Roles by Entitlement Report

The Roles by Entitlement Report shows how particular entitlements and permissions fit into your organization's role model. This report lets you enter specific entitlements or permissions for selected application(s) and see which roles provide direct or indirect access to them. You must select at least one application as part of your reporting criteria – in other words, you can not leave the Application field blank to report on all applications at once.

The Roles by Entitlement Report includes the following sections:

• Standard Report Properties

• Role Properties – these are described in the table below

• Report Layout

All reports use a set of standard properties for basic information such as naming and descriptions, and for setting controls, such as scoping and requiring sign-off.

You must enter the following before running this report:

• Name

• Application

• Filter Type

For step by step instructions on creating or editing a report, see Working With Reports

Role Properties

The following criteria determines what information is included in this report.

Option	Description
Applications	Select the application(s) to include in the report. You must select at least one application. Click the arrow in the suggestion field to see a list of all applications, or enter a few letters in the field to display a list of applications that start with that letter string. Only roles associated with the selected applications are included in this report.
Filter Type	Choose whether to report on role relationships based on entitlements or on permissions. A selection in this field is required. The selection you make here determines which of the following fields appear: Entitlement fields or Permission fields.
Entitlement Attribute	Filter for roles that include the selected entitlement attribute(s).
Entitlement Value	Filter for roles that include the selected entitlement value(s).
Permission Target	Filter for roles that include the selected permission target(s).
Permission Right	Filter for roles that include the selected permission right(s).
Profile Relationship to Role	Filter roles by the role's profile relationship (direct or indirect). A profile is a set of entitlements on a specific application. Options are: Any direct or indirect relationships Any direct relationships Any indirect relationships For example, to filter for a role that provides direct access to both the AcctsPayable and AcctsReceiveable groups in the Accounting application, you would select the Accounting application, choose Entitlements as the Filter Type, and enter AcctsPayable and AcctsReceiveable in the Entitlement Value field. Then choose Any direct relationships here. Note that some roles can grant both direct and indirect access to entitlements and permissions, so a role can potentially be returned by both the direct relationship and indirect relationship options.