Set Up Access and Security for the Project Contract Validation Assistant
This topic provides setup guidance for administrators who need to make the Project Contract Validation Assistant available to contract users.
Before You Start
- You must have access to AI Agent Studio.
- You must have the Application Implementation Consultant predefined role to cnfigure the assistant.
- Users who interact with the assistant must have access to contracts and also to the published agent team.
Required User Roles
Users must be assigned one of these predefined roles, or a custom role copied from
one of these roles:
- Customer Contract Administrator
- Customer Contract Manager
Required Custom Role Configuration
If you use a custom role, configure the role with the required privileges and duty roles.
Function Security Policies
Add these functional privileges:
- Edit Contract (OKC_EDIT_CONTRACT_PRIV)
- Edit Contract by Web Service (OKC_EDIT_CONTRACT_VIA_WEB_SERVICE_PRIV)
- Enable Sell Intent (OKC_MANAGE_CONTRACT_SELL_PRIV)
- View Contract (OKC_VIEW_CONTRACT_PRIV)
Data Security Policy
Add this data security policy:
- Grant on Contract
- Data Resource: Contract Header for Table OKC_K_HEADERS_ALL_B
- Data Set: Select by instance set
- Actions: Update, View Contract, Read, Manage Contract
- Condition: Access the contract for table OKC_K_HEADERS_ALL_B for the business units for which users are authorized
Role Hierarchy
Add these duty roles:
- Contract Amendment (ORA_OKC_CONTRACT_AMENDMENT_DUTY)
- Contract Authoring (ORA_OKC_CONTRACT_AUTHORING_DUTY)
- Contract Search and View Access (ORA_OKC_CONTRACT_SEARCH_VIEW_DUTY)
User Setup
Assign the predefined or custom role to each user who needs to use the assistant.
In Manage Users, make sure each user has the required Resource Role and Organization setup so they can access contracts for the appropriate business units.
Associate the Role with the Agent Team
- Go to Navigator > Tools > AI Agent Studio.
- Open Agent Teams.
- Edit the agent team that contains the Project Contract Validation Assistant.
- Click the Agent Team Settings icon.
- Open the Security tab.
- Add the predefined or custom role.
- Apply your changes.
- Update and publish the agent team.
Note: Users can use the assistant only when they have both
contract access and access to the published agent team. If either access path is
missing, the assistant may not find the contract or may report that the user doesn’t
have the required access.