

Note. Users with this permission list should also be listed as a Top Administrator for the Categorized Content feature.

PAPP2050

Administer Content Management.

Administer Managed Content by assigning top category administrators, creating privilege sets, assigning viewer roles, and defining attachment locations.

This permission list should only be granted to high-level content administrators.

PAPP2070

Review Content Access/Location.

Review Content stored in the Content Management system. The inquiry lists where the content can be accessed, who can access the content, and a preview of the content for users who are viewing members for this content. Access the Render Content URL page to generate the content's rendering URL for use in third-party applications.

PAPP2080

Query Content Management

Access the Content Management tables and views on the Enterprise Portal query tree.

Note. This permission list should only be granted to high level content administrators to limit access to all content.

PAPP2300

Administer External News.

Administer External News by creating and updating External News publication pagelets, providers, groups, categories, articles, and news feed batch process.

PAPP2310

Manage External News.

Manage External News by changing the publish and expire dates of news feed articles to remove offensive articles.

PAPP2700

Administer Web Magazine.

Administer Web Magazine by creating and updating Web Magazine publications, issues, sections, categories, images, and articles.

PAPP2800

Administer Integrated Tasks.

Administer the Integrated Task pagelet by access to the PeopleTools Worklist, Worklist Details, and Worklist administration pages.

PAPP3100

Administer Weather pagelet.

Administer Weather pagelet by getting a customer ID or running the Update City List process.

PAPP3200

Administer HTML pagelets.

Administer HTML pagelets by creating and registering HTML pagelets.

PAPP3300

Administer Email/Calendar pagelet.

Administer the Email and Calendar pagelets by defining the email and calendar system and user values.

PAPP3550

Administer integration content.

Access the SOAP to component interface iScripts (WEBLIB) web services.

PAPP3560

Administer integration workspaces.

Access the Collaborative Workspace component interface web services.

PAPP4000

Query Portal Registry

Access PeopleSoft Query and the Portal Registry navigation and homepage tables on the Enterprise Portal query tree.

PAPP4001

Run portal registry processes.

Access the run control pages and processes for Registry Load, Menu Import, Portal Security Sync, and Sync Navigation Collections.

PAPP4002

Administer Homepage Tabs.

Administer the Homepage Tab Layout and Content definition.

Note. The user must have the Portal Administrator role or have the site-specific administrator role to modify the tab definition from the Configure Homepage menu item.

PAPP4003

Administer Portal Settings

Administer the Portal General Settings page to set the site and node templates, the folder navigation options, and the portal search options.

PAPP4004

Run Processes.

Access to Process Monitor and the delivered process groups. Use as the process profile permission list on the User Profile definition page.

PAPP4005

Publish Pagelets to Sites.

Access the component to copy pagelet content references from one site to another.

PAPP4006

Run Base User Processes

Access the delivered base user process group for alert and subscribed notifications.

Note. Use this permission list as the process profile permission list on the User Profile definition page for end-users.

PAPP4010

Administer Pagelet Personalization.

Administer Pagelet Personalization by setting any user's preferences for the following pagelets: Weather, External News, RSS News, Stock Quotes, Community Calendars, Managed Content, Discussion Forums, and Pagelet Wizard pagelets.

PAPP4020

Manage Menu Item Requests.

Manage menu item requests by approving or rejecting requests, and defining the users notified by email for submitted requests.

PAPP4025

Administer Menu Item Requests.

Administer menu item requests by approving or rejecting requests, registering approved requests, and defining the users notified by email for submitted requests.

PAPP4040

Administer Privilege Sets.

Administer the Privilege Set definitions for Collaborative Workspaces, Community Calendars, Action Items, Polls, and Discussion Forums.

Note. Use permission list PAPP2050 (Administer Content Management) to administer the Content Management Privilege Sets

PAPP4050

Administer Portal Search.

Administer Search by defining search indexes, search groups, search run controls and search notification.

Note. Search groups determine which search collections are associated with a specific search results page.

