Before working with Profitability and Cost Management, the Administrator must set up users and groups, and assign the appropriate security role to each one. The authorization provided for each security role determines which functions and data a user or group may access. During configuration, select Shared Services as the authentication mode, as described in the Oracle Hyperion Enterprise Performance Management System Installation and Configuration Guide.
Two guides are available for managing security and user provisioning:
Use the Oracle Hyperion Enterprise Performance Management System Security Administration Guide for technical information regarding security:
SSL (one-way, two-way, SSL OffLoading, SSL Termination)
Single Sign-On
Default EPM System SSO
Security Agents
Custom Login
Custom Authentication Modules
Guidelines for securing the EPM System
Use the Oracle Hyperion Enterprise Performance Management System User and Role Security Guide for information on how to set up and manage user provisioning:
Oracle's Hyperion® Shared Services Console
User Directories
Applications and Application Groups
Delegated User Management
Managing Native Directory
Managing Provisioning
Provisioning the EPM System
You create, maintain and provision users and groups for Profitability and Cost Management through EPM Workspace. The provisioning process requires you to have both Shared Services and Profitability and Cost Management configured and running. External authentication ensures that the applications communicate seamlessly to provision users easily and accurately.
The following steps provide an overview of the process to set up and provision users and groups:
From EPM Workspace, select Navigate, then Administer, and then Shared Services Console to access the Shared Services screens.
Note: | The first time that you log on, an administrator (admin) user is automatically created for your product. |
Set the user assigned to the admin role to the Provisioning Manager role. See the Oracle Hyperion Enterprise Performance Management System User and Role Security Guide.
Create users. See the Oracle Hyperion Enterprise Performance Management System User and Role Security Guide.
Provision the users with the appropriate security role, and access to the required projects and applications.
Caution! | If the user needs to access EPM Workspace to perform tasks outside of Profitability and Cost Management, you must also provision the selected user with the EPM Workspace role. |
Create groups, as required. You can provision groups within groups. See the Oracle Hyperion Enterprise Performance Management System User and Role Security Guide.
Log on to EPM Workspace, and open Profitability and Cost Management.
Verify that the user can log on to Profitability and Cost Management, and is able to see the provisioned projects and applications.
For detailed instructions on setting up and provisioning users and groups, see the Oracle Hyperion Enterprise Performance Management System User and Role Security Guide.