Manage Users

As a service or security administrator, you must ensure that you add users with applicable permissions to work with Oracle Fusion Analytics Warehouse.

Topics:

• Create Users
• License the Users to Access Oracle Fusion Analytics Warehouse
• Update the User Details
• Remove a User’s Access to Oracle Fusion Analytics Warehouse
• Assign Licensed Groups to Users
• Assign Groups to Users
• Remove Groups Assigned to a User
• Add Security Assignments to a User
• Remove Security Assignments Granted to a User
• Copy Data Security Assignments
• View the Excluded Data Security Assignments

Create Users

Users for Oracle Fusion Analytics Warehouse must exist in the Oracle Identity Cloud Service instance associated with your Oracle Fusion Analytics Warehouse instance.

You create users in the Oracle Identity Cloud Service instance in the following ways:

• Synchronize users from your Oracle Fusion Cloud Applications instance to the Oracle Identity Cloud Service instance.
• Manually create users in the Oracle Identity Cloud Service instance.
• Manually create users in the Oracle Identity Cloud Service instance using the Oracle Fusion Analytics Warehouse user interface.

Synchronize Users from Your Oracle Fusion Cloud Applications Instance

Synchronize users from your Oracle Fusion Cloud Applications instance to the Oracle Identity Cloud Service instance associated with your Oracle Fusion Analytics Warehouse instance.

See Set Up Provisioning with Single Sign-On.

Create Users in Oracle Identity Cloud Service

Create users in the Oracle Identity Cloud Service instance associated with your Oracle Fusion Analytics Warehouse instance.

See Create User Accounts in Administering Oracle Identity Cloud Service.

Create Users in Oracle Fusion Analytics Warehouse

Manually create users in the Oracle Identity Cloud Service instance using the Oracle Fusion Analytics Warehouse user interface.

When you add a user using the Oracle Fusion Analytics Warehouse user interface, the user is available in the Oracle Identity Cloud Service instance associated with your Oracle Fusion Analytics Warehouse instance. You later assign the applicable licensed groups to the user that enable the user to perform certain tasks in Oracle Fusion Analytics Warehouse.

See System Groups.

1. Sign in to your service.
2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
3. On the Security page, click the Users tab, and then click Add User.
4. In Add User, click Create a New User.
5. In Add User, provide the user details and click Next.
6. Select the check box for each of the licensed groups that you want to assign to the user and click Finish.

License the Users to Access Oracle Fusion Analytics Warehouse

You must assign at least one system group to a user to enable them to perform relevant tasks in Oracle Fusion Analytics Warehouse. System groups provide a set of privileges to perform tasks in Oracle Fusion Analytics Warehouse.

Currently, new licensed users with predefined job-specific groups get the Author role by default.

Based on the entitlements and the number of licenses that you purchased, you need to assign the users to either the HCM or ERP Licensed Author and HCM or ERP Licensed Consumer system groups. Additionally, if the users need to perform administrative tasks, you must assign those respective users to the administration-related groups.

See System Groups.

1. Sign in to your service.
2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
3. On the Security page, click the Users tab, and then click Add User.
4. In Add User, search for a user and select the user or select a user from the displayed list of users.
5. Optional: If you don’t find a specific user, then click Create a New User to create the user and assign the applicable system groups.
   See Create Users in Oracle Fusion Analytics Warehouse .
6. Click Next.
7. Select the check box for each of the licensed groups that you want to assign to the user and click Finish.

Update the User Details

You can update the user details such as first name, last name, and email but the user name is non-editable after specifying it initially.

1. Sign in to your service.
2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
3. On the Security page, select a user from the users listed under the Users tab or use the Search option and then click User Profile.
4. In User Details, update the applicable information and click Save.

Remove a User’s Access to Oracle Fusion Analytics Warehouse

Remove a user's access to Oracle Fusion Analytics Warehouse by removing their assignment to a system group.

A user assigned to a system group consumes an Oracle Fusion Analytics Warehouse license. When a user no longer needs to consume the Oracle Fusion Analytics Warehouse license according to their entitlement, you can revoke the user's assignment to the applicable system groups. The user won't be able to access Oracle Fusion Analytics Warehouse as the user's access to Oracle Fusion Analytics Warehouse depends on the system group assigned to them. When you remove all system groups from the user, then the user can no longer be authenticated to Oracle Fusion Analytics Warehouse.

1. Sign in to your service.
2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
3. On the Security page, select a user from the displayed users or use the Search option to search for and select a user.
4. Click Remove User.

Assign Licensed Groups to Users

You can assign the Oracle Fusion Analytics Warehouse licensed groups (also known as system groups) to the Oracle Fusion Cloud Applications users when they're synchronized from your Oracle Fusion Cloud Applications instance to the Oracle Identity Cloud Service instance to provide these users immediate access to Oracle Fusion Analytics Warehouse.

