Overview of Security for Oracle Procurement Cloud Business Intelligence

Users with the appropriate roles can view, create or edit business intelligence analytics and reports in Oracle Procurement Cloud.

Security for viewing, creating, and editing business intelligence analytics and reports includes these concepts:

• Access to business intelligence functionality

• Access to the data that you want an analytic or report to return

• Access to the folders where the analytics or reports are stored

• Secured list views

• Personally identifiable information (PII)

Business Intelligence Roles

Business intelligence security roles apply to both Oracle Business Intelligence Publisher and Oracle Transactional Business Intelligence. They grant access to business intelligence functionality, such as the ability to run or author analytics and reports. Users need one or more of these roles. In addition, users need the roles that grant access to the following:

• Functional folders, analytics and reports

• Subject areas

• Oracle Procurement Cloud data

Access to Subject Areas in the Business Intelligence Catalog

Access to subject areas in the Business Intelligence Catalog is secured by OTBI Transactional Analysis Duty roles. The following table lists the procurement subject areas by functional area, and the corresponding job roles and OTBI Transactional Analysis Duty role needed for each subject area.

Subject Area	Job Role	OTBI Transactional Analysis Duty Role
Procurement - Implemented Change Orders Real Time	Category Manager Buyer Procurement Contract Administrator Procurement Manager	Implemented Change Order Transaction Analysis Duty
Procurement - Pending Change Orders Real Time	Category Manager Buyer Procurement Contract Administrator Procurement Manager	Pending Change Order Transaction Analysis Duty
Procurement - Procure To Pay Real Time	Accounts Payable Manager Accounts Payable Specialist Accounts Payable Supervisor Buyer Procurement Manager	Spend Transaction Analysis Duty Role
Procurement - Purchasing Agreements Real Time	Category Manager Buyer Procurement Contract Administrator Procurement Manager	Agreement Transaction Analysis Duty
Procurement - Purchasing Real Time	Category Manager Buyer Procurement Contract Administrator Procurement Manager Purchase Analysis	Purchase Order Transaction Analysis Duty
Procurement - Requisitions Real Time	Buyer Procurement Contract Administrator Procurement Manager Purchase Analysis	Purchase Requisitions Transaction Analysis Duty
Procurement - Spend Real Time	Accounts Payable Manager Accounts Payable Specialist Accounts Payable Supervisor Buyer Procurement Manager	Spend Transaction Analysis Duty Role
Sourcing - Supplier Awards Real Time	Category Manager Procurement Contract Administrator Procurement Manager	Sourcing Transaction Analysis Duty
Sourcing - Supplier Negotiations Real Time	Category Manager Procurement Contract Administrator Procurement Manager	Sourcing Transaction Analysis Duty
Sourcing - Supplier Responses Real Time	Category Manager Procurement Contract Administrator Procurement Manager	Sourcing Transaction Analysis Duty
Supplier - Profile Change Request Real Time	Supplier Administrator Supplier Manager	Supplier Master Data Transaction Analysis Duty
Supplier - Supplier Real Time	Purchase Analysis Supplier Administrator Supplier Manager	Supplier Master Data Transaction Analysis Duty
Supplier Import - Supplier Real Time	Purchase Analysis Supplier Administrator Supplier Manager	Supplier Master Data Transaction Analysis Duty
Supplier Qualification - Supplier Eligibility Real Time	Category Manager Supplier Qualification	Supplier Eligibility Transactional Analysis Duty
Supplier Qualification - Supplier Eligibility History Real Time	Supplier Qualification	Supplier Eligibility History Transaction Analysis Duty
Supplier Qualification - Qualifications and Assessments Real Time	Supplier Qualification	Supplier Qualification Analysis Duty
Supplier Qualification - Question Responses Real Time	Category Manager Supplier Qualification	Supplier Question and Responses Analysis Duty
Supplier Registration - Supplier Real Time	Purchase Analysis Supplier Administrator Supplier Manager	Supplier Master Data Transaction Analysis Duty

Access to Reports in the Business Intelligence Catalog

Access to functional folders in the Business Intelligence Catalog is secured using the same duty roles that secure access to the subject areas. Functional folders contain delivered analytics and reports. For example, a user who inherits the Purchase Order Transaction Analysis Duty has access to the:

• Purchasing folder in the Business Intelligence Catalog

• Procurement-Purchasing Real Time subject area

Reports are secured based on the folders in which they're stored. You can set permissions against folders and reports for Application Roles, Catalog Groups, or Users. The following table lists the procurement functional area folders, and the corresponding job roles and OTBI Transactional Analysis Duty role for each folder..

Functional Area Folder	Job Role	OTBI Transactional Analysis Duty Role
Procure To Pay	Accounts Payable Manager Accounts Payable Specialist Accounts Payable Supervisor Buyer Procurement Manager	Spend Transaction Analysis Duty Role
Purchasing	Category Manager Buyer Procurement Contract Administrator Procurement Manager Purchase Analysis	Purchase Order Transaction Analysis Duty
Sourcing	Category Manager Buyer Procurement Manager	Sourcing Transaction Analysis Duty
Spend	Accounts Payable Manager Accounts Payable Specialist Accounts Payable Supervisor Buyer Procurement Manager	Spend Transaction Analysis Duty Role
Supplier	Supplier Administrator Supplier Manager	Supplier Master Data Transaction Analysis Duty
Supplier Qualification	Category Manager Supplier Qualification	Supplier Question and Responses Analysis Duty Supplier Question and Responses Analysis Duty, and Supplier Qualification Analysis Duty

For a list of predefined analytics and reports, see Oracle Procurement Cloud View Procurement Reports and Analyses on the Oracle Help Center.

Reporting Data

The data that's returned in reports is secured in a similar way to the data that's returned in Oracle Procurement Cloud pages. Each of the transaction analysis duty roles grants access to subject areas and Business Intelligence Catalog folders. To view the roles click Navigator > Security Console.

If you can't see buyer or requester names in analyses or reports, add the View All Workers security profile to your user role. Use the Assign Security Profiles to Role task, in the Setup and Maintenance work area.

Secured List Views

You have two options to obtain access to data using a data model that uses a SQL Query as the data source:

• Select data directly from a database table. The data you return isn't subject to data-security restrictions. Because you can create data models on unsecured data, you should minimize the number of users who can create data models.

PII Data

Personally identifiable information (PII) tables are secured at the database level using virtual private database policies. Only authorized users can report on data in PII tables. This restriction also applies to Business Intelligence Publisher analytics and reports. The data in PII tables is protected using data security privileges that are granted by means of duty roles in the usual way.

For more information about delivered roles, see the Oracle Procurement Cloud Security Reference guide in the Oracle Help Center.

For more information about business intelligence, see the Oracle Procurement Cloud Creating and Administering Analytics and Reports guide in the Oracle Help Center.