Create Access Extension Rules

Create access extension rules to extend the access defined for an object in a custom or predefined object sharing rule to a related object. Members of access groups assigned the object sharing rule will then receive access to the records of the related object, with the access level you choose in the access extension rule.

For example, to extend the access defined for the Account object to the related object, Activity, so that all users who can access account data have access to activity data for the account, use steps similar to the following.

Navigate to the Access Groups page in the Sales and Service Access Management work area.
On the Access Groups page, click the Object Rules tab.
Select the Synchronize Custom Objects and Fields option from the Actions menu to make sure that custom attributes or objects that are enabled for access groups are available on the UI.
Select the object you're creating the extension rule for in the Object drop-down list. For example, select the Activity object.

Any existing object sharing rules or access extension rules defined for the object are displayed.
In the Access Extension Rules area, click Create.

On the Create Access Extension Rule page, specify these values.

Field	Description
Name	Enter a unique name for the rule. It's a good idea to use a meaningful name that identifies the purpose of the rule. For example, if you're creating a rule to extend the access defined for an account to its related activities, you might name the rule something like ActivityToAccount.
Description	Enter additional details about the rule if required.
Active	Rules are active by default. Deselect the Active check box if you're not yet ready to apply the rule.

From the Related Object list, select the object whose access you want to extend. For example, select Account.

All the object sharing rules defined for the related object you selected are listed in the rules table.

Note: Only objects related to the object you're creating the rule for are listed in the Related Object list. For standard objects, the relationship between objects is predefined by Oracle. For example, if you're creating the rule for the Activity object, then the default related objects include Account, Contact, Sales Lead and Opportunity. But if you used Application Composer to define a custom relationship between two standard objects, between a custom object and a standard object, or between two custom objects, then additional objects are also available to select.
From the Relationship list, select the relationship that applies to the two objects in the access extension rule. For this example, select the Account to Activity (Standard) relationship.

More than one predefined or custom relationship can be defined between the two objects in an access extension rule. For example, if you're creating the rule for the Quote and Order object and the related object is the Account object, then these two predefined relationships are listed in the Relationship field and you can select whichever is relevant:
- Account to Quote and Order Account (Standard)
- Account to Quote and Order's Opportunity Account (Standard)
Object relationship names that include (Standard) at the end of the name are predefined by Oracle. See the section Object Relationship Naming Conventions at the end of this topic for additional information about naming conventions for standard relationships.

Select one of these options depending on whether you want to extend the access provided by all rules or by selected rules to the related object.

Option	Description
Extend all access defined for related object	Select this option if you want to extend the access provided by all the rules to all the groups assigned the rule. Any access group members assigned access to the related object by any of the rules listed is assigned the same access to the object you're creating the extension rule for. You can't change the level of access provided by the rules.
Select rules to extend access defined for related object	Select this option if you want to extend the access of only the rules you select to only the groups you select. When you select this option, the Read, Update and Delete access level check boxes for each rule in the rules table are deselected. To apply a rule to your selected object, click one or more of the check boxes for the rule. For example, click the Update check box for a rule to specify that anyone who can access the related object (for example, Account) can update data for the object you're creating the rule for (for example, Activity). There's a separate row for each rule-group combination so you can choose to extend the access provided by a rule only to a specific access group or to a number of groups. If you don't want to apply a rule, don't select the access level check boxes for the rule.

Option

Description

Extend all access defined for related object

Select this option if you want to extend the access provided by all the rules to all the groups assigned the rule.

Any access group members assigned access to the related object by any of the rules listed is assigned the same access to the object you're creating the extension rule for. You can't change the level of access provided by the rules.

Select rules to extend access defined for related object

Select this option if you want to extend the access of only the rules you select to only the groups you select.

When you select this option, the Read, Update and Delete access level check boxes for each rule in the rules table are deselected.

To apply a rule to your selected object, click one or more of the check boxes for the rule. For example, click the Update check box for a rule to specify that anyone who can access the related object (for example, Account) can update data for the object you're creating the rule for (for example, Activity).

There's a separate row for each rule-group combination so you can choose to extend the access provided by a rule only to a specific access group or to a number of groups.
If you don't want to apply a rule, don't select the access level check boxes for the rule.

Click Clear at any time to deselect all the Read, Update, and Delete selections you made.
Click Save and Close to save your changes.
Publish the new rule on the Object Sharing Rules page by selecting the Publish Rules option from the Actions menu.
The access extension rule is assigned when the Perform Object Sharing Rule Assignment Processing process next runs.

Object Relationship Naming Conventions

The object relationship names listed in the Relationship field on the Create Access Extension Rule page include (Standard) at the end of the name if they're predefined by Oracle.

Standard relationship names distinguish between contacts in a business-to-business (B2B) or business-to-consumer (B2C) sales environment. In a B2B environment, the customer is a business or corporation (an account) and a contact refers to an individual who's associated with the account. In a B2C environment, the customer is an individual and a contact refers to the individual consumer. To reflect these differences the relationship names use the term Contact to refer to an individual associated with an account, and the term Contact of Type Account Consumer to refer to an individual consumer.

For example, if you create an access extension rule for the Opportunity object and the related object is the Contact object, then two predefined relationships are listed in the Relationship field:

Contact to Opportunity (Standard)

This relationship applies to a B2B environment. A specific individual is associated as a contact on the opportunity. The access extension rule lets users who can access a contact (individual) access the opportunities associated with the individual.
Contact of Type Account (Consumer) to Opportunity Account (Standard)

This relationship applies to a B2C environment. A specific consumer is associated as an account on the opportunity. The access extension rule lets users who can access a contact (consumer) access the opportunities associated with this consumer.