1. How do I create and manage security access groups in Oracle CX?
  2. Edit Object Sharing Rules

Edit Object Sharing Rules

You can edit the predefined or custom object sharing rules at any time. For example, you might want to assign a rule to additional access groups, or change the level of access a rule provides to a specific group.

Depending on what you want to do, you can edit the object sharing rules from either of these locations:

  • The Edit Access Group: Object Rules subtab (in which case there's a group context)

    You can review and edit all the object sharing rules assigned to a specific access group, either by you or by Oracle, when editing an access group. Reviewing rule information from a group context is useful to see what access group members have to data for different objects, or if you want to review all the predefined rules assigned to a system group. For additional information, see Edit Access Groups.

  • The Object Rules tab on the Access Groups page (in which case there's an object context)

    You can review or edit predefined and custom object sharing rules and access extension rules that have been created for a specific object on the Object Sharing Rules page.

    To delete a custom rule, or edit an access extension rule, you can only do it from this page.

Follow these steps to edit rules from an object context.

  1. Navigate to the Access Groups page in the Sales and Service Access Management work area.
  2. On the Access Groups page, select the Object Rules tab.
  3. On the Object Sharing Rules page, select the object you want to review from the Object list.
  4. Search for and select the rule whose details you want to edit. Details relating to the rule are displayed on the Edit Rule UI.
  5. The changes you can make to a rule vary depending on whether you're editing a predefined rule or a rule that you've created. To use either type of rule, the rule must be active. To activate a rule, or inactivate a rule you no longer need, select or deselect the Active checkbox.
  6. If you're editing a custom object sharing rule you created, you can delete the rule by selecting Delete from the Actions menu. As long as the rule isn't assigned to any access groups, the rule is deleted.

    You can't delete predefined rules.

  7. Editing rule conditions:
    • If you're editing a predefined rule, you can't change the condition defined for the rule, delete the condition, or add new conditions.
    • If you're editing a rule you created, you can create new conditions, or edit or delete the existing conditions in the Conditions area. For information on defining rule conditions, see Create Custom Object Sharing Rules.
  8. Editing access groups:

    The access groups the rule is assigned to are listed in the Action: Assign Access Group area. You can make these changes for both predefined and custom object sharing rules:

    • Enable or disable the rule for a specific access group by selecting or deselecting the Enable checkbox.
    • Remove an access group from the list by selecting the group and then selecting the Delete option from the Actions menu.
    • Change the access level provided by the rule for a specific group by changing the value in the Access Level drop-down list.
    • Assign the rule to additional custom or system access groups by performing these steps:
      1. Select the Select and Add option from the Actions menu.
      2. In the Select and Add: Access Group dialog box, search for and then select the custom or system access group you want to assign the rule to and click Apply.
      3. Add any other groups and, when you've completed your selections, click Done.
    Note: For a predefined rule that Oracle has created the rule-system group association for, a Lock icon indicates that this association is part of the default security configuration. In these cases, you can't edit the rule to change the access level for the group and you can't remove the rule from the group. The only change you can make is to enable or disable the rule for the group.

  9. When you're done editing, click Save and Close from the Edit Rule page Actions menu.

  10. On the Object Sharing Rules page, select the Publish Rules option from the Actions menu to apply the changes you made.

    When the Perform Object Sharing Rule Assignment Processing process next runs, any changes you've made to object record access are applied. To apply the changes immediately, you can run the process manually using the steps outlined in Run the Perform Object Sharing Rule Assignment Process.

Related Topics