Understanding Oracle Fusion Roles, Roles Hierarchy, Function Privileges

 This article will explain Oracle Fusion Roles, Roles Hierarchy, and Function Privileges. For this let's consider an example in which we need to provide access to the "Reports and Analytics" function to the users.

Let's create a user test.user with no roles assigned:

Now when we log in to this user we can see there's no option for "Reports and Analytics" in the navigator

Now to provide the user access to Reports and Analytics we will create a new role:

• Go to Security Console -> Roles -> Create Role

• Add "Manage Reports And Analytics" function security policy

• Add the user to the role

• When we login to the user we can see that Reports and Analytics option is now visible

But the user can't create any report, as required BI roles are not available.

Below are the BI Roles:

• Now to provide the access to the user, we will edit our role configuration and will add BI Administrator Role Hierarchy

In order to synchronize the role assignment changes submit a new process "Retrieve Latest LDAP Changes" or in setup and maintenance run the task "Run User and Roles Synchronization Process"

After re-login then we can see all required options