Assigning E-Business Suite entitlements to business roles
NOTE: This function is only available if the Business Roles Module is installed.
You assign entitlements to business roles so that these entitlements are assigned to user accounts through these business roles.
To assign an entitlement to business roles (non role-based login):
-
In the Manager, select the Oracle E-Business Suite > entitlements category.
-
Select the entitlements in the result list.
-
Select the Assign business roles task.
-
In the Add assignments pane, select the role class and assign business roles.
TIP: In the Remove assignments pane, you can remove assigned business roles.
To remove an assignment
- Save the changes.
To assign entitlements to a business role (role-based login):
-
In the Manager, select the Business roles > <role class> category.
-
Select the business role in the result list.
-
Select the Assign E-Business Suite entitlements task.
-
In the Add assignments pane, assign the entitlements.
TIP: In the Remove assignments pane, you can remove assigned entitlements.
To remove an assignment
- Select the entitlement and double-click
.
- Save the changes.
Related topics
Adding E-Business Suite entitlements to system roles
NOTE: This function is only available if the System Roles Module is installed.
Use this task to add an entitlement to system roles. When you assign a system role to an employee, the entitlement is inherited by all user accounts of this employee.
NOTE: Groups with the Only use in IT Shop option can only be assigned to system roles that also have this option set. For more information, see the One Identity Manager System Roles Administration Guide.
To assign a group to system roles:
-
In the Manager, select the Oracle E-Business Suite > entitlements category.
-
Select the entitlements in the result list.
-
Select the Assign system roles task.
-
In the Add assignments pane, assign system roles.
TIP: In the Remove assignments pane, you can remove assigned system roles.
To remove an assignment
- Save the changes.
Related topics
Adding E-Business Suite entitlements to the IT Shop
When you assign a permission to an IT Shop shelf, it can be requested by the shop customers. To ensure it can be requested, further prerequisites need to be guaranteed:
-
The permissions must be labeled with the IT Shop option.
-
The permission must be assigned a service item.
TIP: In the Web Portal, all products that can be requested are grouped together by service category. To make the permission easier to find in the Web Portal, assign a service category to the service item.
-
If you only want the permission to be assigned to employees through IT Shop requests, the permissions must also be labeled with the Use only in IT Shop option. Direct assignment to hierarchical roles or user accounts is no longer permitted.
NOTE: With role-based login, the IT Shop administrators can assign permissions to IT Shop shelves. Target system administrators are not authorized to add permissions to IT Shop.
To add a permission to the IT Shop.
-
In the Manager, select the Oracle E-Business Suite > Entitlements (non role-based login) category.
- OR -
In the Manager, select the Entitlements > E-Business Suite entitlements (role-based login) category.
-
In the result list, select the permission.
-
Select the Add to IT Shop task.
-
Select the IT Shop structures tab.
-
In the Add assignments pane, the entitlement to the IT Shop shelves.
- Save the changes.
To remove, an entitlement from individual shelves of the IT Shop
-
In the Manager, select the Oracle E-Business Suite > Entitlements (non role-based login) category.
- OR -
In the Manager, select the Entitlements > E-Business Suite entitlements (role-based login) category.
-
In the result list, select the permission.
-
Select the Add to IT Shop task.
-
Select the IT Shop structures tab.
-
In the Remove assignments pane, the entitlement from the IT Shop shelves.
- Save the changes.
To remove, an entitlement from all shelves of the IT Shop
-
In the Manager, select the Oracle E-Business Suite > Entitlements (non role-based login) category.
- OR -
In the Manager, select the Entitlements > E-Business Suite entitlements (role-based login) category.
-
In the result list, select the permission.
-
Select the Remove from all shelves (IT Shop) task.
- Confirm the security prompt with Yes.
-
Click OK.
The entitlement is removed from all shelves by the One Identity Manager Service. All requests and assignment requests with this entitlement are canceled.
For more information about requesting company resources through the IT Shop, see the One Identity Manager IT Shop Administration Guide.
Related topics
Assigning E-Business Suite user accounts directly to an entitlement
To react quickly to special requests, you can assign the entitlements directly to user accounts.
To assign an entitlement directly to user accounts
-
In the Manager, select the Oracle E-Business Suite > entitlements category.
-
Select the entitlements in the result list.
-
Select the Assign user accounts task.
The top area of the form displays all user accounts that have already been assigned, together with their validity periods. The overview shows the user accounts that have been assigned both directly and indirectly. For direct assignments, an Active from (direct) date is set; indirect assignments do not have a direct validity date.
To assign the entitlement to a user account:
-
Click Add.
-
Select the user account from the User account menu.
-
In the Active from (direct) input field, enter the first date from on the direct entitlement assignment is valid.
-
(Optional) In the Active to (direct) input field, enter the last date on which the direct entitlement assignment is valid.
-
(Optional) Add further user accounts.
- Save the changes.
To edit a direct entitlement assignment
-
In the overview, select the direct entitlement assignment that you want to edit.
-
Change the values in the input fields Active from (direct), Active to (direct), or Description.
- Save the changes.
Only direct assignments can be edited. If you select and edit an indirect assignment in the overview, this creates an additional direct assignment.
Entitlement assignments cannot be deleted. Instead, there are two options for indicating that a direct assignment is no longer valid.
-
Enter the current date as the expiration date of the entitlement.
Select this option, for example, if an entitlement assignment will become invalid on a defined date in the future.
- OR -
-
Delete the entitlement assignment.
Select this option, for example, if an inherited entitlement assignment also exists alongside the direct assignment, and you want the inherited entitlement assigned to replace the direct assignment.
To set the expiration date for a direct entitlement assignment
-
In the overview, select the direct entitlement assignment that you no longer want to be effective.
-
Next to the input field Active to (direct), click ....
-
Click Today or define a different expiration date.
- Save the changes.
To remove a direct entitlement assignment
-
In the overview, select the direct entitlement assignment that you no longer want to be effective.
-
Click Delete.
- Save the changes.
The first and last validity date of the direct assignment (Active from (direct) and Active to (direct)) are deleted. The final validity date (Active to (effective)) is recalculated. If no further valid assignments exist, the final validity date is set to a date in the past and XOrigin is assigned the value 16.
Detailed information about this topic
Related topics
