unassignRole

Removes a role currently assigned to the users, including the user who runs this command, whose login IDs are included in the ANSI or UTF-8 encoded CSV file that is used with this command. You can use this command to remove the assignment of a predefined role or an application role.

The CSV file format is as follows:

User Login
[e-mail]
jdoe

A Service Administrator uses the uploadFile command to upload the file to the environment.

Note:

Use double quotation marks to enclose role names that contain the space character.

When done, the command prints information about each failed entry to the console. Review this information to understand why the command execution failed for some entries in the CSV file.

Applies to

Planning, Planning Modules, FreeForm, Financial Consolidation and Close, Tax Reporting, Account Reconciliation, Profitability and Cost Management, Enterprise Profitability and Cost Management, Oracle Fusion Cloud Enterprise Data Management, Narrative Reporting, Sales Planning, and Strategic Workforce Planning.

Required Roles

• To remove predefined role assignments:
  • Service Administrator or and any predefined role
  • Identity Domain Administrator and any predefined role

• To remove application roles:

  • Service Administrator
  • Any predefined role and the Access Control - Manage application role

Usage

epmautomate unassignRole FILE_NAME ROLE where:

• FILE_NAME is the name of a CSV file containing the login IDs of the users whose role assignment is to be revoked. Specify the CSV extension in lower case.

  User Login values are not case-sensitive. For example, [e-mail] is treated as being identical to [e-mail] or any variation in its case.

• ROLE identifies one of the following. Role names are not case-sensitive.
  • If you are removing the assignment of users to predefined roles, ROLE should identify a predefined role applicable to the service. See Understanding Predefined Roles in Getting Started Guide for Administrators.

  • If you are removing the assignment of users to application roles, ROLE should identify a role belonging to the application in the current environment. Application roles are listed in the Roles tab of Access Control . For a description of application roles for each business process, see these topics in Administering Access Control for Oracle Enterprise Performance Management Cloud:

    • Account Reconciliation
    • Enterprise Profitability and Cost Management
    • Planning, FreeForm, Financial Consolidation and Close, and Tax Reporting
    • Profitability and Cost Management
    • Oracle Enterprise Data Management
    • Narrative Reporting

Examples

• Unassign users from a predefined identity domain role:

  epmautomate unassignRole remove_roles.csv "Service Administrator"

• Unassign users from an application role:

  epmautomate unassignRole example_file.csv "Task List Access Manager"