1. Using Access Certifications
  2. Create an Access Point or Entitlement Scoping Filter

Create an Access Point or Entitlement Scoping Filter

You can create an access-point or entitlement filter only if your certification uses the bottom-up scoping approach. Even then, you can create only one filter of either the access-point or entitlement type.

This filter must capture all roles you want to include in the certification. (You may then add condition filters to remove unwanted roles.)

  1. Click the Add button in the Scoping Filters region. A row appears.

  2. In the Object field of that row, select Access Point for an access-point filter or Access Entitlement for an entitlement filter.

  3. In Attribute and Condition fields, select the only values available to you:

    • For an access-point filter, select Access Point Name in the Attribute field and Equals in the Condition field.

    • For an entitlement filter, select Access Entitlement Name in the Attribute field and Equals in the Condition field.

  4. In a Values field, enter a text string. As you do, a window presents access points or entitlements whose names include the text you've typed. Select one of them. Your text can match display or internal names. If you select an entitlement, be sure it's configured to support the Oracle Cloud data source. Oracle Access Certifications doesn't support analysis of data from other sources.

An example: Assume that Accounts Payable Manager is a job role, and Cancel Payables Invoice is a privilege that belongs to it. Assume also that Manage Payables is an entitlement, and it includes the Accounts Payable Manager role.

  • The access-point filter Access Point Name Equals Accounts Payable Manager would return that job role and no other.

  • The access point filter Access Point Name Equals Cancel Payables Invoice would return the Accounts Payable Manager job role. But it would also return other job roles that have this privilege: Accounts Payable Invoice Supervisor, Accounts Payable Supervisor, Tax Manager, and Tax Specialist.

  • The entitlement filter Access Entitlement Name Equals Manage Payables would return the Accounts Payable Manager job role. It would also return other job roles that either are named specifically in the Mange Payables entitlement, or are the parents of lower-level roles or privileges named in the entitlement.