Enabling User Access Control

This section explains how to manage User Access Control in Oracle EPM 11.2 to secure applications and assign roles through Shared Services.

You can now enable User Access Control (UAC) post configuration tasks. This can be done through User Accounts in the Control Panel by clicking on Change User Account Control Settings, and then dragging the slider up to Always notify.

To enable UAC, you must perform the steps below:

1. Run the script:

   Script Path: MIDDLEWARE_HOME\EPMSystem11R1\common\config\11.1.2.0\enableUACforEPM.bat
   Syntax: enableUACforEPM.bat  MIDDLEWARE_HOME/user_projects/domains/domainName 
   
   For example:
   Script Path: D:\Oracle\Middleware\EPMSystem11R1\common\config\11.1.2.0\enableUACforEPM.bat
   Syntax: enableUACforEPM.bat D:\Oracle\Middleware\user_projects\domains\EPMSystem

2. Enable User Access Control (UAC) and disable Act as part of the operating system. You can disable Act as part of the operating system by following the steps below:
   1. Navigate to Windows Security Settings, then Local Policies, and then User Rights Assignment. Double-click Act as part of the operating system, and then select the User or Group and click Remove.
   2. Click Apply, and then click OK.
3. Reboot the machine for UAC changes to take effect.
4. You must now start all the services. For information about starting services, see Starting and Stopping EPM System Products.