Creating Custom Roles for Oracle Permitting and Licensing

Creating Custom Roles Overview

In this task the following roles are created by the automated security setup process launched from Functional Setup Manager. The roles created depend on the offering you are implementing.

After the roles are created, you can then assign them to users (agency or public users) as described in the section, "Assigning Roles."

Note: The Role Category for Oracle Permitting and Licensing roles is Financials - Job Roles.

Running the Public Sector Security Setup Job to Create Custom Roles

You create the required custom security roles for your offering by completing the Run Public Sector Security Setup Process in the Initial Setup Functional Area of your offering in the Functional Setup Manager.

To create Public Sector Licensing and Permitting custom roles:

Access Functional Setup Manager.
Select your offering in the Setup drop-down list.
Select the Initial Setup functional area.
Click the Run Public Sector Security Setup Process task.
The page displayed enables you to launch an Oracle Enterprise Scheduler (ESS) process.
(Optional) Use the Process Options and Advanced buttons to set any desired settings.
Click Submit.

Note: The Public Sector Security Setup Job should be run with each upgrade of your pod as well as making sure you have managed users roles as per the descriptions in this topic.

The following sections describe the roles required per offering and to which users they need to be assigned.

Creating a Custom Role to Enable Sandbox Testing

In some cases, such as the PSC Custom Sandbox Access role, you need to create the role manually in the Security Console.

Note: This process should not be completed in a production environment. It is only intended for testing and development environments.

To create PSC Custom Sandbox Access role manually:

Open the Security Console, select the Roles tab, and click Create Role.

Create role with these attribute values:

Page Element	Value
Role Name	PSC Custom Sandbox Access
Role Code	CUSTOM_SANDBOX_ACCESS
Role Category	Financials - Job Roles

On the Function Security Policies tab, add the Administer Sandbox (FND_ADMINISTER_SANDBOX_PRIV) privilege.
On the Role Hierarchy tab, add the PSC Access Sandboxes (ORA_PSC_ACCESS_SANDBOXES) duty role.

Add the role to relevant user IDs you will use for testing intake forms.

User Type	Configuration
Public Registered User	Create or modify the user with the Manage Public Users page and then assign the CUSTOM_SANDBOX_ACCESS role.
Agency User	Create or modify the user on the Agency Staff page, providing all relevant job functions and attributes. Use the Agency Staff Access page and assign the CUSTOM_SANDBOX_ACCESS role in addition to the prescribed list of roles.

User Type

Configuration

Public Registered User

Create or modify the user with the Manage Public Users page and then assign the CUSTOM_SANDBOX_ACCESS role.

Agency User

Create or modify the user on the Agency Staff page, providing all relevant job functions and attributes.

Use the Agency Staff Access page and assign the CUSTOM_SANDBOX_ACCESS role in addition to the prescribed list of roles.

