Sources of Access Condition Values

Access conditions search for values from the following sources:

  • A condition that uses the Access Entitlement Name attribute searches for entitlements listed in the Entitlements page. Your organization may have configured these, or may have imported them along with models that use them. The Access Entitlement Name attribute is available in each of the Oracle Cloud and EPM-ARCS data sources.

  • A condition that uses the Access Point, HCM Data Role, or User Name attribute searches the Security Console for records of access points, roles, or users. If a condition uses the Access Point attribute, it also searches for user-defined access points. The HCM Data Role attribute is available only in the Oracle Cloud data source. The Access Point and User Name attributes are available in both data sources.

  • The remaining condition attributes include Asset Book, Business Unit, Data Access Set, Ledger, and Reference Data Set. These attributes are available only in the Oracle Cloud data source. They recognize definitions configured in the Manage Data Access for Users task in Oracle Fusion Functional Setup Manager. Each of its records defines the data access a particular user has when assigned a particular role. A condition filter may then allow a model to find access conflicts only when they involve role assignments with the defined data access.

    For example, Manage Data Access for Users may specify that the assignment of a role to some users grants access only to records associated with a specific business unit. If a model includes a condition filter that sets the Business Unit attribute equal to that unit, it finds conflicts involving that role only when it's assigned to those users.