Tables in the Roles Module

This chapter describes the tables that make up the Oracle Identity Analytics Roles module.

ROLES Table

Structure

ROLES PK ROLEKEY ROLENAME ROLEDESCRIPTION ROLECOMMENTS DEPARTMENT STARTDATE ENDDATE CUSTOMPROPERTY1 CUSTOMPROPERTY2 CUSTOMPROPERTY3 CUSTOMPROPERTY4 CUSTOMPROPERTY5 CUSTOMPROPERTY6 CUSTOMPROPERTY7 CUSTOMPROPERTY8 CUSTOMPROPERTY9 CUSTOMPROPERTY10 CREATEUSER UPDATEUSER CREATEDATE UPDATEDATE JOBCODE SERVICEDESKTICKETNUMBER STATUSKEY HIGHPRIVELEGED BUSINESSAPPROVER TECHNICALAPPROVER USERASSOCIATIONBUAPPROVER USERASSOCIATIONTECHAPPROVER TYPE_ID WORKFLOW_ID CURRENT_VERSION_ID VERSION_COUNT LAST_SYNCHRONIZED DELEGABLE

Indexes

Index PK Unique Keys PK_ROLES      ✓ ROLEKEY

Description

The roles that are designed in Oracle Identity Analytics are similar to the job functions in an organization. Each user can be associated with a role and assigned access levels. Roles are defined in the ROLES table and a unique Rolekey identifies each role. A role is assigned a ROLENAME, a ROLEDESCRIPTION, and a ROLECOMMENTS property. In addition, you can specify the department that a role is assigned to by populating the DEPARTMENT field. There are also 10 custom fields that can be used to add additional information about a role. For audit purposes, a role's CREATEUSER, UPDATEUSER, CREATEDATE, and UPDATEDATE fields are provided. The BUSINESSAPPROVER, TECHNICALAPPROVER, USERASSOCIATIONBUAPPROVER, and USERASSOCIATIONTECHAPPROVER fields are provided for Role Life Cycle Management Workflow process.

Primary Keys

PK_ROLES - primary key on column ROLEKEY

Foreign Keys

None

Indexes

None

ROLEHIERARCHY Table

Structure

ROLEHIERARCHY PK PK PK ROLEKEY PARENTROLEKEY ROLE_VERSION_ID

Indexes

Index PK Unique Keys PK_ROLEHIERARCHY      ✓ ROLEKEY, PARENTROLEKEY, ROLE_VERSION_ID

Description

Similar to Business Units, a hierarchy can exist between roles and these can be represented using the ROLEHIERARCHY table in Oracle Identity Analytics. Each role is associated with its parent in the PARENTROLEKEY field. This field contains the rolekey of the parent role.

Primary Keys

PK_ROLEHIERARCHY - composite primary key on columns ROLEKEY, PARENTROLEKEY and ROLE_VERSION_ID

Foreign Keys

None

Indexes

None

ROLE_VERSIONS Table

Structure

ROLE_VERSIONS PK ID ROLE_ID VERSION_NUMBER ROLENAME ROLEDESCRIPTION ROLECOMMENTS DEPARTMENT STARTDATE END DATE CUSTOMPROPERTY1 CUSTOMPROPERTY2 CUSTOMPROPERTY3 CUSTOMPROPERTY4 CUSTOMPROPERTY5 CUSTOMPROPERTY6 CUSTOMPROPERTY7 CUSTOMPROPERTY8 CUSTOMPROPERTY9 CUSTOMPROPERTY10 CREATEUSER UPDATEUSER CREATEDATE UPDATEDATE JOBCODE SERVICEDESKTICKETNUMBER STATUSKEY HIGHPRIVILEGED BUSINESSAPPROVER TECHNICALAPPROVER USERASSOCIATIONBUAPPROVER USERASSOCIATIONTECHAPPROVER TYPE_ID WORKFLOW_ID VERSION_STATUS_ID BASE_VERSION_ID VERSION_COUNT LAST_APPROVER LAST_APPROVAL_DATE LAST_APPROVER_COMMENTS LAST_SYNCHRONIZED

Indexes

Index PK Unique Keys PK_ROLE_VERSIONS      ✓ ID IX_ROLE_VERSIONS ROLE_ID,VERSION_NUMBER

Description

When a policy is added to or removed from a role in Oracle Identity Analytics, a role approval process is initiated by the System. A snapshot of the existing role is captured and saved into the ROLE_VERSIONS table prior to the initiation of the role approval process. This maintains the role's history, which can be accessed to compare previous versions.

