Prerequisites for Data Sources

You may need to complete some preparatory steps to activate data sources. To set up a connection to an EPM-ARCS, EPM-FCCS, or OCI data source:

• If you haven't done so already, activate permission groups for the Risk Administrator, Advanced Access Controls Analyst, and Access Certification Administrator predefined roles, and for related custom roles if you have any. See the Required Security Update topic.

• The Advanced Controls Administrator duty role requires two privileges that support synchronized data sources. They're already added to the predefined role, but if you use a custom version of this role, you need to add the privileges to your version. The privileges are:

  • Manage Additional Advanced Control Data Sources (GTG_MANAGE_ADDITIONAL_RISK_ MANAGEMENT_DATA_SOURCES_PRIV)

  • View Additional Advanced Control Data Sources (GTG_VIEW_ADDITIONAL_RISK_ MANAGEMENT_DATA_SOURCES_PRIV)

  See the Copy or Edit Risk Management Roles in the Security Console topic.

Before you can import role-assignment data, you must add two privileges that aren't currently included in any predefined role. You can add the privileges directly to a custom job role, or to a custom version of the Advanced Controls Administrator duty role. The privileges are:

• Export Access Point Data (GTG_EXPORT_ACCESS_POINT_DATA_PRIV)

• Import Access Point Data (GTG_IMPORT_ACCESS_POINT_DATA_PRIV)