Managing People and Roles
Copyright © 2007, Oracle. All rights reserved.
Objectives
After completing this module, you should be able to:
• Discuss roles and privileges
• Create and update roles
Copyright © 2007, Oracle. All rights reserved.
Agenda
• People and Roles Administration Overview
• Managing Roles
• Summary
Copyright © 2007, Oracle. All rights reserved.
Item Security Levels
In many Oracle applications, there is limited security for item
information. For example, you have access to the Item Master
or you do not. You might not have update access, but you
probably have view access.
• Forms Menu Exclusions
• Inventory Organization Access
• Forms Personalization
Copyright © 2007, Oracle. All rights reserved.
User and Role Scenario
Vision Operations
• Builds computers and PDAs
Industrial
• Supplies components for the computers
• Competes with Vision Operations in the PDA segment
• Requirement
– Industrial must have the ability to view Computer product
information, but should not have the ability to view PDA
product information.
Copyright © 2007, Oracle. All rights reserved.
User and Role Scenario:
Item/Product Information
•
•
•
•
•
•
•
•
•
•
Marketing
Engineering
Sales
Pricing
Cost
Sourcing
Strategy
Distribution
Manufacturing
Planning
•
•
•
•
•
•
•
•
Suppliers
Customers
Compliances groups
Maintenance
Service and after market
Quality department
Manufacturing reps
C - Level
Copyright © 2007, Oracle. All rights reserved.
User and Role Scenario:
Using Item Information
• Using data on a day-to-day basis:
–
–
–
–
Planning
Costing
Order Management
Purchasing
• Strategic needs - possible proprietary data:
–
–
–
–
–
Design impacts
Marketing and campaigns
Sourcing
Compliance groups
Pricing guidelines
Copyright © 2007, Oracle. All rights reserved.
User and Role Scenario:
Processing Attributes
Main
Item Attributes
Inventory
Item Attributes
Bills
Item Attributes
Cost
Item Attributes
Purchasing
Item Attributes
MPS/MRP
Planning
Item Attributes
Order
Management
Item Attributes
Copyright © 2007, Oracle. All rights reserved.
User and Role Scenario:
Data Issues
• Data is required to operate the system, so data is made
available.
• Proprietary or confidential data is not required for system
operation.
• Data is kept in different areas and formats, creating
fragmented data. For example, data may be segmented as
follows:
–
–
–
–
Design data
Pricing data
Marketing data
Compliance data
Copyright © 2007, Oracle. All rights reserved.
User and Role Scenario:
Bringing it Together with Security
Main
Item Attributes
MPS/MRP
Planning
Item Attributes
Purchasing
Item Attributes
Order
Management
Item Attributes
Design Data
Pricing Data
Marketing Data
Copyright © 2007, Oracle. All rights reserved.
Compliance Data
User and Role Scenario:
Solution Steps
1. Create user-defined attributes and associate them with
items.
2. Create attribute access security.
Copyright © 2007, Oracle. All rights reserved.
User and Role Scenario:
Solution Thought Process
Main
Item Attributes
MPS/MRP
Planning
Item Attributes
Purchasing
Item Attributes
Order
Management
Item Attributes
Design Data
User Defined
Attributes
Pricing Data
User Defined
Attributes
Marketing
Data
User Defined
Attributes
Compliance
Data
User Defined
Attributes
Copyright © 2007, Oracle. All rights reserved.
User and Role Scenario:
Step 2 - Create Security
• Ensure that those roles who need to maintain data can grant
permission to update data.
• Ensure that those roles who need to view the data can grant
permission to view data.
• Ensure that those roles who do not require access cannot
find data; therefore, deny permission to discover data.
Copyright © 2007, Oracle. All rights reserved.
User and Role Scenario:
Create Privileges to Data
Design Data
User Defined
Attributes
Pricing Data
User Defined
Attributes
Marketing
Data
User Defined
Attributes
Compliance
Data
User Defined
Attributes
View Design Data Privilege
Update Design Data Privilege
View Pricing Data Privilege
Update Pricing Data Privilege
View Marketing Data Privilege
Update Marketing Data Privilege
View Compliance Data Privilege
Update Compliance Data Privilege
Copyright © 2007, Oracle. All rights reserved.
User and Role Scenario:
Privileges Defined
Design Data
Roles
Update
View
Pricing Data
Update
View
Marketing Data
Update
View
Copyright © 2007, Oracle. All rights reserved.
Compliance Data
Update
View
User and Role Scenario:
Roles Needing Permission
To complete daily responsibilities or jobs:
• What roles require permission to view data?