PAPP4060

Administer Viewer Roles

Administer Viewer Roles by listing the roles available to secure News Publication articles and Company Promotion items.

Note. This permission list should only be granted to high level content administrators.

PAPP4080

Query Navigation.

Access the Portal Registry navigation tables on the Enterprise Portal query tree.

PAPP4100

Submit Menu Item requests

Submit Menu Item Requests to request items to be added to the portal navigation.

PAPP4110

Submit promotion items

Submit company promotion items.

PAPP4120

Submit news articles

Submit News Articles for publication.

Note. This permission list is needed to enable the Submit Article link on News Publication pagelets that allow submits from the pagelet.

PAPP4130

Take a survey

Take a survey. Access is limited to the survey definition's distribution group.

PAPP4200

Logon Statistics pagelet

Access the Logon Statistics pagelet.

PAPP4300

Manage Content Ratings

Manage Content Ratings by creating content rating questions, assigning menu items to the content rating definition, and viewing the respondent results of the content rating questions.

PAPP4310

Access Poll definitions.

Access Poll Definitions. Poll Definition access and actions are restricted by member privileges on the Poll Definition.

PAPP4350

Administer Content Ratings.

Administer Content Ratings by assigning Result Viewers, setting non registered URL's, and inquiring on the invisible iTracker results.

PAPP4355

Administer Poll definition.

Administer Poll Definitions by assigning member privileges or deleting a poll. These Poll Definition actions are not restricted by member privileges.

PAPP4360

Create Poll Definitions

Create Poll Definitions and assign member privileges to the created poll.

PAPP4400

Access Account Signon Utility.

Access the Account Signon Utility by updating the stored user ID and password.

PAPP4450

Administer Account Signon Utility.

Administer the Account Signon Utility by creating the Sign On forms and URLs to access external secured sites.

PAPP4500

Administer portal options.

Define installation, system, and registry options.

PAPP4600

Administer context assignment.

Administer Context Manager by assigning the default template pagelets as well as the individual template pagelets to a specified Menu Item.

PAPP4680

Query Context Manager

Access the Context Manager tables and views on the Enterprise Portal query tree.

PAPP4700

Manage Related Content.

Manage Related Content by adding Related Content online to Menu Items that are assigned a Related Content template pagelet.

This permission list is for general page access. Access to add content to a Menu Item/Related Content publication combination is restricted via assigned Topic Experts as well as access to the Menu Item in the navigation.

PAPP4710

Review Related Content

Access the Related Content Inquiry Pages listing content according to the assigned Topic Expert or the Menu Item.

PAPP4750

Administer Related Content

Administer Related Content by creating or updating Related Content Publications and assigning the Topic Experts to add the content.

PAPP4800

Discussion Forums pagelet

Access the Discussion Forums pagelet and pagelet personalization. The displayed forums are limited by member privileges on the Forum definition.

PAPP4810

Access Discussion Forums

Access Discussion Forums. Discussion Forum access and actions are restricted by member privileges on the Forum definition.

PAPP4820

Access Guest Discussion Forums

View Discussion Forums in display-only mode. Access is restricted by member privileges on the Forum definition.

PAPP4850

Administer Discussion Forums

Administer Discussion Forums by assigning member privileges, editing metadata or deleting a Forum. These Discussion Forum actions are not restricted by member privileges.

PAPP4855

Manage Related Discussions

Administer Related Discussions template pagelet by assigning moderators. Contributor and viewer privileges are automatically granted to all users who can access the Menu Item that contains the related discussion.

PAPP4860

Create Discussion Forums

Create Discussion Forums and assign member privileges to the created Forum.

PAPP4910

Define pagelets with the Wizard.

Create, delete, and clone Pagelet Wizard pagelets definitions. Pagelet Wizard access and actions are restricted by the security on the Pagelet Wizard definition.

PAPP4920

Define Pagelet Wizard data.