Common Custom Roles

Role Code	Role Name	Description
CUSTOM_PSC_REGISTERED_PUBLIC_USER	PSC Custom Registered Public User	Groups all the registered public user access privileges. This role requires the following child roles, depending on your offering. For Permits: CUSTOM_PSC_MANAGE_PERMITS CUSTOM_PSC_VIEW_PERMITS CUSTOM_PSC_APPLY_PERMITS_DATA Note: Before contacts can manage attachments, comments, contacts, and inspections for their permits, you must add the PSC Contact User (ORA_PSC_CONTACT_USER_DUTY) duty role to CUSTOM_PSC_REGISTERED_PUBLIC_USER on the Role Hierarchy page in the Security Console and enable permit access on the Contact Type page. For Planning and Zoning: CUSTOM_PSC_MANAGE_PNZ CUSTOM_PSC_VIEW_PNZ CUSTOM_PSC_APPLY_PNZ_DATA For Code Enforcement: CUSTOM_PSC_CREATE_CE_INCIDENT For Business Licenses: CUSTOM_PSC_APPLY_BL
CUSTOM_PSC_VIEW_ALL_APPLICATIONS	PSC View All Applications	Allows view access to all custom objects to agency staff. This role requires these child roles: CUSTOM_PSC_VIEW_PERMITS CUSTOM_PSC_VIEW_PNZ
CUSTOM_PSCR_OIC_PROXY_USER	PSCR Proxy User for OIC	Allows the Oracle Integration Cloud (OIC) system to connect to Oracle Permitting and Licensing to exchange data during transaction processing. Note: This role should not be assigned to any user other than the PSCR OIC Proxy User. This role requires these delivered child roles: ORA_PSC_UPDATE_PERMIT_STATUS_ALL_AGG ORA_PSC_VIEW_PLANNER_AGG ORA_PSC_UPDATE_PNZ_STATUS_ALL_AGG ORA_PSC_VIEW_BL_SPECIALIST_ASSIGNMENT_AGG ORA_PSC_UPDATE_BUSINESS_LICENSE_STATUS_ALL_AGG ORA_PSC_PLAN_COORDINATOR_JOB ORA_PSC_BUSINESS_LICENSE_ADMINISTRATOR ORA_PSC_OIC_PCS_USER This role requires these custom child roles: CUSTOM_PSC_MANAGE_PERMITS CUSTOM_PSC_MANAGE_PERMITS_AGENCY CUSTOM_PSC_MANAGE_PNZ CUSTOM_PSC_MANAGE_PNZ_AGENCY CUSTOM_PSC_MANAGE_BL_ADMIN
CUSTOM_SANDBOX_ACCESS Note: This role must be created manually in the Security Console.	PSC Custom Sandbox Access

Permits Custom Roles

Role Code	Role Name	Description
CUSTOM_PSC_MANAGE_PERMITS	PSC Custom Manage Permits	Allows users to apply for permits and update permits.
CUSTOM_PSC_VIEW_PERMITS	PSC Custom View Permits	Allows users to view the permit detail tab in the permits application.
CUSTOM_PSC_APPLY_PERMITS_DATA	PSC Custom Permit Applicant Data Access	Allows users to apply for permits and update their own permits in while in the status of pending.
CUSTOM_PSC_MANAGE_PERMITS_AGENCY	PSC Custom Permit Data Access for Agency	Allows users to apply for permits and update permits that have not been closed. This role requires these child roles: CUSTOM_PSC_MANAGE_PERMITS CUSTOM_PSC_VIEW_PERMITS

Planning and Zoning Custom Roles

Role Code	Role Name	Description
CUSTOM_PSC_MANAGE_PNZ	PSC Custom Manage Planning and Zoning Applications	Allows users to apply for Planning and Zoning applications.
CUSTOM_PSC_VIEW_PNZ	PSC Custom View Planning and Zoning Applications	Allows users to view Planning and Zoning applications.
CUSTOM_PSC_APPLY_PNZ_DATA	PSC Custom Planning and Zoning Applications Applicant Data Access	Allows users to apply for Planning and Zoning applications and update their own Planning and Zoning applications in pending status.
CUSTOM_PSC_MANAGE_PNZ_AGENCY	PSC Custom Planning and Zoning Applications Data Access for Agency	Allows users to apply for Planning and Zoning applications and update Planning and Zoning applications that are not closed. While creating the CUSTOM_PSC_MANAGE_PNZ_AGENCY role, add the following roles as child roles on the Role Hierarchy tab: CUSTOM_PSC_MANAGE_PNZ CUSTOM_PSC_VIEW_PNZ

Code Enforcement Custom Roles

Role Code	Role Name	Description
CUSTOM_PSC_CREATE_CE_INCIDENT	PSC Custom Create Code Enforcement Incidents	Allows users to create incidents.
CUSTOM_PSC_CREATE_CE_CASE	PSC Custom Create Code Enforcement Cases	Allows users to create cases.
CUSTOM_PSC_MANAGE_CE_AGENCY	PSC Custom Manage Incidents and Cases as CE Agency User	Allows agency users to manage cases and incidents. This role requires these child roles: CUSTOM_PSC_CREATE_CE_INCIDENT CUSTOM_PSC_CREATE_CE_CASE
CUSTOM_PSC_MANAGE_CE_ADMIN	PSC Custom Manage Incidents and Cases as CE Agency Admin	For system administration purposes for managing cases and incidents. This role requires these child roles: CUSTOM_PSC_CREATE_CE_INCIDENT CUSTOM_PSC_CREATE_CE_CASE This role requires these functional security privileges: FND_ADMINISTER_SANDBOX_PRIV ZCX_MANAGE_EXTENSIBLE_OBJECT_PRIV

