Creating and Managing Groups

A group is a collection of users to which application roles can be assigned.

Only Service Administrators and users with the Access Control - Manage application role can create and manage groups, thereby providing maximum security. Users with the Access Control - View application role can view the contents of the Manage Groups tab. Using groups is appropriate for centrally-managed organization where one or a few individuals are responsible for group memberships and application role assignments. For example, the Service Administrator creates a group named reports_manager and assigns the Reports – Manage application role to this group. Any user who is part of this group will be able to manage reports.

You can use groups to provide access permissions to your application artifacts such as profiles, alerts, organizational units, and dashboards. EPM Cloud recognizes three types of groups:

  • PREDEFINED: These groups are automatically created for each predefined role. All users are assigned to a predefined group based on their predefined role (e.g., Power User).
  • EPM: These are the groups that you create in Access Control in Tools.
  • IDCS: These are the groups that you create in the Oracle Cloud Identity Console. You can view them in Access Control and assign them to application roles and EPM groups.

For more information, see Manage Groups in Administering Access Control for Oracle Enterprise Performance Management Cloud .

To manage groups:

  1. In the Home page, select Tools, and then Access Control.

  2. Select the Manage Groups tab. This tab enables you to create groups, view group details, and export group details.

    For detailed information on creating and managing groups, see Managing Groups in Administering Access Control for Oracle Enterprise Performance Management Cloud.

To export a group name and description, select the group and then click Export to CSV.

Note:

You cannot create a group with the same name as an existing user, group, or team.