1. Using Access Certifications
  2. Create an Access Point or Entitlement Scoping Filter

Create an Access Point or Entitlement Scoping Filter

You can create access-point or entitlement filters only if your certification uses the bottom-up scoping approach. You can create any number of them, and each specifies the data source from which it returns roles. These filters have an OR relationship; each returns roles independently of the others.

  1. Click the Add button in the Scoping Filters region. A row appears.

  2. In the Object field of that row, select a value that defines the type of filter you're creating and the data source from which it returns roles:

    • To filter for roles from the Oracle Cloud data source, select Access Point for an access-point filter, or Access Entitlement for an entitlement filter.

    • To filter for roles from any other data source, select one of those two values prefixed by the name of the data source from which roles are to be selected. To filter for EPM-ARCS roles, for example, select EPM ARCS Access Point or EPM ARCS Access Entitlement.

  3. In Attribute and Condition fields, select the only values available to you:

    • For an access-point filter, select Access Point Name in the Attribute field and Equals in the Condition field.

    • For an entitlement filter, select Access Entitlement Name in the Attribute field and Equals in the Condition field.

  4. A Values field presents a list of access points or entitlements. If the value you want is on display, select it. Otherwise enter a text string to search for it. As you do, a window presents access points or entitlements whose names include the text you've typed. Select one of them. Your text can match display or internal names.

An example: Assume that in the Oracle Cloud data source, Accounts Payable Manager is a job role, and Cancel Payables Invoice is a privilege that belongs to it. Assume also that Manage Payables is an entitlement, and it includes the Accounts Payable Manager role.

  • The access-point filter Access Point Name Equals Accounts Payable Manager would return that job role and no other.

  • The access-point filter Access Point Name Equals Cancel Payables Invoice would return the Accounts Payable Manager job role. But it would also return other job roles that have this privilege: Accounts Payable Invoice Supervisor, Accounts Payable Supervisor, Tax Manager, and Tax Specialist.

  • The entitlement filter Access Entitlement Name Equals Manage Payables would return the Accounts Payable Manager job role. It would also return other job roles that either are named specifically in the Mange Payables entitlement, or are the parents of lower-level roles or privileges named in the entitlement.