Oracle - Role/Responsibility Assignment Management

The Role/Responsibility Assignment Management request enables you to:
  • Change the validity period of the responsibilities assigned to a specific user
  • Change the validity period of the user
  • Assign new responsibilities to a user

  • Revoke an existing role or responsibility.

    When an existing role or responsibility is revoked in a request, the role or the responsibility still remains assigned to the user in Oracle. However, the valid to date of the role or the responsibility is set to expired.

  • Modify additional user attributes, if enabled
To create an Oracle - Role/Responsibility Assignment Management :
  1. Provide details on the following panels
    • General Information: Use this panel to provide the following general information about the request.
      • Request Name: Provide a unique name to identify the request .
      • Request Priority: From the drop-down list, select a priority for the request .
      • Connections: Provide the connection for which the request is being created. You can set this connection as default from Preferences page. To select a connection, type in a part of the connection name. All connections matching your search criteria are displayed. Select the desired connection. Alternatively, browse and select the desired connection and click OK. The selected connection appears in the Connections field.
        Note: In case of secured connections, users signed into Infor Risk & Compliance will be able to view and use only those connections that they have access to
      • Select User: Select the user who is to be assigned new responsibilities. To select a user, type in part of the user name. All users from the selected connection and matching your search criteria are displayed. Select the desired user name. Alternatively,  browse and select the desired user and click OK. The selected user appears in the Select User field .
        Note: If a request for the same user is already pending, Infor Risk & Compliance displays a message alerting you about the duplicate assignment. You have the option to continue the request, cancel it or select a different user.

        If the request is continued, then, during the approval process, the approver will see the message in the Previous Comments section. After you select a user the screen will display the responsibilities already assigned to the selected user and will allow you to add or remove responsibilities. If the connection selected is a mapped connection then the list of responsibilities assigned to the user from the other connections are also displayed.

      • Valid From: The Valid From text box enables you to provide a date from which the selected user is valid.
        • If a valid from date is already selected for the user, that date will appear in the text box. Click the Calendar icon to modify the date or select the Date of Approval if the validity period is to begin from the date of approval of the request.
        • If a valid from date is not set for the selected user, click the Calendar icon to either select a specific date or select Date of Approval.
          Note: Date of Approval will be replaced with the actual approval date when the request is completed and write-back is successful.  
        • Valid Through: The Valid Through text box enables you to provide a date till the selected user is valid.
          • If a valid through date is already selected for the user, that date will appear in the text box. Click the Calendar icon to modify the date or select Never Expires.
          • If a valid through date is not set for the selected user, you can click the Calendar icon to either select a specific date or select Never Expires.
          Note: The Valid Through date can either be the current date or a future date.
      • Approval Manager: Select the name of the Infor Risk & Compliance user who will be an approver for the this request if the user's manager is unable to approve the request For example, if the approval template has Manager of User as the approver at one or more stages but the manager is out of office
        Note: The Approval Manager field will be enabled only if the option new workflow definition is selected on the Access Management section on the Configuration page.
        To select an Approval Manager, type in a part of the user name. All users from the selected connection that match your search criteria are displayed. Alternatively, browse and select the desired user and click OK .
      • Assign Responsibilities as another User: Specify the name of the user whose responsibilities you want to assign to the existing user. To select a user, type in a part of the user name. All users from the selected connection and matching your search criteria are displayed. Select the desired user name. Alternatively,  browse and select the desired user and click OK. The selected user appears in the Assign Responsibilities as another User field.
      • Additional User Attributes: Select additional user attributes if required and provide values for them. User attributes can be configured for the connection in which the user is present and should be enabled through the AdditionalUserAttributes_Orcl.xml file so that they are displayed on the request creation page.

        For details, refer to the Oracle - Configuration Settings Guide.

    • New Roles to be Assigned to the User: This panel enables you to assign new roles to the selected user. If you have selected an existing user in the Assign Roles as another user field, this panel will also list the roles belonging to that user .
      • Add New Roles :
        1. To select a role, type in part of the role names from the selected connection and matching the search criteria are displayed. Select the desired role name. Alternatively,  browse and select the desired role and click OK. The selected role appears in the Add New Roles field identified with an icon.
        2. In the Valid From field, click the date link to change the validity period of the role. Click the Calendar icon to select a date from the calendar.
        3. In the Valid through field, click the date link to change the expiry date of the existing role . Click the Calendar icon to select a date from the calendar.
        Note: Select the check box All to apply the same validity dates across all roles.
    • New Responsibilities to be Assigned to the User: This panel enables you to assign new responsibilities to the selected user. If you have selected an existing user in the Assign Responsibilities as another user field, this panel will also list the responsibilities belonging to that user .
      • Add New Responsibilities :
        1. To select a responsibility, type in part of the responsibility name from the selected connection and matching the search criteria are displayed. Select the desired responsibility name. Alternatively,  browse and select the desired responsibility and click OK. The selected responsibility appears in the Add New Responsibilities field identified with an icon.
        2. In the Valid From field, click the date link to change the validity period of the responsibility. Click the Calendar icon to select a date from the calendar.
        3. In the Valid through field, click the date link to change the expiry date of the existing responsibility. Click the Calendar icon to select a date from the calendar.
        Note: Select the check box All to apply the same validity dates across all responsibilities.
    • Responsibilities Already Assigned to the User: These are the responsibilities and roles already assigned to the selected user. If a mapped connection is selected for this request, this panel will also list the responsibilities and roles that are assigned to this user from the other connections.
      • Revoke existing role or responsibilities: To revoke an existing roles or responsibility:
        1. Select the role or responsibility you want to revoke.
        2. In the Valid from field, click the date link to change the validity period of the role or responsibility. Click the Calendar icon to select a date from the calendar.
        3. In the Valid Through field, click the date link to change the expiry date of the existing role or responsibility. Click the Calendar icon to select a date from the calendar.
          Note: Select the check box All to apply the same validity dates across all responsibilities .
        4. Click Revoke. The role or responsibility will be revoked after the request undergoes the approval process.

          By default, all existing roles or responsibility assignments can be revoked through this request. This means that users can have zero role or responsibility assignments. You can modify this default setting in the AMSConfig.xml file to ensure that all existing responsibilities are not revoked. For details refer to the Access Manager for Oracle document.

        Note: Click Undo to reset the revoked responsibilities.
      • More Details
        • Comments: Provide additional information about the request through comments. Comments are mandatory if the Infor Risk & Compliance option check box on the Access Management section of the Configuration page is selected.
        • E-mail settings: This tab enables you to send email notifications to request participants or other users at specific stages of a request.
          1. Select any of the request status check boxes next to a user. Email notifications will be sent to that user when the request reaches that status. The option Approval Email Notification ensures that a user is notified whenever a request is posted to that user's inbox.
          2. Select the check box Display comments in email notifications, if you want the application to display comments in the notification.
          3. Other users can be notified by selecting the option Others. Provide the email address for the other users in the Other emails text box and click the Add icon.
          Note: Email settings are enabled and may be changed only if the check box Override this Option is selected in the Options panel of the Approval Process Template page.
        • Approval Stages : This panel provides details of the approval stages of the request and its present status .
  2. Click Send. The request is send to the specified approvers and is displayed on the Requests home page. Click the request link to view the request details and take further action.

Role/Responsibility Assignment Management request can also be generated from the What-if analysis for Oracle - Role/Responsibility Assignment Management

Related topics
What if Analysis