A Appendix: User Maintenance Using OIM

This appendix describes the process for managing users and roles with Oracle Identity Management (OIM). The Administrator can create users and assign the level of access as needed. This appendix describes how to create/modify/delete a user and assign roles to a user.

If your Merchandise Financial Planning Cloud Service is configured with Oracle Identity Management (OIM) for managing users and access, follow the instructions in this appendix.

In order to provide application access to end users, the Cloud Service Administrator needs to create the user's account from OIM. Follow the steps in "OIM User Creation."

To complete the user provisioning activity, the same user name must be added in the Merchandise Financial Planning Cloud Service application and assigned to a necessary group.

MFP Cloud Service is built with role-based access. Permissions are associated with roles. Table 3-1 lists the available roles.

The Administrator can assign the above role or roles to the user. Follow the steps in "Assigning Members to a Role."

For detailed information on the tasks related to user and role, see the following sections:

• User Maintenance through OIM:

  • OIM User Creation

  • Deleting a User or Disabling User Privileges

  • Resetting a User Password

• Role Maintenance through OIM:

  • Assigning Members to a Role

  • Revoking Role Membership

  • Approving Requests from a User for a Role

  • Approving Requests from a User for Multiple Roles

• User Maintenance through Oracle Support:

  • Importing a Batch of User Accounts

• Role Maintenance through Oracle Support:

  • Bulk Role Membership Update (Optional)

User Maintenance through OIM

This section describes how to maintain users through OIM.

OIM User Creation

Before users can access the Oracle Retail Merchandise Financial Planning Cloud Service, it is necessary to provision access to the system for each user and to assign roles to each user to control what functionality will be available to the user. The access provisioning is done using OIM. Once user creation is done in OIM, the same user needs to be added in the Merchandise Financial Planning Cloud Service.

Note: The OIM Application URL and the login with the required administrator access are needed to perform the following steps. The welcome email sent by Oracle includes the URL.

The following steps explain how to define users, assign roles, and revoke access for users:

1. Log in to the OIM application.

2. Click Manage Administration.

   Figure A-1 Identity Self Service Screen

   
   Description of ''Figure A-1 Identity Self Service Screen''
   
   

3. Click Users.

   Figure A-2 Users Screen

   
   Description of ''Figure A-2 Users Screen''
   
   

4. Under Actions, click Create. The Create User screen appears.

   Figure A-3 Create User Screen

   
   Description of ''Figure A-3 Create User Screen''
   
   

5. Under Basic Information, enter the following:

   • First Name

   • Last Name

   • For Organization, enter Retail

   • For User, enter Full Time Employee

   • E-mail: E-mail address of employee

6. Under Account Settings, enter:

   • User Login: <firstname>.<lastname>

     
     

     Note: Oracle recommends that the User Login be entered in upper case.

     
     

   • Password

   • Confirm Password

     
     

     Note: If two employees have the same first name and last name or if you want to reuse the user login of a user that was deleted earlier, use the middle name initial in between the user login. For example: <firstname>.x.<lastname>

     
     

7. Click Submit.

   
   

   Note: The new user will not be able to log in to the application after Step 7. To fully complete the user creation, the same user needs to be added in the Merchandise Financial Planning Cloud Service as well. See Step 8.

   
   

8. To complete the user creation, follow the steps for adding a user in the User Maintenance chapter of the Oracle Retail Predictive Application Server Cloud Edition Administration Guide.

   
   

   Note: The user name created in RPAS must exactly match the original case of the User Login entered in Step 6.

   
   

Deleting a User or Disabling User Privileges

OIM provides the Administrator a choice to delete or disable a non-active user. Delete will permanently delete all the details of the user, while disable will keep the entry of the user available, only barring its access rights.

To delete or disable a user:

1. Log in to the OIM application.

2. Under Administration, click Users.

3. Select the user and click Disable or Delete as necessary.

   Figure A-4 Users Screen

   
   Description of ''Figure A-4 Users Screen''
   
   

   Locking or unlocking a particular user can also be done from this same screen if needed.

4. The same user also needs to be deleted from the MFP CS application. This will keep OIM and the application synchronized. Complete the user deletion by following the steps for deleting a user in the User Maintenance chapter of the Oracle Retail Predictive Application Server Cloud Edition Administration Guide.

