Set Up Access and Security for the Project Capitalization Analyst

Steps to Enable and Configure

The Project Capitalization Analyst role is needed to use the assistant within AI Agent Studio. To make the assistant available, the administrator must complete the required AI agent setup and security configuration.

Access Requirements

Users Without the Project Accountant Role

To enable users without the seeded Project Accountant role, or a custom role derived from it, create and assign a custom role with the following configurations. For details on doing so, see Creating Custom Roles to Enable Access to Project Financial Control Agents.

Function Security Policies > Privileges

Assign these privileges to provide access to the related project cost and capital asset work areas:

Project Cost Transaction Processing (ORA_PJC_PROJECT_COST_TRANSACTION_PROCESSING_DUTY)
Project Asset Maintenance (ORA_PJC_PROJECT_ASSET_MAINTENANCE_DUTY)

For sponsored projects, assign these privileges:

Get Project Setups (PJF_GET_PROJECT_SETUPS_PRIV)
Manage Award Service (GMS_MANAGE_AWARD_SERVICE_PRIV)

Data Security Policies

Configure the following access:

Access for business units
- Data resource: Business Unit
- Data set: Select by instance set
- Condition name: Access the business units for which the user is explicitly authorized
- Actions: View Project Expenditure Item, View Project Capital Asset
Access for managing project cost transactions
- Data resource: Project Expenditure Items for Table PJC_EXP_ITEMS_ALL
- Data set: Select by instance set
- Condition name: Access the project expenditure items for table PJC_EXP_ITEMS_ALL for business unit
- Actions: Manage Project Expenditure Item
Access for cost distributions
- Data resource: Project Cost Distribution Lines for Table PJC_COST_DIST_LINES_ALL
- Data set: Select by instance set
- Condition name: Access the project cost distribution lines for table PJC_COST_DIST_LINES_ALL for business unit
- Actions: Manage Project Expenditure Item
Access for awards
- Data resource: Award for Table GMS_AWARD_HEADERS_B
- Data set: Select by instance set
- Condition name: Access awards for table GMS_AWARD_HEADERS_B for business units based on Grants Management Award security as defined in the Manage Data Access for Users page
- Actions: View Award Data

Role Hierarchy > Roles and Permission Groups

Include these roles and duties:

Project Capitalization Analyst (ORA_PJC_PROJECT_CAPITALIZATION_ANALYST_DUTY)
Project Cost Setup Inquiry (ORA_PJC_PROJECT_COST_SETUP_INQUIRY_DUTY)
Accounted Project Cost Distribution Inquiry (ORA_PJC_ACCOUNTED_PROJECT_COST_DISTRIBUTION_INQUIRY_DUTY)
Project Cost Transaction Processing (ORA_PJC_PROJECT_COST_TRANSACTION_PROCESSING_DUTY)
Project Asset Maintenance (ORA_PJC_PROJECT_ASSET_MAINTENANCE_DUTY)

Users With the Project Accountant Role

To enable users with the seeded Project Accountant role, or a custom role derived from it, create and assign a custom role with the following configurations.

Function Security Policies > Privileges

For sponsored projects, assign these privileges:

Get Project Setups (PJF_GET_PROJECT_SETUPS_PRIV)
Manage Award Service (GMS_MANAGE_AWARD_SERVICE_PRIV)

Data Security Policies

Configure award data access for sponsored projects:

Data resource: Award for Table GMS_AWARD_HEADERS_B
Data set: Select by instance set
Condition name: Access awards for table GMS_AWARD_HEADERS_B for business units based on Grants Management Award security as defined in the Manage Data Access for Users page
Actions: View Award Data

Role Hierarchy > Roles and Permission Groups

Include these roles and duties:

Project Capitalization Analyst (ORA_PJC_PROJECT_CAPITALIZATION_ANALYST_DUTY)
Project Cost Setup Inquiry (ORA_PJC_PROJECT_COST_SETUP_INQUIRY_DUTY)
Accounted Project Cost Distribution Inquiry (ORA_PJC_ACCOUNTED_PROJECT_COST_DISTRIBUTION_INQUIRY_DUTY)
Project Cost Transaction Processing (ORA_PJC_PROJECT_COST_TRANSACTION_PROCESSING_DUTY)
Project Asset Maintenance (ORA_PJC_PROJECT_ASSET_MAINTENANCE_DUTY)

Business Unit Access

For both scenarios, ensure that users have access to the relevant business units. In Setup and Maintenance, use the Manage Data Access for Users task, select Business Unit as the security context, and assign the applicable business units.