Create and update Pagelet Wizard footers, headers, and categories and review existing pagelet definitions.

PAPP4950

Administer Pagelet Wizard

Create and update Pagelet Wizard data types, display formats, transform types, and pagelet XSL. Create Data Mover scripts to export and import pagelet definitions.

PAPP5000

Administer Site - Template.

This permission list is the Site Manager template permission list for site administrators. This permission list is cloned for each created site. It grants site-specific access to the following: define site navigation defaults, define site security, define visible site features, configure homepage display, override allowed branding elements, view Branding queries, and publish pagelets to multiple sites

PAPP5050

Create sites / Allow overrides.

Create portal sites and assign allowed Branding overrides using the Site Wizard.

PAPP5060

Publish in Sites - Template.

This permission list is the Site Manager template permission list for site publishers. This permission list is cloned for each created site. It grants site-specific access to the following: manage a site's navigation by publishing men items to the site, update the content IDs used in existing Pagelet Wizard Content Management pagelets, create Action Item Lists, create Community Calendars, create and access Poll Definitions, create and access Content Management, and create Discussion Forums.

Note. Users with this permission list should also have the following permission lists (delivered on the base user role PAPP_USER): PAPP4810 (Access Discussion Forums), PAPP5600 (Access Action Items), PAPP1210 (View Community Calendars) and PAPP5500 (Access Community Calendars).

PAPP5070

View Sites - Template.

This permission list is the Site Manager template permission list for site viewers. This permission list is cloned for each created site. It is a placeholder permission list for the site-specific home link to access the created site.

PAPP5100

Maintain Branding roles.

Assign security roles to Branding themes.

PAPP5150

Maintain Branding data.

Create and maintain Branding themes, headers, and footers.

PAPP5160

Maintain Branding layouts.

Create and maintain Branding layouts.

PAPP5180

Query Branding

Access the Branding tables and views on the Enterprise Portal query tree. Access the Branding Query menu items.

PAPP5200

Manage Navigation Collections.

Manage Navigation Collections by creating and updating Navigation Collection definitions.

Note. This permission list does not grant access to delete Navigation Collections.

PAPP5250

Administer Navigation Collections.

Administer Navigation Collections by creating, updating and deleting Navigation Collections definitions.

PAPP5300

Access Workspaces.

Access Collaborative Workspaces. Access is granted to: links, members, documents, polls, search and browsing. Workspace access and actions are restricted by member privileges on the workspace definition. Note: Users with this permission list should also have the following permission lists (delivered on the base user role PAPP_USER): PAPP4810 (Access Discussion Forums), PAPP5600 (Access Action Items), PAPP1210 (View Community Calendars) and PAPP5500 (Access Community Calendars).

PAPP5350

Administer Workspaces.

Create and administer Collaborative Workspaces and Templates. Administer Workspace categories, and batch import Workspaces. Administer existing Workspaces by activating, deactivating, or deleting a workspace. These Workspace actions are not restricted by member privileges on the Workspace definition. Workspace access is restricted by member privileges on the Workspace definition.

PAPP5360

Manage Workspaces.

Create and manage Collaborative Workspaces. Manage existing Workspaces by activating, deactivating, or deleting a workspace. Workspace access and actions are restricted by member privileges on the Workspace definition.

PAPP5400

Access My Alerts.

Access to the user-defined alerts.

PAPP5450

Administer Alerts.

Administer Alerts Notifications including the Notification batch process, and defining features, email options, and alert subscriptions.

PAPP5500

Access Community Calendars.

Access Community Calendars. Calendar access and actions are restricted by member privileges on the Calendar definition.

PAPP5550

Administer Community Calendars.

Administer Community Calendars by assigning member privileges or deleting a Calendar. These actions are not restricted by member privileges.

PAPP5560

Create Community Calendars.

Create Community Calendars and assign member privileges to calendars.

PAPP5600

Access Action Items

Access Action Items. Action Item access and actions are restricted by member privileges on the List definition or the assigned user.