Resetting a User Password

To reset the password of a user:

1. Log in to the OIM application.

2. Under Administration, click Users.

3. Click the Search tab and then select the user for which you want to reset the password.

4. Click Reset Password.

   Figure A-5 Reset Password

   
   Description of ''Figure A-5 Reset Password''
   
   

5. In the Reset Password screen, make sure Auto-generate the Password is selected and click Reset Password. The system auto-generates the password and sends an email to the user.

   If you want to set the password manually, click Manually Change the Password, update the new password, and then click Reset Password.

   Figure A-6 Reset Password Dialog Box

   
   Description of ''Figure A-6 Reset Password Dialog Box''
   
   

6. To complete the password reset, follow the steps for editing a user in the User Maintenance chapter of the Oracle Retail Predictive Application Server Cloud Edition Administration Guide. This will keep OIM and the application synchronized.

Role Maintenance through OIM

This section describes how to maintain roles through OIM.

Assigning Members to a Role

To assign members to a role:

1. Log in to the OIM application.

   Figure A-7 Identity Self Service Screen

   
   Description of ''Figure A-7 Identity Self Service Screen''
   
   

2. Click Users.

3. Click the user you want to select. In this example, oim.test is used.

   Figure A-8 Users Screen

   
   Description of ''Figure A-8 Users Screen''
   
   

4. The User Details screen appears. Click the Roles tab.

   Figure A-9 User Details Screen

   
   Description of ''Figure A-9 User Details Screen''
   
   

5. Click Request Roles.

   Figure A-10 Roles Screen Request Roles List

   
   Description of ''Figure A-10 Roles Screen Request Roles List''
   
   

6. Click Add to Cart next to the role to assign.

   Figure A-11 Role Access Request Screen

   
   Description of ''Figure A-11 Role Access Request Screen''
   
   

7. Click Next.

   Figure A-12 Cart Options Screen

   
   Description of ''Figure A-12 Cart Options Screen''
   
   

8. Click Submit.

   Figure A-13 Submit Option Screen

   
   Description of ''Figure A-13 Submit Option Screen''
   
   

   The role is assigned to the user.

9. On the User Details screen, click Refresh.

   Figure A-14 User Details Screen

   
   Description of ''Figure A-14 User Details Screen''
   
   

   The assigned role is displayed.

   
   

   Note: The Administrator needs to assign a similar User Group to the specific user in the MFP CS application domain as well to complete the role assignment. For more information on User and User Group, see the information on adding a user and adding a user group in the User Maintenance chapter of the Oracle Retail Predictive Application Server Cloud Edition Administration Guide.

   
   

Revoking Role Membership

To revoke the membership of a member in a role:

1. Log in to the OIM application.

2. Click Users.

3. Click the user you want to select. In this example, oim.test is used.

   Figure A-15 Users Screen

   
   Description of ''Figure A-15 Users Screen''
   
   

4. The User Details screen appears. Click the Roles tab.

   Figure A-16 User Details Screen

   
   Description of ''Figure A-16 User Details Screen''
   
   

5. Select the role you want to revoke and click Remove Roles.

   Figure A-17 Revoke Roles Option

   
   Description of ''Figure A-17 Revoke Roles Option''
   
   

6. In the next section, click Submit.

   Figure A-18 Remove Roles Submit Option

   
   Description of ''Figure A-18 Remove Roles Submit Option''
   
   

Approving Requests from a User for a Role

Users can also request roles that are available for the users to access the MFP Service (or ask to revoke them). To approve the request from a user:

1. Log in to the OIM application.

2. Click Pending Approvals.

   Figure A-19 Identity Self Service Screen with Pending Approvals

   
   Description of ''Figure A-19 Identity Self Service Screen with Pending Approvals''
   
   

3. Click the action assigned to you.

   Figure A-20 Pending Approvals Tab

   
   Description of ''Figure A-20 Pending Approvals Tab''
   
   

4. Click Claim.

   Figure A-21 Pending Claim Summary Information

   
   Description of ''Figure A-21 Pending Claim Summary Information''
   
   

5. Click Approve or Reject. The request completes.

   Figure A-22 Pending Approval Summary Information

   
   Description of ''Figure A-22 Pending Approval Summary Information''
   
   

