Access and Security for the Project Contract Invoicing Assistant

This topic provides the access requirements for users who work with the Project Contract Invoicing Assistant.

Users Without the Predefined Project Billing Specialist Role

To enable users who don’t have the predefined Project Billing Specialist role, or a custom role that’s an exact copy of that role, create and assign a custom role with these configurations:

1. In the Security Console, create a custom role.
2. In the Basic Information section of the custom role, select Enable Permission Groups.
3. In Function Security Policies > Privileges, add this functional privilege:
   • Manage Project Contract Invoice Service (PJB_MANAGE_PROJECT_CONTRACT_INVOICE_SERVICE_PRIV)
4. In Data Security Policies, add this data security policy:
   • Grant on Business Unit
     • Data Resource: Business Unit
     • Data Set: Select by Instance Set
     • Condition Name: Access the business units for which the user is explicitly authorized
     • Actions: Manage Project Contract Invoice
5. In Role Hierarchy > Roles and Privileges, add this duty role:
   • Project Contract Invoice Management (ORA_PJB_PROJECT_CONTRACT_INVOICE_MANAGEMENT_DUTY)
6. In Role Hierarchy > Roles and Permission Groups, add this duty role:
   • Project Contract Invoicing Assistant (ORA_PJB_PROJECT_CONTRACT_INVOICING_ASSISTANT_DUTY)
7. Assign the custom role to the user.
8. Ensure that the user and the new custom role have the appropriate business unit data access.

Users With the Predefined Project Billing Specialist Role

To enable users who already have the predefined Project Billing Specialist role, or a custom role that’s an exact copy of that role, create and assign a custom role with these configurations:

1. In the Basic Information section of the custom role, select Enable Permission Groups.
2. In Role Hierarchy > Roles and Permission Groups, add this duty role:
   • Project Contract Invoicing Assistant (ORA_PJB_PROJECT_CONTRACT_INVOICING_ASSISTANT_DUTY)
3. Assign this custom role to the user who already has the predefined Project Billing Specialist role, or a custom role that’s an exact copy of that role.
4. Ensure that the user, the predefined Project Billing Specialist role, or the copied custom role has the appropriate business unit data access.

Note: The assistant can return or process only the invoices that the signed-in user is authorized to access.