Data Access Aggregation Settings
The Data Access Aggregation feature supports aggregation of all security context and security context values (data access) from the Oracle ERP Cloud managed system. This feature should only be used if required. Enabling the feature may seriously impact system performance. If the feature is not required, skip this step. If the feature is required, refer to the following information:
Warning
Enabling the Data Access Aggregation feature may seriously impact the system performance. It is advised to use this feature only if required.
Use Previous REST Framework Version's for Data Securities
Enable enableOldRestFrameworkForDataSecurities for handling special characters in the Data Access. By default, the value is set as false. entry to the source XML using the REST APIs:
- Key:
enableOldRestFrameworkForDataSecurities - Value:
true
Note
For more information on SailPoint's REST APIs, refer to Best Practices: REST API Authentication and REST API - Update Source (Partial) in the SailPoint Developer Community.
Supported Security Contexts
| Context Name | Module |
|---|---|
| AssetBook | Financials |
| Business Unit | Financials, Procurement |
| Data access set | Financials |
| Intercompany Organization | Financials |
| Ledger | Financials |
| Control Budget | Financials |
| Project Organization Classification | Project Management |
| Reference Data set | Financials |
| Legal Entity | Financials |
Minimum Permissions Required
The following Function Security Policies, Role Hierarchy, and existing aggregation permissions are required to use this feature.
Function Security Policy - to Access Security Context LOVs REST APIs
| User Friendly Name of Role | Role Code |
|---|---|
| Manage Application Reference Data Set | FND_APP_MANAGE_REFERENCE_DATA_SET_PRIV |
| Manage Application Reference Data Set Assignment | FND_APP_MANAGE_REFERENCE_DATA_SET_ASSIGNMENT_PRIV |
| Get Enterprise Structures Using REST Service | FUN_GET_ENTERPRISE_STRUCTURES_REST_SERVICE_PRIV |
| Get General Ledger Setups Using REST Service | GL_GET_GENERAL_LEDGER_SETUPS_USING_REST_SERVICE_PRIV |
| Get Intercompany Setups Using REST Service | FUN_GET_INTERCOMPANY_SETUPS_USING_REST_SERVICE_PRIV |
| Manage Control Budgets | XCC_MANAGE_CONTROL_BUDGETS_PRIV |
| View Fixed Asset Transaction Accounting | FA_VIEW_FIXED_ASSET_TRANSACTION_ACCOUNTING_PRIV, FA_VIEW_FIXED_ASSET_BOOKS_PRIV |
| Manage Project Labor Schedules | PJC_MANAGE_PROJECT_LABOR_SCHEDULES_PRIV |
| View Purchase Order Work Area | PO_VIEW_PURCHASING_WORKAREA_PRIV |
Data Security Policy - to Create a Data Security Policy
| Data Resource | Value | Usage |
|---|---|---|
Data Access Set for Table GL_ACCESS_SETS |
All values | Manage Access Sets (Data) |
Control Budget |
All values | |
Fixed Asset Book |
All values | |
Project Organization for Table PJF_ALL_ORGANIZATIONS |
All values | |
Business Unit |
All values |
Role Hierarchy - to Schedule and Access Oracle Business Intelligence Reports
| Role Name | Role Code | Security for Analysis and Reports | Usage |
|---|---|---|---|
| BI Consumer Role | BIConsumer | View-Only | View Report |
| BI Author Role | BIAuthor | Create and Edit | Reschedule Report |
| BI System Role | BISystem | Access SOAP and Related services | Backend SOAP calls |
| BI Application Administrator Duty Role | BIA_ADMINISTRATOR_DUTY | Manage Permissions | Manage report permissions and Download Report |
Prerequisites
By default, the user with BI Administrator privileges must unarchive the following archive (i.e. SailpointDAv1.catalog) located in 'Shared Folders' under Catalog of Reports and Analytics platform. Once unarchived, the new folder with 'SailpointDAv1' name should start appearing in the Shared Folders path.
Caution
Once unarchived, any further modification of the content in 'SailpointDAv1' folder is strictly prohibited.
Download the SailpointDAv1.zip from the SailPoint Community.
Important
If the path of the BI report is set to anything other than 'SailpointDAv1', it is mandatory to overwrite all the reports in the unarchived folder by recreating them with the correct data model path. Additionally, make sure in report settings that the Output Format and Default Format are set to Data (CSV) and saved.
Enable the Data Access Aggregation Feature
Warning
Enabling the Data Access Aggregation feature may seriously impact the system performance. It is advised to use this feature only if required.
- Ensure the Minimum Permissions Required have been met.
-
Ensure the Prerequisites have been met.
Screenshot
-
Enable the Aggregate Data Access for Seeded Roles and Aggregate Data Access for Custom Roles features based on your aggregation needs.
- In the Oracle Business Intelligence Report Directory Path field, enter SailpointDAv1.
- Select Save.
Note
Once the aggregation with the features enabled is complete, SailPoint advises that you disable the features to avoid system performance impacts for each consecutive aggregation attempt when data access aggregation is not required.
Documentation Feedback
Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.