Role Preferences

Select default role preferences for the enterprise during implementation. To set role preferences, you perform the Manage Applications Security Preferences task, which opens the General subtab of the Security Console Administration tab. From there, click the Roles subtab to display the Role Preferences page.

Copied-Role Names

It's best practice when creating roles to copy predefined roles and edit the copied versions of the roles. When you copy a predefined role:

• The ORA_ prefix, which identifies predefined roles, is removed automatically from the role code of the copied role.

• The enterprise prefix and suffix values are added automatically to the role name and code of the copied role.

You specify enterprise prefix and suffix values on the Role Preferences page. These are the default values:

• Prefix values are blank.

• The role-name suffix is Custom.

• The role-code suffix is _CUSTOM.

For example, if you copy the Channel Account Manager job role (ORA_ZPM_CHANNEL_ACCOUNT_MANAGER_JOB), then the default name and code of the copied role are:

• Channel Account Manager Custom

• ZPM_CHANNEL_ACCOUNT_MANAGER_JOB_CUSTOM

You can supply prefix values and change the suffix values on the Role Preferences page as required. If you change these values, click Save and the changes take effect immediately.

Graph Nodes and Default Views

On the Roles tab of the Security Console, you can display role hierarchies. By default, these hierarchies appear in tabular format. If you want to display role hierarchies in graphical format by default instead, deselect the Enable default table view option on the Role Preferences page.

When role hierarchies appear on the Roles tab, the number of nodes can be very high. You can limit the number of nodes by setting the Graph Node Limit option on the Role Preferences page. When you display a role hierarchy with more nodes than the specified limit, gray arrows indicate additional nodes. You can set such a node as the focus node to see the rest of its hierarchy.