E-Business Suite User accounts are assigned permissions for objects Oracle E-Business Suite by means of responsibilities. Responsibilities cannot be assigned to user accounts directly. Instead, they are inherited by means of security groups. Permissions in Oracle E-Business Suite are characterized by the combination of responsibilities and security groups. These combinations are mapped in the One Identity Manager database as E-Business Suite permissions.
Mapping an Oracle E-Business Suite in One Identity Manager
Architecture overview
One Identity Manager users for managing Oracle E-Business Suite
Configuration parameters
Synchronizing Oracle E-Business Suite
Setting up initial synchronization of Oracle E-Business Suite
Managing E-Business Suite user accounts and employees
Users and permissions for synchronizing with Oracle E-Business Suite
Setting up the E-Business Suite synchronization server
Creating a synchronization project for initial synchronization of Oracle E-Business Suite
Customizing the synchronization configuration
Information required for setting up a synchronization project
Setting up an initial synchronization project
Setting up a synchronization project for employee data
Setting up a synchronization project for organizational data
Configuring the synchronization log
Important notes for adjusting existing synchronization projects
Configuring synchronization in Oracle E-Business Suite
Configuring synchronization of several Oracle E-Business Suite systems
Changing system connection settings of Oracle E-Business Suite systems
Updating schemas
Configuring department synchronization
Speeding up synchronization with revision filtering
Using specific statements for database initialization
Using additional schema types
Creating a schema extension file
Configuring single object synchronization
Accelerating provisioning and single object synchronization
Running synchronization
Starting synchronization
Displaying synchronization results
Deactivating synchronization
Synchronizing single objects
Tasks following synchronization
Troubleshooting
Ignoring data error in synchronization
Setting up account definitions
Login information
Creating account definitions
Creating manage levels
Creating mapping rules for IT operating data
Entering IT operating data
Modify IT operating data
Assigning account definitions to employees
Assigning employees automatically to E-Business Suite user accounts
Assigning account definitions to departments, cost centers, and locations
Assigning account definitions to business roles
Assigning account definitions to all employees
Assigning account definitions directly to employees
Assigning account definitions to system roles
Adding account definitions in the IT Shop
Assigning account definitions to target systems
Deleting account definitions
Editing search criteria for automatic employee assignment
Changing the manage level in user accounts
Assigning account definitions to linked user accounts
Manually linking employees to E-Business Suite user accounts
Linking E-Business Suite user accounts to imported employees
Special features for the deletion of employees
Supported user account types
Password policies for E-Business Suite user accounts
Managing entitlement assignments
Predefined password policies
Using password policies
Editing password policies
General main data of password policies
Policy settings
Character classes for passwords
Custom scripts for password requirements
Editing the excluded list for passwords
Checking passwords
Testing the generation of passwords
Initial password for new E-Business Suite user accounts
Email notifications about login data
Assigning E-Business Suite entitlements to user accounts in One Identity Manager
Mapping of E-Business Suite objects in One Identity Manager
Prerequisites for indirect assignment of E-Business Suite entitlements to E-Business Suite user accounts
Assigning E-Business Suite entitlements to departments, cost centers, and locations
Assigning E-Business Suite entitlements to business roles
Adding E-Business Suite entitlements to system roles
Adding E-Business Suite entitlements to the IT Shop
Assigning E-Business Suite user accounts directly to an entitlement
Assigning E-Business Suite entitlements directly to a user account
Validity period of permission assignments
Effectiveness of entitlement assignments
Inheritance of E-Business Suite entitlements based on categories
Invalid entitlement assignments
Overview of all assignments
E-Business Suite systems
Handling of E-Business Suite objects in the Web Portal
Basic configuration data
Configuration parameters for managing Oracle E-Business Suite
Permissions required for synchronizing with Oracle E-Business Suite
Default project templates for synchronizing an Oracle E-Business Suite
General main data of E-Business Suite systems
Defining categories for the inheritance of E-Business Suite entitlements
Editing the synchronization project for an E-Business Suite system
E-Business Suite user accounts
Entering main data of E-Business Suite user accounts
General main data of E-Business Suite user accounts
Login data for E-Business Suite user accounts
Additional tasks for managing E-Business Suite user accounts
E-Business Suite permissions
Displaying the E-Business Suite user account overview
Assigning extended properties to E-Business Suite user accounts
Disabling E-Business Suite user accounts
Deleting E-Business Suite user accounts
Entering main data of E-Business Suite entitlements
General main data of an E-Business Suite entitlement
Additional tasks for managing E-Business Suite entitlements
E-Business Suite applications
E-Business Suite menus
E-Business Suite data groups
E-Business Suite data group units
E-Business Suite request groups
E-Business Suite security groups
E-Business Suite attributes
E-Business Suite responsibilities
Displaying main data of E-Business Suite responsibilities
General main data of E-Business Suite responsibilities
HR people
Suppliers and contacts
Parties
Locations
Departments
Reports about E-Business Suite objects
Project template for user accounts and entitlements
Project template for HR data
Project template for CRM data
Project template for OIM data
Editing system objects
Example of a schema extension file
E-Business Suite permissions
Entering main data of E-Business Suite entitlements
To edit the main data of an entitlement:
-
In the Manager, select the Oracle E-Business Suite > entitlements category.
-
To edit an entitlement, select the entitlement in the result list and run the Change main data task.
- OR -
To create a entitlement, click
in the result list.
This opens the main data form for an E-Business Suite entitlement.
-
Edit the main data of the entitlement.
- Save the changes.
Detailed information about this topic
General main data of an E-Business Suite entitlement
For an E-Business Suite entitlement, enter the following main data:
|
Property |
Description |
|---|---|
|
E-Business Suite Responsibility |
Responsibility for which the entitlement is to be created The responsibility must belong to the same E-Business Suite system as the security group. |
|
Security group |
Security group for which the entitlement is to be created. The security group must belong to the same E-Business Suite system as the responsibility. |
|
Display name |
Display name for the entitlement |
|
Category |
Categories for the inheritance of entitlements to user accounts User accounts can selectively inherit permissions. To do this, entitlements, and user accounts are divided into categories. Select one or more categories from the menu. |
|
Risk index |
Value for evaluating the risk of assigning the entitlement to user accounts. Enter a value between 0 and 1. This field is only visible if the QER | CalculateRiskIndex configuration parameter is set. For more information, see the One Identity Manager Risk Assessment Administration Guide. |
|
Service item |
Service item for requesting the entitlement through the IT Shop. |
|
IT Shop |
Specifies whether the entitlement can be requested through the IT Shop. This entitlement can be requested by your employees through the Web Portal and granted using a defined approval process. The entitlement can still be assigned directly to user accounts and hierarchical roles. |
|
Only for use in IT Shop |
Specifies whether the entitlement can only be requested through the IT Shop. This entitlement can be requested by your employees through the Web Portal and granted using a defined approval process. Direct assignment of the entitlement to hierarchical roles or user accounts is not permitted. |
Related topics
Additional tasks for managing E-Business Suite entitlements
After you have entered the main data, you can run the following tasks.
|
Task |
Theme |
|---|---|
|
Overview of E-Business Suite entitlements |
|
|
assign user accounts |
Assigning E-Business Suite user accounts directly to an entitlement |
|
Assigning extended properties |
Assigning extended properties to E-Business Suite entitlements |
|
Exclude E-Business Suite entitlements |
|
|
Assign system roles |
|
|
Assign business roles |
|
|
Assign organizations |
Assigning E-Business Suite entitlements to departments, cost centers, and locations |
|
Add to IT Shop |
|
|
Synchronize object |