Data Access Aggregation Settings

Enable enableOldRestFrameworkForDataSecurities for handling special characters in the Data Access. By default, the value is set as false. entry to the source XML using the REST APIs:

• Key: enableOldRestFrameworkForDataSecurities

• Value: true

Note
For more information on SailPoint's REST APIs, refer to Best Practices: REST API Authentication and REST API - Update Source (Partial) in the SailPoint Developer Community.

Context Name	Module
AssetBook	Financials
Business Unit	Financials, Procurement
Data access set	Financials
Intercompany Organization	Financials
Ledger	Financials
Control Budget	Financials
Project Organization Classification	Project Management
Reference Data set	Financials
Legal Entity	Financials

The following Function Security Policies, Role Hierarchy, and existing aggregation permissions are required to use this feature.

Function Security Policy - to access Security Context LOVs REST APIs

User Friendly Name of Role	Role Code
Manage Application Reference Data Set	FND_APP_MANAGE_REFERENCE_DATA_SET_PRIV
Manage Application Reference Data Set Assignment	FND_APP_MANAGE_REFERENCE_DATA_SET_ASSIGNMENT_PRIV
Get Enterprise Structures Using REST Service	FUN_GET_ENTERPRISE_STRUCTURES_REST_SERVICE_PRIV
Get General Ledger Setups Using REST Service	GL_GET_GENERAL_LEDGER_SETUPS_USING_REST_SERVICE_PRIV
Get Intercompany Setups Using REST Service	FUN_GET_INTERCOMPANY_SETUPS_USING_REST_SERVICE_PRIV
Manage Control Budgets	XCC_MANAGE_CONTROL_BUDGETS_PRIV
View Fixed Asset Transaction Accounting	FA_VIEW_FIXED_ASSET_TRANSACTION_ACCOUNTING_PRIV FA_VIEW_FIXED_ASSET_BOOKS_PRIV
Manage Project Labor Schedules	PJC_MANAGE_PROJECT_LABOR_SCHEDULES_PRIV
View Purchase Order Work Area	PO_VIEW_PURCHASING_WORKAREA_PRIV

Data Security Policy- to create a data Security Policy

Data Resource	Value	Usage
Data Access Set for Table GL_ACCESS_SETS	All values	Manage Access Sets (Data)
Control Budget	All values
Fixed Asset Book	All values
Project Organization for Table PJF_ALL_ORGANIZATIONS	All values
Business Unit	All values

Role Hierarchy - to schedule and access Oracle Business Intelligence Reports

Role Name	Role Code	Security for Analysis and Reports	Usage
BI Consumer Role	BIConsumer	View-Only	View Report
BI Author Role	BIAuthor	Create and Edit	Reschedule Report
BI System Role	BISystem	Access SOAP and Related services	Backend SOAP calls
BI Application Administrator Duty Role	BIA_ADMINISTRATOR_DUTY	Manage Permissions	Manage report permissions and Download Report

By default, the user with BI Administrator privileges must unarchive the following archive (i.e. SailpointDAv1.catalog) located in ‘Shared Folders' under Catalog of Reports and Analytics platform. Once unarchived, the new folder with 'SailpointDAv1’ name should start appearing in the Shared Folders path.

Caution
Once unarchived, any further modification of the content in 'SailpointDAv1’ folder is strictly prohibited.

Download SailpointDAv1.zip here.

Important
If the path of the BI report is set to anything other than 'SailpointDAv1', it is mandatory to overwrite all the reports in the unarchived folder by recreating them with the correct data model path. Additionally, make sure in report settings that the Output Format and Default Format are set to Data(CSV) and saved.

Warning
Enabling the Data Access Aggregation feature may seriously impact the system performance. It is advised to use this feature only if required.

1. Ensure the Minimum Permissions Required have been met.

2. Ensure the Prerequisites have been met.

   Screenshot

   

3. Enable the Aggregate Data Access for Seeded Roles and Aggregate Data Access for Custom Roles features based on your aggregation needs.

4. In the Oracle Business Intelligence Report Directory Path field, enter SailpointDAv1.

5. Select Save.

Note
Once the aggregation with the features enabled is complete, SailPoint advises that you disable the features to avoid system performance impacts for each consecutive aggregation attempt when data access aggregation is not required.