OUM

DO.070 USER GUIDE

Economic Research Forum (ERF)
Fusion Adminstration & Security Functions

Author: Mariam Almoataz Bellah

Creation Date: December 03, 2015

Last Updated: December 03, 2015

Document Ref: ERF_Security_D0.070

Version: 1.0
DO.070 User Guide Doc Ref: ERF_Security_D0.070

1 DOCUMENT CONTROL

1.1 Change Record

2

Date Author Version Change Reference

03-Dec-2015 Mariam Almoataz Bellah V.01 No Previous Document

1.2 Reviewers

Name Position

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)
 Doc Ref:

2 PREFACE

This user guide includes the information you need to work with Oracle Fusion Security and
Adminstration Functions effectively.

Topics discussed are:

 Fusion Oracle Identity manager

 HCM Roles Autoprovisioing Rules
 Job roles and Duty Roles

2.1 How the Manual Is

Organized
This manual is divided into 5 sections:

 Manage Users
 Oracle Identity Manager
 Role Provisioning Rules
 Customizing Job Roles
 Managinf Duty Roles

2.1.1 AUDIENCE

This Manual is written for ERF Financial End Users:

This guide assumes you have a working knowledge of the following:

 The principles and customary practices of your business area.

 Oracle Fusion Security and Adminstration

If you have never used Oracle Fusion Security, we suggest you attend one or
more of the Oracle Fusion Security training classes.

 Oracle Fusion Applications graphical user interface.

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)
 Doc Ref:

2.1.2 HOW TO USE THIS MANUAL

This guide contains the information you need to understand and use
Oracle Fusion General Ledger. This preface explains how this user guide is
organized and introduces other sources of information that can help you.
This guide contains the following process:

 Process 1 introduces you to Fusion OIM, discusses the importance of the

oracle Identity Manager.

 Process 2 captures information about How to create and search on users

by the “Manage Users” Task.

 Process 3 explains the role provisioning rules and how to assign roles to
users automatically.

 Process 4 includes the core steps of how to create a new job role “External
Roles”.

 Process 5 explains how to add duty roles to newly created / customized job
roles.

2.1.3 YOUR COMMENTS ARE WELCOME

Egabi Solutions values and appreciates your comments as a user and reader of this manual. As
we write, revise, and evaluate our documentation, your comments are the most valuable input we
receive. If you would like to contact us regarding comments and suggestions on future releases of
Oracle Fusion Financials please use the following address or telephone numbers:

Egabi Solutions
25 Asmaa Fahmy Street, Helioplis
(+202) 2690 9675-8 Email: Mariam.motazbellah@egabi.com

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)
 Doc Ref:

Contents

1 Document Control.................................................................................................... ii
1.1 Change Record........................................................................................................... ii
1.2 Reviewers.................................................................................................................... ii

2 Preface....................................................................................................................... 1
2.1 How the Manual Is Organized.....................................................................................1

1 Chapter 1 – Oracle Fusion Security and Adminstration: introduction................4

1.1 Manage Users............................................................................................................. 4

2 Chapter 2 – Oracle Identity Manager.......................................................................6

2.1 Oracle Identity Manager..............................................................................................6

3 Chapter 3- HCM Role Provisioning Rules...............................................................8

4 Chapter 4 – Create Job Roles................................................................................10

5 Chapter 5 – Manage Duties....................................................................................12

5.1 5.1 Enter Workspace in Fusion Financials................................................................12

6 Open and Closed Issues........................................................................................ 14

6.1 Open Issues.............................................................................................................. 14
6.2 Closed Issues............................................................................................................ 14

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)
 Doc Ref:

1 CHAPTER 1 – ORACLE FUSION SECURITY AND

ADMINSTRATION: INTRODUCTION

Chapter 1 shows how to define users in HCM Manage user’s page.

1.1 Manage Users

1.1.1 PROCEDURES
Scope

The objective of this script is to walk you through the steps required to create users. There
are two ways to create users; OIM and “Manage Users”. It is recommended to define users
by “manage users” in order to be able to put them in the approval process and assign them
to assets. However, if defined from OIM, users will not be able to proceed with the
mentioned tasks.
.

1.1.2 NAVIGATION INSTRUCTIONS

Navigator > Setup and Maintenance > Manage Users

- Search on “Manage Users” in the Setup and Maintenance page.

- Click on ‘go to task” icon.

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)
 Doc Ref:

- Write User last Name.

- Write User First Name.
- Write email and Hiring date.
- Person type: Employee
- Choose the Legal employe and Business Unit (Economic Research Forum)
- Click on “AutoProvision Roles” in order to populate the roles automatically in case a HCM
role rule defined.
- Click on “Save and Close”.

