3 User Roles and Privileges  

In Oracle Financial Services Compliance Regulatory Reporting Cloud Service (OFS CRR CS), users have roles through which they gain access to functions and data. Users can have any number of roles.

The following figure shows the User Persona Details:

Figure 3-1 User Roles and Privileges

Description of "Figure 3-1 User Roles and Privileges"

Note:

• User-Group mapping changes from IDCS will take five minutes to sync with application. If these changes are made during active user session then it will be reflected on next login.
• You can create and manage Application users as per your requirements. For example, you can map Pipeline Admin group and CM Admin group to one user.
• To take action from Case Management, CM user must have CRR Supervisor permission.
• For CRR status to flow to Case Management, CRR user must have CM Supervisor permission.

Role-Based Access Control

Role-based security in Oracle Financial Services Compliance Regulatory Reporting Cloud Service (OFS CRR CS) controls who can do what on which data.

Table 3-1 Role-Based Access Control

Component	Description
Who	Is a role assigned to a user?
What	Is a function that users with the role can perform?
Which Data	Is the set of data that users with the role can access when performing the function?

This table provides some examples of role-based access

Table 3-2 role-based access

Who	What	Which Data
Data Administrator	Can perform Data Preparation and ingestion	Business Data
Case Analyst	Can view cases and update cases	Business and Operational Data

User Group, Role, and Activities

The following table provides the User Group, User Role mapping, and activities. 

Table 3-3 User Group, Role, and Activities

User Groups	User Role	Activities
Identity Administrator	Identity Administrator	View the reports View the object storage View the OAUTH credentials Perform the Identity and access management operations
Identity Authorizer	Identity Authorizer	Authorize the Identity and access management operations
IDCS Administrator	IDCS Administrator	Create users Map users to  IDNTY_ADMIN group Map users to IDNTY_AUTH group
RR Administrator Group	RR Admin	Upload reference data View workflow of the report
RR Analyst Group	GoAML RR Analyst US SAR RR Analyst	View reports Edit reports Submit for the approval
RR Auditor Group	GoAML RR Auditor US SAR RR Auditor	View report details
RR GoAML Menu Group	GoAML RR Supervisor GoAML RR Analyst GoAML RR Auditor	Access GoAML application
RR Supervisor Group	GoAML RR Supervisor US SAR RR Supervisor	View reports Edit reports Approve reports Generate E-File Submit report the regulator
RR User Menu Group	US SAR RR Supervisor US SAR RR Analyst US SAR RR Auditor	Access US SAR Application
RR PH STR Menu Group	PH STR RR Supervisor PH STR RR Analyst	Access PH STR Application