PAPP5650

Review Action Items

Review Action Items. Action Item access and actions are restricted by member privileges on the List definition or the assigned user.

PAPP5655

Administer Action Items.

Administer Action Item Lists by assigning member privileges or deleting a List. These actions are not restricted by member privileges.

PAPP5660

Create Action Item list.

Create Action Item lists and assign member privileges.

PAPP9000

All Enterprise Portal objects.

Access all Enterprise Portal-owned objects excluding Resource Finder

PAPP9900

System setup data.

Access to the pages displaying system data that should not be changed or customized.

PAPP9999

Demo examples and testing.

Access to delivered demo, testing, and SDK material.

PAPX0000

Base Repository objects.

Base access to Resource Finder profile display and the Related Resources template pagelets. Required access for all users, including Guest.

PAPX1000

Resource Finder pagelet.

Access the Resource Finder pagelet and pagelet enhancement Search Results pages.

PAPX2050

Manage Resource profiles.

Manage Resource profiles by updating or creating a profile definition (create an Employee profile type).

PAPX2060

Administer Repository.

Administer Resource Finder Repository by creating profile attributes or entering a profile not obtained from a feed.

PAPX2070

Administer Repository Search.

Administer Resource Finder Repository Search Collections.

PAPX9000

All Repository objects.

Access to all Resource Finder Repository objects.

PAPX9999

Demo examples and testing.

Testing Resource Finder application classes.

Click to jump to parent topicRoles

This section describes:

Click to jump to top of pageClick to jump to parent topicRoles with Special Uses

The following table lists roles that have special meaning and usage in PeopleSoft Enterprise Portal.

Note. In Enterprise Portal 9, the base object permission lists have been streamlined to include only those components that all users need and are cannot access directly from the left navigation. Additional permission lists have been created for some components and added to the PAPP_USER role. The components My Discussion Forums, My Alerts, and Browse by Category were removed from the PAPP000n permission list. This enables you to disable a given feature by removing the feature's base permission list from the PAPP_USER role.

Role

Description/Usage

PAPP_USER

Must be assigned to every user ID, except the default signon user ID GUEST.

PeopleSoft User

Must be assigned to every user ID, except the default signon user ID GUEST.

PAPP_GUEST

Must be assigned to the default signon user ID GUEST.

PeopleSoft Guest

Must be assigned to the default signon user ID GUEST.

PAPP_SYSTEM_ADMIN

Used only during installation and implementation and is assigned to VP1 and PS.

PeopleSoft Administrator

Used only during installation and implementation and is assigned to VP1 and PS. It gives access into all the pages regardless of the user's assigned permission lists.

Portal Administrator

Used in the production system. It gives access to the portal registry structure (content references and folder references), but not the actual component/pages and pagelets.

Be aware that users who have this role will see all pagelets and all menu items (all content references), but they may not be able to access the actual pages.

If a user with this role attempts to access a pagelet or a page where they do not have that pagelet or pages's security, a "You are not authorized" error message displays.

Click to jump to top of pageClick to jump to parent topicRoles Associated with Major PeopleSoft Enterprise Portal Areas

The major areas within PeopleSoft Enterprise Portal are associated with roles. These areas and roles contain overlap. The major areas and roles are shown in the following table.

Area

Role

Description

Content

PAPP_CONTENT_ADMIN

Administer internally-created and external content, including External News, Internal News, Context Manager and Content Management.

Navigation

PAPP_NAVIGATION_ADMIN

Administer how users navigate the portal sites, including Menu Items requests, manage navigation, Portal Registry Load, and Navigation Collections. Users who have this role should also have the role of Portal Administrator.

Portal sites

PAPP_PORTAL_ADMIN

Administer the portal and portal sites, including install options, site creation, Logon Statistics, Search, Menu Items requests, manage navigation, Portal Registry Load, Navigation Collections, Collaborative Workspaces, Branding, Account Signon Utility, pagelet Personalization, and Context Manager. Users who have this role should also have the role of Portal Administrator.