Business Licenses Custom Roles

Role Code	Role Name	Description
CUSTOM_PSC_VIEW_BL	PSC Custom View Business Licenses	Allows users to view business licenses.
CUSTOM_PSC_APPLY_BL	PSC Custom Apply Business Licenses	Allows users to apply for business licenses.
CUSTOM_PSC_MANAGE_BL_AGENCY	PSC Custom Manage Business License Applications as Agency Users	Allows agency users to manage business licenses.
CUSTOM_PSC_MANAGE_BL_ADMIN	PSC Custom Manage Business License Applications as Admin Users	For system administration purposes for managing business licenses.

Assigning Roles

You assign roles to users in the system using delivered setup pages. For public users, you use the Public User Roles page and for agency staff members, you use the Agency Staff Access page.

User Type	Role Assignments	Setup Page
Anonymous User	This is the default access available to all users, including users who have not signed in. You do not assign roles to this user type.	None.
Registered Public User	CUSTOM_PSC_REGISTERED_PUBLIC_USER	Public User Roles page
System Administrator	PSC Agency Staff PSC System Administrator CUSTOM_PSC_MANAGE_PERMITS_AGENCY CUSTOM_PSC_MANAGE_PNZ_AGENCY CUSTOM_PSC_MANAGE_CE_ADMIN CUSTOM_PSC_MANAGE_BL_ADMIN IT Security Manager Application Implementation Consultant Custom Objects Administration (This role will be available for assignment only after the first transaction type is created.)	Create the user with the Agency Staff page. Add roles using the Agency Staff Access page.
Business Analyst	PSC Agency Staff PSC Business Analyst CUSTOM_PSC_MANAGE_PERMITS_AGENCY CUSTOM_PSC_MANAGE_PNZ_AGENCY CUSTOM_PSC_MANAGE_CE_ADMIN CUSTOM_PSC_MANAGE_BL_ADMIN IT Security Manager Application Implementation Consultant Custom Objects Administration (This role will be available for assignment only after the first transaction type is created.)	Create the user with the Agency Staff page. Add roles using the Agency Staff Access page.
Branding Administrator	PSC Agency Staff PSC System Administrator CUSTOM_PSC_MANAGE_PERMITS_AGENCY CUSTOM_PSC_MANAGE_PNZ_AGENCY CUSTOM_PSC_MANAGE_CE_ADMIN CUSTOM_PSC_MANAGE_BL_ADMIN PSC Registered Public User IT Security Manager Application Implementation Consultant Custom Objects Administration (This role will be available for assignment only after the first transaction type is created.)	Create the user with the Agency Staff page. Add roles using the Agency Staff Access page. Note: Typically, it is not recommended to assign PSC Registered Public User to any of the agency staff users, including the administrators. This user configuration should be used only for completing branding activities, such as updating themes and menu navigation. If the same user is required to perform any of the other related transactions or setup, then the PSC Registered Public User role should be removed from the user.
Permits agency staff members: PSC Permit Technician PSC Permits Supervisor PSC Plan Reviewer PSC Planning Coordinator PSC Building Inspector PSC Inspections Supervisor PSC Chief Building Officer	PSC Agency Staff CUSTOM_PSC_MANAGE_PERMITS_AGENCY CUSTOM_PSC_VIEW_ALL_APPLICATIONS CUSTOM_PSC_VIEW_BL <Specific Job Role> (such as PSC Permit Technician, PSC Plan Reviewer, and so on)	Create the user with the Agency Staff page. Add roles using the Agency Staff Access page.
