Generates a Role Assignment Report (.CSV).

This report, by default, lists the predefined roles (for example, Service Administrator) and application roles (for example, Approvals Ownership Assigner, Approvals Supervisor, Approvals Administrator, and Approvals Process Designer, which are Planning application roles) assigned to users. This report, optionally, can also be generated to list the Identity Domain Administrators of your environment. This report matches the CSV version of the Role Assignment Report generated from Access Control.
A Sample Role Assignment Report

Generating this report refreshes the user and role information available in Access Control.

For OCI (Gen 2) only:Oracle Enterprise Performance Management Cloud considers deactivated users as being identical to users not assigned to any predefined roles even though such users may have had predefined roles when they were deactivated. Information on deactivated users is not included in this report.


This command produces a report equivalent to that created using the provisionReport command.

You can download the report using the downloadFile command.

Applies to

Planning, Planning Modules, FreeForm, Financial Consolidation and Close, Tax Reporting, Account Reconciliation, Profitability and Cost Management, Enterprise Profitability and Cost Management, Oracle Enterprise Data Management Cloud, Narrative Reporting, Sales Planning, and Strategic Workforce Planning.

Required Roles

Service Administrator or Access Control Manager


epmautomate roleAssignmentReport REPORT_NAME.CSV [userType=IDAdmins|serviceUsers] where:
  • REPORT_NAME is a name for the report.
  • userType, optionally, identifies the type of users whose information is to be included in the report. Default is serviceUsers. Valid values are:
    • serviceUsers creates a report that contains information on all functional users (does not include Identity Domain Administrators if they are not assigned to a predefined role that grants access to the application).

    • IDAdmins creates a report that lists only the users assigned to the Identity Domain Administrator role.


  • Generate the report listing only functional users:
    • epmautomate roleAssignmentReport myReport.CSV
    • epmautomate roleAssignmentReport myReport.CSV userType=serviceUsers
  • Generate report listing only Identity Domain Administrators:

    epmautomate roleAssignmentReport myReport.CSV userType=IDAdmins