Managing Groups

Oracle Enterprise Performance Management Cloud recognizes three types of groups:

• PREDEFINED: These groups are automatically created for each predefined role. All users are assigned to a PREDEFINED group based on their predefined role (for example, Power User).
• EPM: These are the groups that you create in the Access Control. They cannot be created in the Identity Console. They also do not show up in Identity Console.
• IDCS: These are the groups that you create in the Oracle Cloud Identity Console. They may be synchronized with an identity provider (for example, Okta or Azure AD). They show up in Access Control, but you cannot create them through Access Control.

In Manage Groups tab, groups are categorized by type and image to differentiate easily. To search for a specific group, see Using Search for instructions.

PREDEFINED Groups

To enable you to view user assignments, Access Control lists the users in predefined roles as PREDEFINED groups.

Key Considerations:

• PREDEFINED groups can be assigned as members of EPM groups.
• PREDEFINED groups are not editable.

  To view a PREDEFINED group, select View under Actions against that group. You can see a list all the EPM Cloud users assigned to the group.

For more information on predefined roles, see Understanding Predefined Roles in Getting Started with Oracle Enterprise Performance Management Cloud for Administrators.

EPM Groups

You can use the following options on the Manage Groups screen to create and manage EPM groups.

• Create button - Creates a new EPM group. See Creating EPM Groups

• Export to CSV button - Exports the EPM groups to a CSV file. See Exporting EPM Cloud Groups to a CSV File
• Edit (Action) - Edits the EPM Group in the selected row of the group listing. See Editing EPM Groups
• Delete (Action) - Deletes the EPM Group in the selected row of the group listing. See Deleting EPM Groups

Key Considerations:

• EPM groups can be assigned as members to larger EPM groups.
• You cannot use Access Control to import group information from a file to create groups. You may use Migration or the createGroups EPM Automate command to import groups.

IDCS Groups

In OCI (Gen 2) environments, you can use Identity Cloud Service (IDCS) groups to assign predefined roles to multiple EPM Cloud users. See Using Identity Cloud Service Groups to Assign Predefined Roles to Users in Oracle Cloud Identity Console or Using Identity Cloud Service Groups to Assign Predefined Roles to Users in Oracle Cloud Console in Getting Started with Oracle Enterprise Performance Management Cloud for Administrators.

Key Considerations:

• IDCS groups are not editable.

  To view a IDCS group, select View under Actions against that group. You can see a list of all the EPM Cloud users assigned to the group.

• IDCS groups can be assigned to application roles and EPM groups.

Caution:

If an IDCS group shares its name with an EPM or a PREDEFINED group, or if the name exceeds 256 characters, it will not show up in Access Control. It is crucial to understand that users in such IDCS groups won't be able to log in.

Troubleshooting

See Resolving User, Role, and Group Management Issues in Oracle Enterprise Performance Management Cloud Operations Guide.