Planning and Zoning agency staff members: PSC Associate Planner PSC Planning Assistant PSC Zoning Administrator	PSC Agency Staff CUSTOM_PSC_MANAGE_PNZ_AGENCY CUSTOM_PSC_VIEW_ALL_APPLICATIONS CUSTOM_PSC_VIEW_BL <Specific Job Role> (such as PSC Associate Planner, PSC Planning Assistant, PSC Zoning Administrator, and so on)	Create the user with the Agency Staff page. Add roles using the Agency Staff Access page.
Code Enforcement agency staff members: PSC Code Enforcement Technician PSC Code Enforcement Officer PSC Code Enforcement Supervisor	PSC Agency Staff CUSTOM_PSC_MANAGE_CE_AGENCY CUSTOM_PSC_VIEW_ALL_APPLICATIONS CUSTOM_PSC_VIEW_BL <Specific Job Role> (such as PSC Code Enforcement Technician, PSC Code Enforcement Officer, PSC Code Enforcement Supervisor and so on)	Create the user with the Agency Staff page. Add roles using the Agency Staff Access page.
Code Enforcement Administrator (PSC Code Enforcement Application Admin)	PSC Agency Staff CUSTOM_PSC_MANAGE_CE_ADMIN CUSTOM_PSC_VIEW_ALL_APPLICATIONS PSC Code Enforcement Application Administrator CUSTOM_PSC_VIEW_BL Application Implementation Consultant IT Security Manager	Create the user with the Agency Staff page. Add roles using the Agency Staff Access page.
Business License agency staff members: PSC Business License Specialist PSC Business License Manager	PSC Agency Staff CUSTOM_PSC_VIEW_ALL_APPLICATIONS CUSTOM_PSC_MANAGE_BL_AGENCY <Specific Job Role> (such as PSC Business License Specialist, PSC Business License Manager, and so on)	Create a new Financial Job role: CUSTOM_PSC_BL_BA using security console. On the Function Security Policies tab, add these privileges: FND_ADMINISTER_SANDBOX ZCX_MANAGE_EXTENSIBLE_OBJECT_PRIV In its Role Hierarchy add these duty roles: ORA_PSC_BUSINESS_LICENSE_ADMINISTRATOR ORA_PSC_BUSINESS_LICENSE_ADMINISTRATOR_OBI Create the user with the Agency Staff page. Add roles using the Agency Staff Access page.
Business License Administrator (PSC Business License Application Administrator (Duty Role))	PSC Agency Staff CUSTOM_PSC_VIEW_ALL_APPLICATIONS CUSTOM_PSC_BL_ADMIN CUSTOM_PSC_MANAGE_BL_ADMIN IT Security Manager	Create a new Financial Job role: CUSTOM_PSC_BL_ADMIN using the Security Console. On the Function Security Policies tab, add these privileges: FND_ADMINISTER_SANDBOX ZCX_MANAGE_EXTENSIBLE_OBJECT_PRIV On the Role Hierarchy add these duty roles: ORA_PSC_BUSINESS_LICENSE_ADMINISTRATOR ORA_PSC_BUSINESS_LICENSE_ADMINISTRATOR_OBI Create the user with the Agency Staff page. Add roles using the Agency Staff Access page.
Common Users: PSC Cashier PSC Economic Development Officer PSC Finance Administrator PSC Geographical Information System Administrator PSC Auditor PSC Treasury Supervisor PSC Treasury Administrator	PSC Agency Staff CUSTOM_PSC_VIEW_ALL_APPLICATIONS CUSTOM_PSC_VIEW_BL Specific Job Role: PSC Cashier PSC Economic Development Officer PSC Finance Administrator PSC Geographical Information System Administrator PSC Auditor PSC Treasury Supervisor PSC Treasury Administrator PSC Cashier requires these additional roles: CUSTOM_PSC_MANAGE_PERMITS_AGENCY CUSTOM_PSC_MANAGE_PZ_AGENCY CUSTOM_PSC_MANAGE_BL_AGENCY CUSTOM_PSC_MANAGE_CE_AGENCY

Adding Roles to Agency Users for Creating Transaction Types

Users requiring administrative access to create transaction types, such as permit types or planning and zoning applications need to be assigned these roles:

CUSTOM_PSC_MANAGE_PERMITS_AGENCY
CUSTOM_PSC_MANAGE_PNZ_AGENCY
ORA_CRM_EXTN_ROLE (This role will be available for assignment only after the first transaction type is created.)
ORA_FND_IT_SECURITY_MANAGER_JOB
ORA_ASM_APPLICATION_IMPLEMENTATION_CONSULTANT_JOB