Viewing the Role Assignment Report For Your Environment

Service Administrators use the Role Assignment Report to review the access, assigned through predefined roles and application-level roles, of all users. The report lists the predefined roles (in bold), and the application roles (not in bold) assigned to the user.

Inherited roles, as well as information on inheritance, are displayed in one row for each user. For example, assume that user John Doe is assigned the User predefined role and that User is a member of the example group to which the Approvals Administrator Planning application role is assigned. In this scenario, the Role Assignment Report displays the following as a part of the role assignment information for John Doe:

Approvals Administrator (example->User).

In an OCI (Gen 2) environment, if a predefined role is assigned to an IDCS group, the Role Assignment Report will show that predefined role assigned directly to all users in that group. It does not list the application roles that are subsumed into predefined roles or the component roles of application roles assigned to the user. If you need a report showing such details, you may generate the classic version of the report using the provisionReport EPM Automate command.

You can export the Role Assignment Report as a CSV file, which can then be opened using a program such as Microsoft Excel or saved to your computer. The Role Assignment Report in CSV format uses one row for each role assignment.

To open the Role Assignment Report:

1. Open Access Control. See Opening Access Control.
2. Click Role Assignment Report.
   The Role Assignment Report is displayed.
3. Optional: Filter the report to display the following:
   • Role assignments of a specific user. Select Users from the drop down list and then enter a partial search string. See Using Search for instructions on using the Search feature.
   • Users assigned to a specific role. Select Roles from the drop down list and then enter a partial role name. See Using Search for instructions on using the Search feature.

     Note:

     Users may be assigned to many roles. In such cases, the report lists all the roles of the user even if you filter it for a specific role.
   The Role Assignment report is displayed. By default, the report is sorted by User Login values and then by application roles under Roles (for searches by roles). The predefined roles are displayed in bold font, while the application roles are in non-bold font.
4. Optional: Click Export to CSV to export the report into a CSV file. Note that only the information from the currently displayed report is exported to CSV.