Defining Location Security

User access to locations is determined by location security by enabling you to select the user groups to create for each location.

Location Security is a framework in which service administrators can secure user access to features by location. Data Integration configures and enforces Location Security in Security Settings. You define the user groups to create for each location. When a location is created or updated, then you can create as many groups as defined in the system settings for the location. Additionally, a Maintain User Groups option enables you to create user groups in mass for all the existing locations.

Several dependent processes must occur before Location Security is fully implemented:

  1. When a location is created, user groups are created automatically in Access Control.

    The user group contains the name of the location and additional prefix and suffix information based on the user preference.

    In addition, roles are provisioned for User Groups by a service administrator. For more information, see: Assigning a User to Many Groups in Administering Access Control for Oracle Enterprise Performance Management Cloud .

  2. When the user logs in, Data Integration determines the groups assigned to the user.

  3. Based on the name of the group, Data Integration determines the accessible locations.

  4. The POV region filters the locations based on the user access.

Note:

If the web services are used, then location security is still maintained and enforced.

To enable location security:

  1. From the Actions menu, select Security Settings.

  2. Under Location Security, select Enable Location Security.

    Image shows the Security Settings page.

  3. Under Group Name Format,

  4. In Description, enter a description of the user group.

    For example, enter: Group for Creating and Running Integration.

  5. In the Prefix field, enter the prefix to identify the user group name, for example, DI.

    When the group is saved, the prefix is prepended to the group name.

    Note:

    Underscore is not supported in the prefix or suffix for group names.

  6. In the Suffix field, select the name of the function or rule that the user is provisioned to access.

    Note:

    Underscore is not supported in the prefix or suffix for group names.

    For example, you could specify that the location security for the group is for a :

    • run integration role

    • create integration role

    When the group is saved, the suffix is appended to the user group name.

  7. Click Save.

  8. To create user groups in mass for the location, click Maintain User Groups.

To disable location security:

  1. From the Actions menu, select Security Settings.

  2. Select the Location Security tab.

  3. Deselect Enable Location Security.

    When security by location is disabled, this message is displayed: Security by Location is disabled. Would you like to enable the feature?

  4. Click Save.