Manage Access to Data Based on Operating Units
NoetixViews for Oracle Install Base, Oracle Order Management, Oracle Payables, Oracle Projects, Oracle Purchasing, Oracle Receivables, and Oracle Service Contracts provide configurable access to data in Install Base, Order Management, Payables, Projects, Purchasing, Receivables, and Service Contracts. The About Access to Operating Unit Data topic in this section discusses about the support for data security based on operating units in NoetixViews, and the Define Security Based on Operating Unit topic discusses about how to customize security settings for the Noetix query users based on the operating units.
About Access to Operating Unit Data
In NoetixViews, Noetix query users can access data from the Noetix views for Install Base, Order Management, Payables, Projects, Purchasing, Receivables, and Service Contracts based on the roles and row-level security assigned to them. All forms of the views for these modules allow users to access data based on operating units. For Noetix views for Install Base, the access to data for a Noetix query user is controlled based on the combination of an item instance and operating unit. For the data in the views of these modules, row-level security is determined based on the organizational unit security assigned to the Noetix query users in Oracle E-Business Suite. The organizational unit security decides the operating units to which the Noetix query users have access in Oracle E-Business Suite. However, for the global form of the views, NoetixViews provides a functionality to override the organizational unit security of the Noetix query users to customize their access to operating units.
Define Security Based on Operating Units
In Noetix Views Administrator (NoetixViews Administrator), use the Operating Unit tab to control access to data in global Noetix views for Install Base, Order Management, Payables, Projects, Purchasing, Receivables, and Service Contracts based on operating units for a Noetix query user.
The Operating Unit tab will be available only if:
You have purchased the global form of Noetix views for at least one of the following Oracle E-Business Suite modules:
Install Base
Order Management
Payables
Projects
Purchasing
Receivables
Service Contracts
You are not modifying the Oracle Administrative Database User (Type O).
IMPORTANT: When assigning row-level security to Noetix query users using the Operating Unit tab, the following points should be noted:
For allowing Noetix query users to view data from the Noetix views for the selected Oracle application, appropriate roles corresponding to the selected operating units should be assigned to the users.
In Oracle Discoverer and Noetix WebQuery, user authentication based on the roles and row-level security settings similar to Oracle E-Business Suite is supported. For information, see About Data Security in NoetixViews.
In Oracle Business Intelligence (Oracle BI), SAP BusinessObjects, and IBM Cognos Business Intelligence (Cognos BI), user authentication based on the roles and row-level security settings is supported for only the Oracle E-Business Suite Authenticated User (Type A) type Noetix query users if the query users are mapped to the users registered in these BI tools. For information, see Applying Row-level Security to BI Tool Users.
To control access to data in Noetix views based on operating units
On the Noetix Query User Maintenance tab of the Security Manager dialog box, select the user for whom you want to customize access to data. For information about creating or modifying a user account, see Create a Noetix Query User Account or Modify a Noetix Query User Account. Click Edit. The <Noetix query user> Properties dialog box appears. If you are creating the Noetix query users for the first time, skip this step, and go to step 2.
Click the Operating Unit tab.
In the Application list, click an application name. The options are Install Base, Order Management, Payables, Projects, Purchasing, Receivables, and Service Contracts. After you select the application, the corresponding settings appear in the Settings for the <application name> application section.
-
In the Settings for the <application name> application section, select one of the following options:
-
Derive from Oracle EBS: Click this option to grant access to operating units based on the security settings of the Noetix query user in the selected Oracle application. This option is available only if the Noetix query user is of the Oracle E-Business Suite Authenticated User (Type A) type or Oracle E-Business Suite Authenticated Responsibility (Type R) type. For more information on users and roles, see About Noetix Query Users and Roles.
This is also the default option for these users. The operating units that the user has access to are displayed in the Operating Units list. When this option is selected, the data on the list cannot be modified. Go to step 6 to save the changes.
-
NOTE: If multiple users are selected, the Operating Units list will display the "<multiple users selected>" text for this option.
Custom: Click this option to grant access to a custom list of operating units. After you select this option, the Add button will be available. By default, this option is selected for users of the Noetix System Administration User (Type N) and Database User (Type U) types. For information about specifying a custom list of operating units, see step 5.
All: Click this option to grant access to all the operating units available in the selected Oracle application to the Noetix query user. The operating units are displayed in the Operating Units list. When this option is selected, the data on the list cannot be modified. Go to step 6 to save the changes.
If the data access privileges
of the Noetix query users of the Oracle E-Business Suite Authenticated
User (Type A) type or Oracle E-Business Suite Authenticated Responsibility
(Type R) type change in Oracle E-Business Suite or if row-level
security changes have been made in Oracle E-Business Suite, click
Refresh Security ()
on the toolbar of the NoetixViews Administrator to update the changes
in NoetixViews. For more information, see Refresh
Security for Noetix Query Users.
NOTE: When you click the Refresh Security button, a message is displayed stating that the process of refreshing the security may take some time.
-
To specify a custom list of operating units, do the following:
Click Add. The Add Operating Units dialog box displays the list of operating units that are available in the selected Oracle application and that are yet to be added to the Operating Units list.
The following columns and options are available in the Add Operating Units dialog box:
Show only current user’s Oracle EBS-derived access: Allows you to view only the operating units that are accessible to the Oracle E-Business Suite Authenticated User (Type A) type or Oracle E-Business Suite Authenticated Responsibility (Type R) type user in the selected Oracle application. If you do not select this check box, you can see all the operating units available in the selected Oracle application. This check box is available for only the Oracle E-Business Suite Authenticated User (Type A) type or Oracle E-Business Suite Authenticated Responsibility (Type R) type users.
Operating Unit: Indicates the name of the operating unit.
Org ID: Indicates the organization ID for the corresponding operating unit.
Organization: Indicates the organization name for the corresponding operating unit.
Ledger/Set of Books: Indicates the name of the ledger/set of books corresponding to the operating unit.
Ledger ID/Set of Books ID: Indicates the ledger/set of books ID.
Chart of Accounts: Indicates the chart of accounts corresponding to the ledger/set of books.
COA ID: Indicates the chart of accounts ID.
Affected Noetix Roles: Indicates the Noetix roles that have access to the views corresponding to the operating unit.
EBS-Derived: Indicates whether the user can access the operating unit in the selected Oracle application.
Click a column title to sort the operating units by the entity represented by the column.
NOTE: You need to scroll to the right to see all the information in a row. The width of columns in the list can be adjusted to see more if required. Select the line between columns in the header, and drag it to the required position. Also, the height and width of the dialog box can be resized by dragging the sides of the dialog box.
Select the check boxes corresponding to the operating units that you want to assign to the Noetix query user. To select all the operating units, click Select All.
Click OK. You will return to the Operating Unit tab with the selected operating units displayed in the Operating Units list.
NOTE: You need to scroll to the right to see all the information in a row. The width of columns in the list can be adjusted to see more if required. Select the line between columns in the header, and drag it to the required position.
To remove an operating unit from the Operating Units list, select the operating unit, and click Remove. To select multiple operating units, press CTRL, and click the operating units.