Presentation

PAPP_DISPLAY_ADMIN

Administer the presentation of portal sites, including Branding, Pagelet Wizard headers/footers, default templates, and homepage tab layouts.

Resource Finder

PAPX_REPOSITORY_ADMIN

Administer the Resource Finder Repository feature.

Security

PAPP_SECURITY_ADMIN

Administer portal row-level security, including Manage Content privilege sets, Viewer roles, Related Context topic experts, Discussion moderators, pagelet Personalization, and Menu Item Inquiry. Users who have this role may also have the role of Security Administrator.

Integration

PAPP_INTEGRATION_ADMIN

Administer integration content in the enterprise portal, including external content, Internet content, email, account signon utility, and Pagelet Wizard.

Click to jump to top of pageClick to jump to parent topicViewer Roles

The following roles are delivered as viewer roles, and are used by Content Management to secure individual content items for viewing. To change which roles are designated as viewer roles, select Portal Administration, Content, Viewer Roles.

Role

Usage / Long Description

PAPP_CUSTOMER

Access to applicable customer homepage pagelets and assigned content viewing.

PAPP_EMPLOYEE

Access to applicable employee homepage pagelets, assigned content viewing, submit pages (promotions, articles, menu items), and edit account signon information.

PAPP_GUEST

Access to applicable Guest homepage pagelets, assigned content viewing, Guest homepage tab, and base PeopleSoft Enterprise Portal access.

PAPP_SUPPLIER

Access to applicable supplier homepage pagelets and assigned content viewing.

Click to jump to top of pageClick to jump to parent topicDelivered Roles

The following table lists the roles delivered with PeopleSoft Enterprise Portal.

Role

Description

Usage/Long Description

PAPP_ACCOUNT_SIGNON_ADMIN

Account signon administrator.

Administer the User Account Signon Utility.

PAPP_AUTHOR

Content author.

Access the submit pages for News, Promotions, and Menu Items. Access Content Management common pages, where the privilege sets limit the access.

PAPP_BRANDING_ADMIN

Branding administrator.

Administer the Branding feature.

PAPP_COMPANY_PROMOTIONS_ADMIN

Company Promotions administrator.

Administer the Company Promotions feature.

PAPP_CONTCATG_ADMIN

Content Categorization administration.

Administer the Content Categorization feature manually.

PAPP_CONTENT_ADMIN

Content administrator.

Administer internally created and external content, including External News, Internal News, Context Manager and Content Management.

PAPP_CONTENT_MANAGER

Content Manager.

Manage internally created and external content, including External News, Internal News, Context Manager and Content Management.

PAPP_CONTENT_RATINGS_ADMIN

Content Ratings administrator.

Administer the Content Ratings related context feature.

PAPP_CONTENT_USER

Content Management user.

Access Content Management common pages, where assigned privilege sets limit the access. Access the Managed Content pagelet, the News Article In-Box pagelet, and the Submit News Article page. Use this role as a general access role, then create additional roles to assign to the privilege sets within each created category.

PAPP_CONTEXT_ADMIN

Related Context administrator.

Administer the Context Manager feature including the contextual content.

PAPP_CONTEXT_MANAGER

Related Context Manager.

Manage the contextual content used with the Context Manager feature.

PAPP_CUSTOMER

Portal Customer.

Access to applicable Customer homepage pagelets and assigned content viewing.

PAPP_DEMO_ADMIN

Demo/Test Items administrator.

Sample. Administer the sample features, including the Demo Item pagelet and Context Manager Item tester.

PAPP_DISCUSSIONS_ADMIN

Discussions administrator.

Administer Related Discussions and the Discussions Forum feature.

PAPP_DISPLAY_ADMIN

Presentation administrator.

Administer the presentation of the portal sites, including Branding, Pagelet Wizard headers/footers, default templates, and homepage tabs layout.

PAPP_EMAIL_CALENDAR_ADMIN

Email / Calendar administrator.

