1. Using Advanced Controls
  2. Select Business Objects for an Access Model

Select Business Objects for an Access Model

As you create a model, you assign a business object to each filter you define. A business object is, in effect, a set of related values that form a subset of the data available from a data source. It provides data for the filter to evaluate. For access analysis, each data source has its own set of three business objects.

  • Use an access-point business object to create a filter that specifies an access point. The filter then returns users assigned that access point. In the Oracle Cloud data source, an access point is any role or privilege. In the EPM-ARCS data source, access points include the Service Administrator, Power User, User, and Viewer predefined roles, and application roles that apply to account reconciliation.

  • Use an entitlement business object to create a filter that specifies an entitlement. The filter then returns users assigned any access point in the entitlement.

  • Use a condition business object to create a condition filter, which defines exemptions from analysis by a model or control.

In the Oracle Cloud data source, these business objects are called Access Point, Access Entitlement, and Access Condition. In the EPM-ARCS data source, three distinct business objects are called EPM-ARCS Access Point, EPM-ARCS Access Entitlement, and EPM-ARCS Access Condition.

Each business object provides data specific to its data source. A model may include business objects from only one of the data sources, to detect access conflicts within that data source. Or a model may include business objects from both data sources, to test for access conflicts that occur across the data sources.

In the Create Access Model page, business objects from one data source are available by default. The Oracle Cloud objects are the defaults if you do nothing to replace them, but you can designate the EPM-ARCS objects as the defaults (see Set Up Data Sources). As you define model filters, you can use default business objects without doing anything to make them available. To use business objects from the other data source, however, you have to select them. You can also remove business objects you don't need, even those that were available by default (and add them back if you change your mind).

To select business objects for a model:

  1. Click Add in the Model Objects panel of the page to create or edit a model. A Select Business Objects page opens.

  2. Select the objects you want. For each, click the plus-sign icon in its row. The icon changes to an image that displays a check mark.

  3. When you finish selecting objects, click Done to return to the create- or edit-model page. (The Done icon looks like a less-than symbol.) A representation of each object appears in the Model Objects panel. In it, you can view the attributes of the object.

Use either of two methods to remove business objects:

  • As you work in the Select Business Objects page, click the check-mark icon for an object that's selected for the model. The icon becomes a plus sign, indicating that the object is no longer selected.

  • Use the representation of an object in the Model Objects panel of the create- or edit-model page. There, click the deletion icon (×) in the title bar of the object.