Edit Object Sharing Rules

You can edit the predefined or custom object sharing rules at any time. For example, you might want to assign a rule to additional access groups, or change the level of access a rule provides to a specific group.

Depending on what you want to do, you can choose to edit the object sharing rules from either of these locations:

• The Edit Access Group: Object Rules subtab (group context)

  You can review and edit all the object sharing rules assigned to a specific access group, either by you or by Oracle, when editing an access group. Reviewing rule information from a group context is useful if you want to see what access group members have to data for different objects, or if you want to review all the predefined rules assigned to a system group. For additional information, see the topic Edit Access Groups in this chapter.

• The Object Rules tab on the Access Groups page (object context)

  You can review or edit all the predefined and custom object sharing rules and access extension rules that have been created for a specific object on the Object Sharing Rules page. If you want to delete a custom rule, or edit an access extension rule, you can only do so from this page.

Follow these steps to edit rules from an object context.

1. Navigate to the Access Groups page in the Sales and Service Access Management work area.

2. On the Access Groups page, select the Object Rules tab.

3. On the Object Sharing Rules page, select the object you want to review from the Object list.

   All the rules and access extension rules defined for the object are listed.

4. Search for and select the rule whose details you want to edit.

   Details relating to the rule are displayed on the Edit Rule UI.

5. The changes you can make to a rule vary depending on whether you're editing a predefined rule or a rule you created yourself. But to use either type of rule, the rule must be active. To activate a rule, or inactivate a rule you no longer require, select or deselect the Active check box.

6. If you're editing a custom object sharing rule you created, you can delete the rule by selecting Delete from the Actions menu.

   Provided the rule isn't assigned to any access groups, the rule is deleted. You can't delete predefined rules.

7. Editing rule conditions:

   • If you're editing a predefined rule, you can't change the condition defined for the rule, delete the condition or add new conditions.

   • If you're editing a rule you created, you can create new conditions, or edit or delete the existing conditions in the Conditions area. For information on defining rule conditions, see the topic Create Custom Object Sharing Rules.

8. Editing access groups:

   The access groups the rule is assigned to are listed in the Action: Assign Access Group area. You can make these changes for both predefined and custom object sharing rules:

   • Enable or disable the rule for a specific access group by selecting or deselecting the Enable check box.

   • Remove an access group from the list by selecting the group and then selecting the Delete option from the Actions menu.

   • Change the access level provided by the rule for a specific group by changing the value in the Access Level drop-down list.

   • Assign the rule to additional custom or system access groups by performing these steps:

     • Select the Select and Add option from the Actions menu.

     • In the Select and Add: Access Group dialog box, search for and then select the custom or system access group you want to assign the rule to, then click Apply.

     • Add any other groups and, when you have completed your selections, click Done.

   Note: For a predefined rule for which Oracle has created the rule-system group association, a Lock icon indicates that this association is part of the default security configuration. In these cases, you can't edit the rule to change the access level for the group and you can't remove the rule from the group. The only change you can make is to enable or disable the rule for the group.

9. When you complete all your editing changes, click Save and Close from the Edit Rule page Actions menu.

10. On the Object Sharing Rules page, select the Publish Rules option from the Actions menu to apply the changes you made.

    When the Perform Object Sharing Rule Assignment Processing process next runs, any changes you've made to object record access are applied. If you want to apply the changes immediately, you can run the process manually using the steps outlined in the topic Run the Perform Object Sharing Rule Assignment Process.