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)
 Doc Ref:

2 CHAPTER 2 – ORACLE IDENTITY MANAGER

Chapter 2 includes information of how to use OIM “Oracle identity manager” in order to
manage users, reset passwords, control user accounts, and how to handle fusion
application security.

2.1 Oracle Identity Manager

2.1.1 PROCEDURES
Scope

OIM controls Password security, if user authentication is managed by the database then
security administrators should develop a password security policy to maintain database
access security. Also OIM make unauthorized database access reduced.

2.1.2 NAVIGATION INSTRUCTIONS

Navigator> Setup and Maintenance > Create Implementation User

- Click on Adminstration
- Type User Name and search on specified user

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)
 Doc Ref:

- When user populates, you can reset password by clicking on “Reset Password”
- Either you enter a password manually or allow the system to auto generate a password.

- Lock Account: when clicking on this icon, you obligate this user to reset password as soon as he
logins.
- Disable user: user will be unable to login to his user account again.
- Delete User: Delete user and unable to track this user again on the application.

- Assign: add roles by click on the “Assign” button.

- Revoke: remove existing roles from users by highlighting the role and click on revoke.

Note: if created a user from the OIM, this user will not be able to use the system or be appeared in
the “manage users” page. So it is recommended to define users from the HCM “Manage Users”
page.

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)
 Doc Ref:

3 CHAPTER 3 - HCM ROLE PROVISIONING RULES

3.1.1 PROCEDURES
Scope
In Oracle Fusion HCM, when someone joins an organization, depending upon their
grade, position, jobs & reporting line etc we should be able to auto assign them certain
roles. For example someone with a Job named “IT Project Manager” should
automatically get Manager Role. Likewise someone with Position Chief FInancial
Officer should automatically get role named Executive. All of these requirements can be
very easily implemented in Oracle Fusion HCM using the steps outlined in this chapter.

3.1.2 NAVIGATION INSTRUCTIONS

Navigator> Setup and Maintenance > Manage HCM role Provisioning Rules

- Once you click on this task, Manage Role Mapping page appears. Click on create button.

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)
 Doc Ref:

-
- In Create Role Mapping UI, provide Mapping Name, From Date.
- In Conditions section provide Assignment Type as Employee and Assignment Status as Active.
- In Associated Roles section click Add button and add Employee role from dropdown.
- Click on Apply Autoprovisioning button in Top.

- This will ensure all existing user gets Employee role if they have Active Assignment with them.
- Now click on Save and Close.

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)
 Doc Ref:

4 CHAPTER 4 – CREATE JOB ROLES

This Chapter comprises information about the core steps of how to create a new job
role “External Roles”.

4.1 PROCEDURES
Scope

Roles play a pivotal role in Oracle Identity Governance. They are used to define theaccess
rights that an entity may have. A role may be associated with one or more access rights to
Oracle Identity Manager Functions. For example, a single role enables a user to create other
Oracle Identity Manager User accounts and manage a specific organization. Roles determine
the links and menus that are available to users when they log in to the console.

4.2 NAVIGATION INSTRUCTIONS

Navigator > Tools > Setup and Maintenance

- Search on task: Manage Job Roles

- Click on “Create Role”

- Write role name in basic role information

- Choose the module category which the role falls under, from the role category name.

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)
 Doc Ref:

- Click on Save and close page.

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)
 Doc Ref:

5 CHAPTER 5 – MANAGE DUTIES

When customizing job roles like the previous example, you will need to add duty roles in order
to complete the customization process of the newly created external role.

5.1 5.1 Enter Workspace in Fusion

Financials

5.1.1 PROCEDURES
Scope

This role defines a set of tasks. It is the most granular form of a role. The job and abstract roles
inherit duty roles. The data security policies are specified to duty roles to control actions on all
respective objects

.5.1.2 NAVIGATION VIGATION INSTRUCTIONS

Navigator > Setup and Maintenance

- Search on task: Manage Duties

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)
 Doc Ref:

- Click on “Search – External Roles

- Search on The external Role you have previously defined.

- Click on “Open Role”

- Click on “Application Role Mapping”

- Click On “Map” in order to add duty roles to the job role you have previously chosen.
- Choose the duty role from the list

- Click on the wanted duty role and then click on “Map Roles”
- Now you have successfully created a duty role. Now you can go assign this role to a user
from the OIM.

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)
 Doc Ref:

6 OPEN AND CLOSED ISSUES

6.1 Open Issues

ID Issue Resolution Responsibility Target Date Impact Date

6.2 Closed Issues

ID Issue Resolution Responsibility Target Date Impact Date

Fusion Security Preface 1 of 14

File Ref: 407336267.doc (V.01)