Approving Requests from a User for Multiple Roles

Users can also request multiple roles that are available for the users to access the MFP Service (or ask to revoke them). To approve the request from a user:

1. Log in to the OIM application.

2. Click Pending Approvals.

   Figure A-23 Identity Self Service Screen with Pending Approvals

   
   Description of ''Figure A-23 Identity Self Service Screen with Pending Approvals''
   
   

3. Click the action assigned to you.

   Figure A-24 Pending Approvals Tab

   
   Description of ''Figure A-24 Pending Approvals Tab''
   
   

4. Click Claim.

   Figure A-25 Pending Claim Summary Information

   
   Description of ''Figure A-25 Pending Claim Summary Information''
   
   

5. Click Approve or Reject.

   Figure A-26 Pending Approval Summary Information

   
   Description of ''Figure A-26 Pending Approval Summary Information''
   
   

6. Once done, if approved, the request is split into multiple requests, one for each role for each user. Approve all of them by following Steps 3 to 5.

7. Once all the requests are approved, all the roles are assigned to the users.

   
   

   Note: The Administrator can request multiple roles for multiple users. Once the request is made, the Administrator is required to approve the request using the Approve Requests from User for Multiple Roles process.

   
   

User Maintenance through Oracle Support

This section describes how to maintain users through Oracle Support.

Importing a Batch of User Accounts

If a large number of users must be created, the Oracle team can bulk load the users into the OIM application. When users are bulk loaded, each initial password is set to the current password of a template user. The new users are required to change the password on their first login.

To request the creation of accounts by bulk loading:

1. Create a CSV file listing all users to create. Following is an example of this file.

   ##################
    filename.csv
   ###################
   ##########################################
   USR_LOGIN,USR_FIRST_NAME,USR_LAST_NAME,USR_EMAIL,ORG_NAME
   ce.admin1,ce,admin1,[e-mail],Retail
   ce.admin2,ce,admin2,[e-mail],Retail
   ce.admin3,ce,admin3,[e-mail],Retail
   ce.admin4,ce,admin4,[e-mail],Retail
   ce.admin5,ce,admin5,[e-mail],Retail
   ce.admin6,ce,admin6,[e-mail],Retail
   ce.admin7,ce,admin7,[e-mail],Retail
   ce.admin8,ce,admin8,[e-mail],Retail
   ce.admin9,ce,admin9,[e-mail],Retail
   ce.admin10,ce,admin10,[e-mail],Retail
   ##########################################
   

2. Create or identify a user whose password will be used as the initial password for all the created users.

3. Open an SR with Oracle Support and provide the CSV file and user from Steps 1 and 2. For more information, see "Oracle Support."

   
   

   Note: The new user will not be able to log in to the application after Step 3. To fully complete the user creation, the same user needs to be added in the MFP CS application as well. To complete the user creation, see Step 4.

   
   

4. To complete the user creation, follow the steps for adding a user in the User Maintenance chapter of the Oracle Retail Predictive Application Server Cloud Edition Administration Guide.

   
   

   Note: The user name created in RPAS must exactly match the original case of the User Login entered in Step 1.

   
   

Role Maintenance through Oracle Support

This section describes how to maintain roles through Oracle Support.

Bulk Role Membership Update (Optional)

If a considerable number of users need to have roles to be assigned, the Oracle team can bulk update the role membership into the OIM application. However, Oracle recommends that a customer administrator use the Identity Management application to do these assignments.

To update the membership by bulk update:

1. Create a CSV file with the user role mapping. Note that the user name must be in upper case. See the following example:

   ##################
    role.csv
   ###################
   ##########################################
   UGP_NAME,USR_LOGIN
   Role1,CE.ADMIN1
   Role1,CE.ADMIN2
   Role3,CE.ADMIN3
   Role4,CE.ADMIN4
   Role5,CE.ADMIN5
   Role6,CE.ADMIN6
   Role7,CE.ADMIN7
   Role8,CE.ADMIN8
   Role2,CE.ADMIN8
   Role2,CE.ADMIN9
   ##########################################
   

2. Open an SR with Oracle Support and provide the CSV file and user name from Step 1.

Note: If more than one role is to be attached to a particular user, add one more row with the role that the user is to have and the user name. Refer to the CE.ADMIN8 in the above example. The CE.ADMIN8 has both Role 8 and Role 2.