Administer the Email and Calendar pagelets.

PAPP_EMPLOYEE

Portal employee.

Access to applicable employee homepage pagelets, assigned content viewing, submit pages (Promotions, Articles, Menu Items), find a resource, and edit account signon information.

PAPP_EXTERNAL_NEWS_ADMIN

External News administrator.

Administer the External News pagelet.

PAPP_GUEST

Guest user access.

Access to applicable Guest homepage pagelets, assigned content viewing, Guest homepage tab, and base PeopleSoft Enterprise Portal access.

PAPP_GUEST_ADMIN

Guest user administrator.

Administer pagelet Personalization for a Guest user, or any user, and access the Guest homepage tab.

PAPP_INSTALL_OPTIONS_ADMIN

Install options administrator.

Administer the Install Options for the PeopleSoft Enterprise Portal features.

PAPP_INTEGRATED_TASKS_ADMIN

Integrated tasks administrator.

Administer the Tasks pagelet.

PAPP_INTEGRATION_ADMIN

Integration administrator.

Administer integration content in the PeopleSoft Enterprise Portal, including External Content, Internet Content, Email, Account Signon Utility, and Pagelet Wizard.

PAPP_INTERNET_PAGELETS_ADMIN

Internet pagelets administrator.

Administer Internet pagelets.

PAPP_LDAP

LDAP default access.

Contains the required permission lists needed to access the Enterprise Portal database. Use as the default role for LDAP access.

PAPP_LOGON_STATISTICS_ADMIN

Logon statistics administrator.

Review user logon statistics through the User Logon Statistics pagelet.

PAPP_NAVIGATION_ADMIN

Navigation administrator.

Administer how users navigate the portal, including, Menu Items requests, Portal Registry Load, and Navigation Collections.

Users who have this role should also have the Portal Administrator role.

PAPP_NAVIGATION_MANAGER

Navigation manager.

Manage submitted menu items and Navigation Collections.

PAPP_NEWS_PUBLICATIONS_ADMIN

News Publication administrator.

Administer the Content Management News Publication feature.

PAPP_PAGELET_ADMIN

Pagelet administrator.

Administer the creation of pagelets using pagelet wizard. Administer Navigation Collections. Administer Integration pagelets. Assign user pagelet personalization.

Users who have this role should also have the Portal Administrator role and the Pagelet User role.

PAPP_PAGELET_USER

Pagelet access user.

Access the homepage pagelets.

To configure the layout of a homepage tab, the user must be either assigned the Portal Administrator role, or the user must have access to PAPP4002 as well as all of the homepage pagelet permission lists on the homepage tab.

PAPP_PORTAL_ADMIN

Portal administrator.

Administer the portal and portal sites, including install options, site creation, Logon Statistics, Search, Menu Items requests, navigation collections, Portal Registry Load, Branding, Account Signon Utility, pagelet Personalization, alerts and Context Manager.

Users who have this role should also have the Portal Administrator role.

PAPP_PUBLISHER

Content publisher.

Manage, review, and publish content to a viewing audience in the New Publications and Company Promotions features.

PAPP_RELATED_CONTENT_ADMIN

Related Content administrator.

Administer features of Context Manager.

PAPP_SEARCH_ADMIN

Search administrator.

Administer the portal Search feature.

PAPP_SECURITY_ADMIN

Security administrator.

Administer portal row-level security, including Managed Content privilege sets, viewer roles, related context topic experts, Discussion moderators, pagelet Personalization, and Menu Item inquiry.

Users who have this role may also have the Security Administrator role.

PAPP_SITE_MGMT_ADMIN

Site Management administrator.

Administer the Site Management feature, including creating sites and site Branding.

Users who have this role should also have the Portal Administrator role.

PAPP_SUPPLIER

Portal supplier.

Access to applicable supplier homepage pagelets and assigned content viewing.

PAPP_SYSTEM_ADMIN

PeopleSoft Enterprise Portal system administrator.

