Viewing the Role Assignment Report For Your Environment

Service Administrators use the Role Assignment Report to review the access, assigned through predefined roles and application-level roles, of all users. The report lists the predefined roles (in bold), and the application roles (not in bold) assigned to the user.

Inherited roles, as well as information on inheritance, are displayed in one row for each user. For example, assume that user John Doe is assigned the User predefined role and that User is a member of the example group to which the Approvals Administrator Planning application role is assigned. In this scenario, the Role Assignment Report displays the following as a part of the role assignment information for John Doe:

Approvals Administrator (example->User).

The Role Assignment Report also identifies the number of users who are authorized to access the environment based on their predefined roles. It does not list the application roles that are subsumed into predefined roles or the component roles of application roles assigned to the user. If you need a report showing such details, you may generate the classic version of the report using the provisionReport EPM Automate command.

You can export the Role Assignment Report as a CSV file, which can then be opened using a program such as Microsoft Excel or saved to your computer. The Role Assignment Report in CSV format uses one row for each role assignment.

To open the Role Assignment Report:

1. Open Access Control. See Opening Access Control.
2. Click Role Assignment Report.
   The Role Assignment Report is displayed.
3. Optional: Filter the report to display the following:
   • Role assignments of a specific user. Select Users from the drop down list and then enter a partial search string. See Using Search for instructions on using the Search feature.
   • Users assigned to a specific role. Select Roles from the drop down list and then enter a partial role name. See Using Search for instructions on using the Search feature.

     Note:

     Users may be assigned to many roles. In such cases, the report lists all the roles of the user even if you filer it for a specific role.
   The Role Assignment report is displayed. By default, the report is sorted by User Login values and then by application roles under Roles (for searches by roles). The predefined roles are displayed in bold font, while the application roles are in non-bold font.
4. Optional: Click Export to CSV to export the report into a CSV file. Note that only the information from the currently displayed report is exported to CSV.