Create or Edit an Entitlement

To build an entitlement is to name it, activate or inactivate it, and add or remove access points.

1. Open the Access Entitlements page. Select Risk Management > Advanced Controls > Models > Actions > Access Entitlements.

2. Each row of the Access Entitlements page provides summary information about an existing entitlement. In this page, you may:

   • Select Create to build an entirely new entitlement.

   • Select the row for an entitlement you want to edit, and then the Edit icon. As an alternative, select the entitlement name to open the page that displays full details about it, and then the Edit button in that page.

3. Select values that characterize the entitlement:

   • Enter or modify a name of up to 250 characters and, optionally, a description.

     Consider creating a naming convention to distinguish entitlements that support access models and controls from those that support certification campaigns created in the Oracle Fusion Cloud Access Certifications application. A description may explain briefly the organizing principle or business purpose of the entitlement.

   • Select a status, Active or Inactive.

   • Under Comments, review any existing comments or select Add Comments to create a new one.

4. Select a data source. (Oracle Cloud is the default.) Only access points from the data source you select are available for inclusion in the entitlement. You can select the data source only as you create the entitlement, not when you edit it.

5. Add access points:

   • In the Selected Access Points grid, select the Add option.

   • In a Search and Add dialog, filter the list of access points. Among search criteria:

     • Name and Description are display values identifying an access point. The Access Point ID is an internal name for a role or privilege, or the path to a user-defined access point.

     • Access Point Type values include Role, Privilege, and User Defined.

     • As you enter search values, you can use the percent symbol (%) as a wildcard.

   • Select access points from the filtered list.

     To add one, select its row. To add a continuous set, select the first point in the set, hold the Shift key, and select the last point. To add a discontinuous set, hold the Ctrl key as you select access points.

   • When you're satisfied with your selections, select Apply. Your selections appear in the Selected Access Points grid.

   • You may then enter new search parameters and select other access points, or close the Search and Add dialog.

6. Potentially, delete access points:

   • In the Selected Access Points grid, select the rows for the access points you want to delete. Again, use the Shift or Ctrl key to select multiple rows.

   • Select the Delete option.

7. Save the entitlement.

An entitlement for the Imported data source may contain access points that become inactive because a new data import doesn't include role assignments that support those access points. As long as the entitlement contains other access points that are valid, however, it continues to function without error. The effect of an access point being invalid is that it doesn't contribute to the results returned by a model or control that uses the entitlement. It would resume doing so if a subsequent data import were to restore the access point.