Security Administration Implementation

This section discusses:

  • Preparing to use PeopleSoft security.

  • Administering security from applications.

  • Reviewing and monitoring your security implementation.

The functionality of security administration for your PeopleSoft applications is delivered as part of the standard installation of PeopleTools, which is provided with all PeopleSoft products.

To start administering security, install your PeopleSoft application according to the installation guide for your database platform.

Other Sources of Information

This section provides information to consider before you begin to manage your data. In addition to implementation considerations presented in this section, take advantage of all PeopleSoft sources of information, including the installation guides, release notes, and product documentation.

If you administer security information outside of the PeopleSoft security interface, for example, using application-specific pages to define application security, then you have the option of modifying the PeopleSoft security pages to include links to those application-specific pages. These links provide administrators a convenient way to access application-specific security pages without having to spend time navigating to them.

You add the extra security links from a browser by selecting PeopleTools > Security > Security Objects > Security Links. You can add links to the User Profiles component, My System Profile page, the Role component, or the Permission List (ACCESS_CNTRL_LISTX) component. To add links to a security profile, select the appropriate page in the Security Links (SEC_OTHER_SETTINGS) component and add the link information for the target page. After you save the link information, the link appears on the Links page for the appropriate security profile.

Image: Security Links - User page

This example illustrates the fields and controls on the Security Links - User page.

Security Links - User page

Field or Control

Definition

Active Flag

Enables you to activate and deactivate links. Only those links with the Active Flag selected appear for system users.

Description

Add a description of the page that contains the extra security information. This description is the text that appears on the Links page for the security profile.

Menu Name

From the drop-down list, add the menu name. This value is the application in which the page resides, such as Administer HR Security.

Menu Bar Name

From the drop-down list, add the menu bar name, such as Use, Setup, Process, and so on.

Bar Item Name

From the drop-down list, add the bar item name. For example, the bar item name for this page is Security Links.

Item Name

From the drop-down list, add the item name. For example, the item names for this component are User, Role, My Profile, and Permission List.

Test

After you have added all the appropriate information, use this link to test the security link. If it does not work correctly, double-check your selections for the previous options.

To add a Security Link:

  1. Select PeopleTools > Security > Security Objects > Security Links.

  2. Select the security profile type (user, role, or permission list) to which you want to add extra links.

  3. If links exist, click the plus sign button to add a new row.

  4. Add the appropriate link information (Menu Name, Menu Bar name, and so on).

  5. After you enter the appropriate link information, click Test to make sure the link points to the correct target.

  6. Save your work.

Note: If you need to migrate the security links setup data from one database to another, you can use the following Data Mover scripts: SECOTHER_EXPORT.DMS and SECOTHER_IMPORT.DMS. These scripts reside in the PS_HOME\scripts directory.

PeopleSoft provides a collection of predefined queries that enable you to review, monitor, and audit system access by user, role, and permission list so that you can detect discrepancies. Use the Review Security Information page to access these queries (PeopleTools > Security > Common Queries). The page provides access to these queries:

  • User ID queries.

  • Role queries.

  • Permission list queries.

  • PeopleTools objects queries.

  • Definition Security queries.

  • Access log queries.

To run a query, click the link, enter the appropriate criteria (such as User ID), and click View Results. Query results typically appear in a new browser window.