Manage HCM Role Provisioning Rules

You must create rules to provision roles to users one way or the other. Otherwise, those user will have no access to data or functions and can't perform any application tasks.

Before you create users, you'll create role-provisioning rules to assign job roles, and this can be set up to happen automatically based on the resource roles assigned to the users. For example, in this setup task, you can map the Field Service Mobile Worker resource role to the Field Service Mobile Worker job role. This mapping ensures that a user/resource with the resource role assigned will get the appropriate job role assigned automatically. This means that when you add a new user, they're assigned the relevant job role and permissions, which ensures that they've access to the required features and application pages.

Even further, using auto-provisioning ensures that new users are assigned job roles both efficiently and consistently.

Follow these steps to perform the Manage HCM Role Provisioning Rules task:

1. Sign in to your Oracle Applications Cloud environment as an implementation user.
2. Click Navigator > My Enterprise > Setup and Maintenance.
3. Ensure that Field Service is selected in the Setup field in the header.
4. Click Users and Security in the Functional Areas section.
5. Click Manage HCM Role Provisioning Rules.
6. To create a provisioning rule, click Create on the Manage Role Mappings page.
   The Create Role Mapping page appears.
7. In the Mapping Name field, enter a name that identifies the mapping.
   For example, if you're creating a rule to provision a resource role you created called Field Service Mobile Worker, enter Field Service Mobile Worker for the mapping name too.
8. In the Conditions section, enter these conditions:
   1. Resource Role: Select the resource role you want to provision (for example, 'Field Service Mobile Worker').
   2. HR Assignment Status: Select Active. This extra condition ensures that the provisioned roles are automatically removed if the user is terminated in Global Human Resources.
9. In the Associated Roles section, click Add to add the job roles you want to provision.
   For example, for Field Service Mobile Worker, you might add the Field Service Mobile Worker job role.
10. Select one or more of the role-provisioning options shown for each role you've added.
    1. Requestable: Qualifying users can provision the role to other users. A 'qualifying user' is one that satisfies the rule conditions.
    2. Self-Requestable: Qualifying users can request the role for themselves.
    3. Autoprovision: Qualifying users get the role automatically. This is selected by default. Simply deselect it if you don't want to use auto-provisioning.
11. Click Save and Close and then Done to return to the Functional Areas task list. You'll need to create provisioning rules like this for each resource role you intend to assign to users.

    You must also run the Autoprovision Roles for All Users process after creating or editing role mappings.

12. To do this, click Navigator > Tools > Scheduled Processes. Search for and run the Autoprovision Roles for All Users process. This process evaluates every user, including active and inactive users, and updates role memberships according to updated role auto provisioning rules.

    For more information about role provisioning, see the Role Management topic of the Using Global Human Resources book.

    For more information about the processes that impact role updates and provisioning - including the Autoprovision Roles for All Users process and the Send Pending LDAP Requests process - and how they impact one another, see the Best Practices for User and Role Provisioning in HCM topic of the Securing HCM book, found here: https://docs.oracle.com/en/cloud/saas/human-resources/25a/books.html.