Provision Users

To provision end users with access to Expenses Agent, choose the provisioning approach that best aligns with your organization’s security model. The following sections describe each approach and when to use it.

Important:

Whichever approach you choose, permission groups must be enabled for the role that provides access to Expenses Agent.

If the Enable Permission Groups option isn’t available in Security Console, enable the ORA_ASE_SAS_INTEGRATION_ENABLED profile option first:

1. Navigate to Setup and Maintenance and search for the Manage Administrator Profile Values task.
2. Search for the profile option code ORA_ASE_SAS_INTEGRATION_ENABLED.
3. Set the profile value to Yes at the Site level.

This profile option enables permission-group evaluation. Because permission groups are enabled individually for each role, the impact is limited to the roles for which you enable them. See Set Profile Option Values for more information.

Choose a Provisioning Approach

If you want to…	Use
Grant access through a dedicated Expenses role	Approach 1: Create a new custom role or update an existing one and enable permission groups on it. See Use a Custom Expenses Agent Role.
Grant access by provisioning the ERP Self Service User abstract role instead of managing a separate custom role	Approach 2: Use the ERP Self Service User abstract role (ORA_FUN_ERP_SELF_SERVICE_USER_ABSTRACT) and enable permission groups on it. See Use the ERP Self Service User Role.