Access to all PeopleSoft Enterprise Portal objects.

PAPP_USER

PeopleSoft Enterprise Portal user.

Access the base objects in the PeopleSoft Enterprise Portal. Every user in the system, other than Guest, must be assigned this role along with the PeopleSoft User role.

PAPP_WEB_MAGAZINE_ADMIN

Web Magazine administrator.

Administer the Web Magazine pagelet and content.

PAPP_WORKSPACE_ADMIN

Workspace Administrator.

Administer and create collaborative workspaces.

PAPP_WORKSPACE_MANAGER

Workspace Manager.

Manage collaborative workspaces.

PAPP_WORKSPACE_USER

Workspace User.

Access the Collaborative workspace components. Individual workspaces are also secured by members to that workspace.

PAPX_PROFILE_MANAGER

Resource profile manager.

Manage the Resource Finder profiles.

PAPX_REPOSITORY_ADMIN

Repository administrator.

Administer the PeopleSoft Enterprise Resource Finder feature.

PAPX_SEARCH_ADMIN

Profile Search administrator.

Administer the Resource Profile Search.

Click to jump to top of pageClick to jump to parent topicDelivered Roles and Associated Permission Lists

You can obtain this information online, including any security fixes, by using the delivered PeopleSoft Query PAPP_SECURITY_ROLE_PERM.

Click to jump to parent topicUser IDs

This section discusses:

Click to jump to top of pageClick to jump to parent topicUser IDs with Special Uses

The following table lists user IDs with special uses in PeopleSoft Enterprise Portal.

User ID

Description

GUEST

The default signon user.

PS

The system administrator to access all of the PeopleSoft Enterprise Portal database and the HRMS database.

VP1

The system administrator to access all of the PeopleSoft Enterprise Portal database and the FSCM, EPM, and CRM databases.

Click to jump to parent topicDelivered PeopleTools Roles

The following table shows the delivered PeopleTools roles and their associated permission lists.

PeopleTools Role

PeopleTools Permission List

Permission List Description

PeopleSoft User

PTPT1000

PeopleSoft-User.

PeopleSoft Guest

PTPT1400

PeopleSoft-Guest.

Security Administrator

PTPT1100

Maintain Security.

PeopleTools

PTPT1200

PeopleTools.

PeopleSoft Administrator

**special**

Behind-the-scenes coding.

Portal Administrator

PTPT1300

Behind-the-scenes to PeopleSoft Enterprise Portal.

Portal Manager

PTPT1600

Pagelet Wizard, Navigation Collections.

Click to jump to parent topicAdding the Portal User Roles to All User IDs

To navigate and use common features and pages, every user ID (except for the Guest user IDs) must include the delivered roles PAPP_USER and PeopleSoft User. During a PeopleTools upgrade, the role PeopleSoft User is added to all existing roles. You can update the existing user IDs to include the PAPP_USER role with the delivered PeopleSoft Data Mover script PORTAL_ADD_ROLE.DMS.

Note. Every newly created user ID should include both roles PeopleSoft User and PAPP_USER. Guest user IDs should not include these roles. After running the script, manually update the Guest user ID by replacing the PeopleSoft User role and the PAPP_USER role with the PeopleSoft Guest role and the PAPP_GUEST role.

Use PeopleSoft Data Mover to update the existing user IDs in PeopleSoft Enterprise Portal to include the necessary PAPP_USER role.

There are two ways to start PeopleSoft Data Mover:

To update the user IDs:

  1. Start PeopleSoft Data Mover and sign on to the PeopleSoft Enterprise Portal database.

  2. Open the script PORTAL_ADD_ROLE.DMS in the <PS_HOME>\scripts directory.

  3. Run the script against the PeopleSoft Enterprise Portal database.

  4. Close PeopleSoft Data Mover.

See Also

Enterprise PeopleTools 8.50 PeopleBook: Data Management, “Using PeopleSoft Data Mover”