Note - A new version of a role is not created when changes are made to the membership of the role (for example, if users are added or removed from the role).

Primary Keys

PK_ROLE_VERSIONS - composite primary key on columns ID

Foreign Keys

None

Indexes

IX_ROLE_VERSIONS - non-unique index on column ROLE_ID, VERSION_NUMBER

ROLESTATUSES Table

Structure

ROLESTATUSES PK STATUSKEY LABEL

Indexes

Index PK Unique Keys PK_ROLESTATUSES      ✓ STATUSKEY

Description

Similar to the Business Units, each role has a status that is stored in the ROLESTATUSES table. In Oracle Identity Analytics a role can have the following statuses depending on its stage in the Role Life Cycle:

• Active

• Inactive

• Composing

• Pending Approval

• Decommissioned

The STATUSKEY field is used to reference the ROLES table and the LABEL describes the status of the role.

Primary Keys

PK_ROLESTATUSES - primary key on column STATUSKEY

Foreign Keys

None

Indexes

None

ROLE_TYPES Table

Structure

ROLE_TYPES PK ID LABEL DESCRIPTION

Indexes

Index PK Unique Keys PK_ROLE_TYPES      ✓ ID

Description

The ROLE_TYPES table is used to define a Role category. The available Role category or Role Types are -

• Provisioning Role

• Access Control Role

• Organizational Role

Primary Keys

PK_ROLE_TYPES - composite primary key on columns ID

Foreign Keys

None

Indexes

None

ROLE_OWNERS Table

Structure

ROLE_OWNERS PK PK ID ROLE VERSION ID ROLE_ID OWNER_ID OWNER_TYPE

Indexes

Index PK Unique Keys PK_ROLE_OWNERS      ✓ ID, ROLE_VERSION_ID

Description

This ROLE_OWNERS table defines the relationship between a role and its owner which can be either a Globaluser or a role in Oracle Identity Analytics. ROLE_ID refers to the role owned in the ROLES table, whereas OWNER_ID refers to the GLOBALUSERS table.

Primary Keys

PK_ROLE_OWNERS - composite primary key on columns ID and ROLE_VERSION_ID

Foreign Keys

None

Indexes

None

ROLE_EXCLUSIONROLES Table

Structure

ROLE_EXCLUSIONROLES PK PK PK ROLEKEY EXCLUSIONROLEKEY ROLE_VERSION_ID EXCLUSIONCOMMENTS

Indexes

Index PK Unique Keys PK_ROLE_EXCLUSIONROLES      ✓ ROLEKEY, EXCLUSIONROLEKEY, ROLE_VERSION_ID

Description

The ROLE_EXCLUSIONROLES table defines the segregation of duties (SOD) between roles. Each Role defined for SOD has its role key and the corresponding (SOD) role's rolekey defined in the EXCLUSIONROLEKEY column.

Primary Keys

PK_ROLE_EXCLUSIONROLES - composite primary key on columns ROLEKEY, EXCLUSIONROLEKEY and ROLE_VERSION_ID

Foreign Keys

None

ROLE_POLICIES Table

Structure

ROLE_POLICIES PK PK PK ROLEKEY POLICYKEY ROLE_VERSION_ID REQUIRED POLICY_VERSION_ID

Indexes

Index PK Unique Keys PK_ROLE_POLICIES      ✓ Yes ROLEKEY, POLICYKEY, ROLE_VERSION_ID

Description

ROLE_POLICIES is the association table for roles and policies. The associations vary with the role and policy versions, thus the columns role_version_id and policy_version_id are also maintained in this table.

Primary Keys

PK_ROLE_POLICIES - composite primary key on columns ROLEKEY, POLICYKEY, ROLE_VERSION_ID

Foreign Keys

None

Indexes

None