Exclusions Involving Procurement Agents
For certain privileges to grant functional access, a user must have the privilege and a corresponding "action" as a "procurement agent" for a business unit. Access models and controls exclude users granted these privileges without corresponding procurement-agent actions. (These exclusions are specific to the Oracle Cloud data source.)
For example, suppose a user is assigned a role that includes the Create Purchase Agreement privilege. To create purchase agreements within a business unit, that user must also be a procurement agent for that unit and be granted the Manage Purchase Agreements action. An access model (and a control deployed from it) would return only users assigned both the privilege and the action.
A special consideration: Models don't take into account the business units in which procurement-agent assignments are granted. So if a model contains condition filters that involve business units, those filters may allow results that should be excluded. For example:
-
A user has the Create Purchase Agreement privilege. She also has the Manage Purchase Agreements procurement-agent action, but it applies only in a single business unit, BU1.
-
She also has a Create Payables Invoices privilege, but it's granted only within a second business unit, BU2.
-
A model includes access-point filters that place the two privileges in conflict, but also includes the condition filter "Within Same Business Unit Equals Yes."
-
The condition filter should cause the model to exclude the user, because her conflict doesn't occur within one business unit. Instead, the model returns a record of the user, because it ignores her grant of the Manage Purchase Agreements action being specific to BU1.
If an access-model filter cites any of the following privileges (or a role that includes it), the filter returns only users who are also assigned the corresponding procurement-agent action:
|
Functional Privilege |
Procurement-Agent Action |
|---|---|
|
Acknowledge Purchase Agreement PO_ACKNOWLEDGE_PURCHASE_AGREEMENT_PRIV |
Manage Purchase Agreements |
|
Cancel Purchase Agreement PO_CANCEL_PURCHASE_AGREEMENT_PRIV |
Manage Purchase Agreements |
|
Change Purchase Agreement PO_CHANGE_PURCHASE_AGREEMENT_PRIV |
Manage Purchase Agreements |
|
Create Blanket Purchase Agreement Line from Catalog PO_CREATE_BLANKET_PURCHASE_AGREEMENT_LINE_FROM_CATALOG_PRIV |
Manage Purchase Agreements |
|
Create Purchase Agreement PO_CREATE_PURCHASE_AGREEMENT_PRIV |
Manage Purchase Agreements |
|
Finally Close Purchase Agreement PO_FINALLY_CLOSE_PURCHASE_AGREEMENT_PRIV |
Manage Purchase Agreements |
|
Freeze Purchase Agreement PO_FREEZE_PURCHASE_AGREEMENT_PRIV |
Manage Purchase Agreements |
|
Hold Purchase Agreement PO_HOLD_PURCHASE_AGREEMENT_PRIV |
Manage Purchase Agreements |
|
Import Blanket Purchase Agreement PO_IMPORT_BLANKET_PURCHASE_AGREEMENT_PRIV |
Manage Purchase Agreements |
|
Import Contract Purchase Agreement PO_IMPORT_CONTRACT_PURCHASE_AGREEMENT_PRIV |
Manage Purchase Agreements |
|
Transfer Blanket Purchase Agreement to Catalog Administrator PO_TRANSFER_BLANKET_PURCHASE_AGREEMENT_TO_CATALOG_ADMINISTRATOR_PRIV |
Manage Purchase Agreements |
|
Transfer Blanket Purchase Agreement to Supplier PO_TRANSFER_BLANKET_PURCHASE_AGREEMENT_TO_SUPPLIER_PRIV |
Manage Purchase Agreements |
|
Acknowledge Purchase Order PO_ACKNOWLEDGE_PURCHASE_ORDER_PRIV |
Manage Purchase Orders |
|
Cancel Purchase Order PO_CANCEL_PURCHASE_ORDER_PRIV |
Manage Purchase Orders |
|
Cancel Purchase Order as Procurement Requester PO_CANCEL_PURCHASE_ORDER_AS_PROCUREMENT_REQUESTER_PRIV |
Manage Purchase Orders |
|
Change Purchase Order Line Negotiated Indicator PO_CHANGE_PURCHASE_ORDER_LINE_NEGOTIATED_FLAG_PRIV |
Manage Purchase Orders |
|
Change Purchase Order PO_CHANGE_PURCHASE_ORDER_PRIV |
Manage Purchase Orders |
|
Change Supplier Site PO_CHANGE_SUPPLIER_SITE_PRIV |
Manage Purchase Orders |
|
Close Purchase Order PO_CLOSE_PURCHASE_ORDER_PRIV |
Manage Purchase Orders |
|
Create Purchase Order from Requisitions PO_CREATE_PURCHASE_ORDER_FROM_REQUISITIONS_PRIV |
Manage Purchase Orders |
|
Create Purchase Order Line from Catalog PO_CREATE_PURCHASE_ORDER_LINE_FROM_CATALOG_PRIV |
Manage Purchase Orders |
|
Create Purchase Order PO_CREATE_PURCHASE_ORDER_PRIV |
Manage Purchase Orders |
|
Finally Close Purchase Order PO_FINALLY_CLOSE_PURCHASE_ORDER_PRIV |
Manage Purchase Orders |
|
Freeze Purchase Order PO_FREEZE_PURCHASE_ORDER_PRIV |
Manage Purchase Orders |
|
Hold Purchase Order PO_HOLD_PURCHASE_ORDER_PRIV |
Manage Purchase Orders |
|
Import Purchase Order PO_IMPORT_PURCHASE_ORDER_PRIV |
Manage Purchase Orders |
|
Purge Purchasing Document Open Interface PO_PURGE_OPEN_INTERFACE_PRIV |
Manage Purchase Orders |
|
Reassign Purchasing Document PO_REASSIGN_PURCHASING_DOCUMENT_PRIV_OBI |
Manage Purchase Orders |
|
Retroactively Price Purchase Order PO_RETROACTIVELY_PRICE_PURCHASE_ORDER_PRIV |
Manage Purchase Orders |
|
Generate Purchase Order PO_GENERATE_PURCHASE_ORDER_PRIV |
Manage Purchase Orders and Manage Requisitions |
|
Edit Supplier Profile Change Request POZ_MAINTAIN_SUPPLIER_PROFILE_CHANGE_REQUEST_PRIV |
Manage Suppliers |
|
Edit Supplier Registration Request POZ_EDIT_SUPPLIER_REGISTRATION_REQUEST_PRIV |
Manage Suppliers |
|
Maintain Supplier Site POZ_MAINTAIN_SUPPLIER_SITES_PRIV |
Manage Suppliers |
|
Maintain Supplier POZ_MAINTAIN_SUPPLIER_PRIV |
Manage Suppliers |
|
Merge Supplier POZ_MERGE_SUPPLIER_PRIV |
Manage Suppliers |