• What roles require permission to update data?
• Define a role for that person.
Copyright © 2007, Oracle. All rights reserved.
User and Role Scenario:
Privileges Granted to Jobs or Roles
Design Data
Role
Update
Design
Engineer
X
View
Pricing Data
Update
Pricing
Manager
Compliance Data
Update
Update
View
View
X
Marketing
Manager
Compliance
Manager
View
Marketing Data
X
X
X
X
X
Copyright © 2007, Oracle. All rights reserved.
X
User and Role Scenario:
Who has the Position in the Organization
• There are many users defined in the organization.
– Each user may have many jobs or positions within the
organization.
– Each user does not necessarily require access to product and
item information.
– Each user may have multiple roles.
– Each role has multiple privileges.
Copyright © 2007, Oracle. All rights reserved.
User and Role Scenario:
Users Assigned to Jobs or Roles
Design Data
Role
Update
View
Pricing Data
Update
View
Marketing Data
Compliance Data
Update
Update
View
View
ABRISLEY
Design
Engineer
X
X
Marketing
Manager
X
X
JSMITH
Compliance
Manager
Pricing
Manager
X
X
X
Copyright © 2007, Oracle. All rights reserved.
X
Agenda
• People and Roles Administration Overview
• Managing Roles
• Summary
Copyright © 2007, Oracle. All rights reserved.
People and Roles - Concepts
• Privileges
• Roles
• Role Types
–
–
–
–
–
Item Catalog Category Role
Item Role
Change Role
Catalog Role
Group Role
• Role Assignment
Copyright © 2007, Oracle. All rights reserved.
Business Requirement – Scenario
Scenario:
• Steve Williams and Mary Robinson are Product Managers
for Vision Engines.
– Steve Williams is responsible for the Diesel Engines product
– Mary Robinson is responsible for the Electric Motors product
• Steve Williams needs permission (or the privilege) to create
new items for diesel engines.
• Mary Robinson needs permission (or the privilege) to create
new items for electric motors.
Copyright © 2007, Oracle. All rights reserved.
Managing Roles
As the People and Roles Administrator, you are responsible for
creating and maintaining the roles required by your enterprise’s
Product Lifecycle Management implementation:
• Manage Roles: You can update roles
• Create Roles: You can create roles
Copyright © 2007, Oracle. All rights reserved.
Managing Roles
Managing roles includes the following tasks:
• Defining change roles (required)
• Defining item roles (required)
• Defining item catalog category roles
• Defining catalog roles
Copyright © 2007, Oracle. All rights reserved.
Change Roles
Change roles enable access to change data and objects, such
as ideas, files, issues, change requests, and change orders.
• Change Role Mapping is performed for change objects not
related to items, such as issues or ideas
• Some seeded change roles:
– Change Design Engineer
– Change Engineering Manager
• All change roles have the same privileges:
– View basic change information
– Edit and delete change role assignments
Copyright © 2007, Oracle. All rights reserved.
Item Roles
• Oracle system-defined item roles:
–
–
–
–
–
Item Author
Design Engineer
Third Party Reviewer
Design Reviewer
Supplier Engineer
• User-defined item roles (define as many as you need)
• User-defined item privileges (define as many as you need)
Copyright © 2007, Oracle. All rights reserved.
Item Catalog Category Roles
Enables creation of new items within an Item Catalog Category.
• Oracle system-defined item catalog category roles
– Item Catalog Category User
• Oracle system-defined item catalog category privileges
– Create items within an item catalog category
Copyright © 2007, Oracle. All rights reserved.
Catalog Roles
Following are the seeded catalog roles in the Product Lifecycle
Management application:
• Catalog Manager
• Catalog Viewer
Copyright © 2007, Oracle. All rights reserved.
Defining Roles
Copyright © 2007, Oracle. All rights reserved.
Viewing Roles
You can view roles to examine the privileges that are
associated with them.
However, you must have the View Role function to access
roles.
Copyright © 2007, Oracle. All rights reserved.
Creating and Updating Roles
Administrators must have the Manage Role and Create Role
functions to create and update roles.
If you only have the Manage Role function, then you can only
update roles.
If you only have the Create Role function, you can only create
roles.
Both functions are required to manage roles.
Copyright © 2007, Oracle. All rights reserved.
Agenda
• People and Roles Administration Overview
• Managing Roles
• Summary
Copyright © 2007, Oracle. All rights reserved.
Summary
In this module, you should have learned how to:
• Discuss roles and privileges
• Create and update roles
Copyright © 2007, Oracle. All rights reserved.