1 Overview of Access Control
The Oracle Fusion Cloud Enterprise Performance Management and Oracle Fusion Cloud Enterprise Data Management environments are secured with multiple layers of protection. Access is restricted to authorized users using role-based access (predefined roles). Predefined role assignments are managed using the Oracle Cloud Console. For example, to permit user John Doe to view reports belonging to a Planning test environment, he should be assigned to the Viewer role of the environment. For more information, see Understanding Predefined Roles in Getting Started Guide for Administrators .
To enable more granular control over the use of Cloud EPM business processes or Cloud EDM, users can further be assigned business process-specific roles through Access Control. These roles, known as granular roles, define permissions within a business process. For example, assigning the Approvals - Administer role in the Planning business process allows a user or group to perform approval-related tasks.
It’s important to note that assigning roles at the business process-level will only enhance the user’s access rights. These business process specific roles cannot revoke or restrict the privileges granted by predefined roles.
Access Control enables you to complete these activities in an environment:
-
Manage Groups. See Managing Groups
-
Manage Users. See Assigning a User to Many Groups
-
Manage Granular Roles. See Managing Granular Roles with Access Control
-
Role Assignment Report. See:
- User Login Report. See Viewing the User Login Report
- User Group Report. See Viewing the User Group Report
Access Control for Account Reconciliation provides specific features. For more details, refer to the following topics in Administering Account Reconciliation:
Tutorial Link
Follow this tutorial Setting Up Security in Cloud EPM Business Processes to learn about the layers of security in Cloud EPM business processes and how to manage security using Access Control and access permissions.