Setting up Users, User Groups, Roles and Security in Predictive Cash Forecasting

Introduction

This tutorial is the third in a series on how to configure Predictive Cash Forecasting (PCF) and expects the application to be in the state as the preceding tutorial. This tutorial shows you how to set up Users, User Groups, Roles and Security in PCF. You will also create a copy of default navigation flows and assign them to the user groups to them. The sections build on each other and should be completed sequentially.

Background

Predictive Cash Forecasting comes with pre-seeded navigations for the primary roles that are Cash Manager, Controller and Administrator (Default) roles. HQ Treasurer can use the navigation of Controller to get access to the entire organization across all entities.

The primary user personas can collaborate with the other users like the Collection Manager, Procurement Manager, Tax Manager, and even external users like Bank Relationship Managers to action on the cash forecasting outcomes.

Once the application is created, we have seeded Navigation flows for cash forecasting application. However, you need to create user groups for Cash Manager and Controller and assign the seeded Navigation flows through security.

Prerequisites

Cloud EPM Hands-on Tutorials may require you to import a snapshot into your Cloud EPM Enterprise Service instance. Before you can import a tutorial snapshot, you must request another Cloud EPM Enterprise Service instance or remove your current application and business process. The tutorial snapshot will not import over your existing application or business process, nor will it automatically replace or restore the application or business process you are currently working with.

Before starting this tutorial, you must:

Have Service Administrator access to a Cloud EPM Enterprise Service instance.
Either complete the preceding tutorial or download the LCM snapshot from here - Second Tutorial completed.zip. Upload and import this LCM snapshot into your Planning instance.

The Rule (Reset Dates) will have to be run once the AMW (Daily Maintenance) runs in your environment. You can schedule to run it daily after your AMW (Daily Maintenance).

Note:

If you run into migration errors importing the snapshot, re-run the migration excluding the HSS-Shared Services component, as well as the Security and User Preferences artifacts in the Core component. For more information on uploading and importing snapshots, refer to the Administering Migration for Oracle Enterprise Performance Management Cloud documentation.

Setting up Cash Manager / Controller User Groups

In this section you create Cash Manager & Controller user groups and assign Navigation flow security.

On the home page, click Tools, then Access Control.
From the bottom tabs, in Manage Groups, create User Groups for Cash Manager, Controller roles and assign them necessary roles such as power user, user, service admin or viewer roles.
Once the user groups are created, you should be able to see them in Access Control -> Manage groups.

Creating Navigation Copy and Assign User Groups

Once the User Groups are created, go to Navigation Flow and create a copy of default navigation flows – Cash Manager and Controller. For example, we have duplicated Cash Manager navigation flow as Demo Cash Manager and Controller navigation flow as Demo Controller in below use case.

Note:
Seeded Navigation Flows are non-editable. Hence we are creating their copies and then editing them.
Once the navigation flow copy is created, go ahead and assign access to Cash manager and Controller user group for these custom navigation flows. Once access permission is granted, you will be able to access all the seeded navigation flows. You can also additionally add custom cards if needed.
Once security is assigned for custom navigation flows, you can now make them “Active” as shown below.
Once you activate the custom Navigation flows, we can start assigning users to these user groups and they can start working on PCF Application. Alternatively, if a user has admin access, the user can choose the custom navigation flows from the home page and start working on PCF application.
Select Demo Cash Manager Navigation flow and you should be able to see the below home page.
Select Demo Controller Navigation flow and you should be able to see the below home page.

Setting up Users, Roles and Security

Create users individually or upload file containing user data to create many users at once using Identity domain admin credentials.
Assign pre-defined roles to users while creating them or later by loading user assignments to role from a .csv file using EPM automate.
Once the users are created and roles assigned, we need to assign security to users. There are different levels of security that can be assigned such as Navigation flow, Dimension members, Forms, Folders, Task list & Rules security.
We can provide Read or Write or None access to users or user groups. Once you have Cash manager and Controller user groups, assign users to these groups and then control security at user group level so that maintenance becomes easy at later stage.
While assigning security, there are various inheritance options like Member, Children, Children inclusive, Descendants, Descendants inclusive. Use these inheritance options to assign security at parent level dimension members.
We can also leverage Valid intersections and Cell level security to control the level of access for users. There are few seeded valid intersection rules to allow valid combination of dimension intersections to be forecasted. You can add more based on requirements.
There are various seeded reports to review the security and access levels like Role assignment report, User login report & User group report.