When you enable the synchronization of Oracle Fusion Cloud Applications with the Oracle Identity Cloud Service instance associated with your Oracle Fusion Analytics Warehouse instance, all the Oracle Fusion Cloud Applications groups are visible on the Security page in Oracle Fusion Analytics Warehouse. You must map the Oracle Fusion Cloud Applications custom groups to the Oracle Fusion Analytics Warehouse licensed groups. Later when you synchronize the users from Oracle Fusion Cloud Applications to Oracle Identity Cloud Service, Oracle Fusion Analytics Warehouse selects those users, checks if the mapped Oracle Fusion Cloud Applications custom groups are assigned to those users, and then assigns the corresponding licensed groups to those users. From release Platform 23.R4 onwards, the licensed groups are mapped by default to the licensed application roles which provide the applicable privileges to the users that have been assigned these groups. See Licensed Roles.

You must ensure that the custom roles are available in Oracle Fusion Cloud Applications and that you've assigned these roles to the users in Oracle Fusion Cloud Applications.

1. Sign in to your service.
2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
3. On the Security page, click the Groups tab, and then search for the FAW Licensed groups.
4. Select a licensed group, for example FAW Licensed HCM Authors.
   You see the Users and Groups tabs for the selected licensed group in the right pane.
5. Click the Groups tab under the licensed group.
6. Click Add Mapping.
7. In Add Source System Role Mapping, search for and select the Oracle Fusion Cloud Applications custom groups that you want to map to the licensed group, for example the FAW Licensed HCM Authors licensed group.
8. Click Save.
9. After mapping the Oracle Fusion Cloud Applications custom groups to the Oracle Fusion Analytics Warehouse author and consumer licensed groups, under the Groups tab, select the frequency of the synchronization of the Oracle Fusion Analytics Warehouse licensed groups with the new Oracle Fusion Cloud Applications users.
10. Optional: Under the Groups tab, click Apply Changes Now.
    Oracle Fusion Analytics Warehouse adds the Oracle Fusion Analytics Warehouse licensed groups to the new Oracle Fusion Cloud Applications users.

Assign Groups to Users

You can assign one or more users to one or more groups.

1. Sign in to your service.
2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
3. On the Security page, select a user from the displayed users or use the Search option to search for and select a user.
4. In the user details region, click Assign Groups.
5. In Assign Groups, search for a group or select from the list of groups displayed in this dialog.
6. Select the check box for one or more groups and click Assign.

Remove Groups Assigned to a User

Remove groups assigned to a user if the user no longer requires the authorization to access Oracle Fusion Analytics Warehouse, specific permissions for tasks, and functional access.

After you remove a group from a user, the applicable user may need to logout for the change to take affect. There could be a gap of around 30 seconds for the refresh to happen.

1. Sign in to your service.
2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
3. On the Security page, select a user from the displayed users or use the Search option to search for and select a user.
   You see the groups assigned to the user under the Groups tab in the user details region.
4. Under the Groups tab, select the check box for one or more groups and click Remove Group.

Add Security Assignments to a User

Data security assignments apply data filters to display only the data corresponding to the security assignment values assigned to the users. You can assign a single user multiple security assignment values.

Before you add a security assignment to a user, you must ensure that:

• The user has the appropriate group assigned to them.
• The group has the appropriate data role to assign security values.

1. Sign in to your service.
2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
3. On the Security page, search for a user or select from the list of users displayed under the Users tab.
   You see the security assignments granted to the user under the Security Assignments tab in the user details region.
4. Click Grant Assignment.
5. In Assign Security Assignments, select the security context for which you want to add data security assignments to the user. For example, ledgers or specific business units like AP business unit.
6. From the list of security assignments that you see based on the security context that you selected, select the values that you want to add to the selected user.

   Note:

   The Grant Assignment process appends the values that you selected to the existing assignments.

Remove Security Assignments Granted to a User

As a security administrator, you can remove security assignments that you had previously assigned.

1. Sign in to your service.
2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
3. On the Security page, search for a user or select from the list of users displayed under the Users tab.
   You see the security assignments granted to the user under the Security Assignments tab in the user details region.
4. Select the check box for one or more security assignments that you’d like to remove from the selected users and click Remove Assignment.
5. In Remove Assignment, click Remove Assignment.

Copy Data Security Assignments

As a service or security administrator, you can copy data security assignments from one user to another user.

Copying bulk assignments could take some time to process. Monitor the Activity tab on the Security page.

1. Sign in to your service.
2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
3. On the Security page, select a user from the users listed under the Users tab or search and select a user.
4. Click Copy Assignments.
5. In Copy Security Assignments From Another User:
   1. Under Copy From, search for and select a user to copy access from.
   2. Under Copy Security Access, you see the context-specific security assignments that would be copied.
6. Click Copy.

View the Excluded Data Security Assignments

View the data security assignments that are excluded for a user to know which data the specific user can't access.

When a user is excluded from certain data security assignments, the excluded assignments are visible in the user details section on the Security page. As a service or security administrator, you can set up exclusion rules to exclude certain data security assignments from a user. You can modify the exclusion rules to remove the excluded assignments for a user. See Set Exclusion Rules for Security Assignments.

1. Sign in to your service.
2. In Oracle Fusion Analytics Warehouse Console, click Security under Service Administration.
3. On the Security page, select a user from the users listed under the Users tab or search and select a user.
4. Click Excluded Assignments.