Minimum required privileges for Oracle backend database

To extract data from the Authorizations Insight for PeopleSoft FISCM, you require a user who is assigned Connect and Select privileges on the Oracle backend database.

To create an APPROVA_FI user with these privileges:

Log into Oracle backend database with the appropriate user name and password.
Run the following query to check whether the APPROVA_FI user already exists in the Oracle backend database:
```
Select * from dba_users where username =’APPROVA_FI' 
```
- If the APPROVA_FI user is already present and being used by another application, select a different user name and change this script to reflect that user name.
- If the
```
APPROVA_FI
```
  user is not present, run the following query at command prompt:
```
CREATE USER APPROVA_FI IDENTIFIED BY APPROVA
```
Note: APPROVA is the preset password of the database user, APPROVA_FI. You can select any other appropriate password.
Run the command GRANT CONNECT TO APPROVA_FI. This command grants connect privileges to the created user APPROVA_FI.
Run the command CREATE ROLE ROLE_APPROVA_PSFTFIAI. This command creates the role ROLE_APPROVA_PSFTFIAI in the Oracle backend database.
If this role is already there in Oracle database, this command will fail. In this case:
- Delete the role by running the command DROP ROLE ROLE_APPROVA_PSFTFIAI.
- Recreate the role by running the command CREATE ROLE ROLE_APPROVA_PSFTFIAI.
Note: If a role has a name other than ROLE_APPROVA_PSFTFIAI, then the role has to be replaced in GRANT_ROLE_PSFTFIAI.sql. Before deleting a role, ensure that the role is not assigned to some other user.

Note: If the user and role already exist and you want to just modify the role, that is, add or delete access to tables, begin directly at step 5.
From the SQL prompt, run the command:
```
GRANT ROLE_APPROVA_PSFTFIAI TO APPROVA_FI 
```
This command grants the role to the user.
From SQL prompt, run the following scripts:
- CREATE_SYNONYM_PSFTFIAI.sql. This script creates a text file with commands to generate PUBLIC SYNONYMS.
- GRANT_ROLE_PSFTFIAI.sql. This script creates a text file with commands to grant SELECT access to ROLE.
Note: Minimum permission scripts are shipped and can be obtained from the IRC Adapters CD under PeopleSoft\MinimumPermissions folder.
From SQL prompt, run the following commands to add objects (tables) that you want to access in IRC:
- @C:\CREATE_SYNONYM_TABLE_PSFTFIAI.sql: This sql file has set of commands, which creates PUBLIC SYNONYMS.
- @C:\GRANT_SELECT_TABLE_PSFTFIAI.sql“. This sql file has set of commands that grant SELECT access to ROLE.