Managing Application Security

In This Section:

Security and access rights enable you to control access to Financial Management applications and application elements. Setting up security enables you to protect data and prevent unauthorized users from changing data. For example, you can restrict access to certain data elements or forms within an application.

Security exists at two levels:

Authentication by an external provider
Financial Management security, in which users and groups are assigned to applications and application elements are assigned to security classes

There are two ways to set up security for Financial Management applications:

Load a security file into an application. See Loading Application Security .
Use the Oracle's Hyperion® Shared Services Console to set up security information. See Launching the Shared Services Console from Financial Management.

These security roles are required for application administration. For information on assigning roles, see the Oracle Hyperion Enterprise Performance Management System User and Role Security Guide.

Security Role	Description
Dimension Editor	Creates and manages import profiles for dimension creation, as well as creating and managing dimensions manually within the Performance Management Architect user interface or the Classic Application Administration option. Required to access Classic Application Administration options for Financial Management and Planning using Web navigation.
Application Creator/Financial Management Application Creator	Creates and deploys Performance Management Architect applications. Users with this role can create applications, but can change only the dimensions to which they have access permissions. Required in addition to the Dimension Editor role for Financial Management and Oracle Hyperion Planning, Fusion Edition users to be able to navigate to their product’s Classic Application Administration options. When a user with Application Creator role deploys an application from Performance Management Architect, that user automatically becomes the application administrator and provisioning manager for that application. The Application Creator can create all applications. The Financial Management Application Creator can create Consolidation applications and Generic applications. To create applications, the user must also be a member of the Application Creators group specified in the Configuration Utility.

Security Role

Description

Dimension Editor

Creates and manages import profiles for dimension creation, as well as creating and managing dimensions manually within the Performance Management Architect user interface or the Classic Application Administration option.

Required to access Classic Application Administration options for Financial Management and Planning using Web navigation.

Application Creator/Financial Management Application Creator

Creates and deploys Performance Management Architect applications. Users with this role can create applications, but can change only the dimensions to which they have access permissions.

Required in addition to the Dimension Editor role for Financial Management and Oracle Hyperion Planning, Fusion Edition users to be able to navigate to their product’s Classic Application Administration options.

When a user with Application Creator role deploys an application from Performance Management Architect, that user automatically becomes the application administrator and provisioning manager for that application. The Application Creator can create all applications.

The Financial Management Application Creator can create Consolidation applications and Generic applications. To create applications, the user must also be a member of the Application Creators group specified in the Configuration Utility.