Oracle Identity Manager Training

Transcription

1 Oracle Identity Manager Training The University of Wisconsin Service Center will Serve the people of the University of Wisconsin System Collaborate by being supportive and constructive Act with Integrity always and in all matters

2 OIM overview OIM related systems Training Agenda Approval process for roles requests and data level changes Approval request timelines & workflow 2

3 OIM Overview Oracle Identity Manager (OIM) is used to request and grant access to the Human Resource System (HRS) for end users. As OIM is the system that provisions core user entitlements (roles) for HRS users. Access to OIM is protected by multifactor authentication via a registered One-Time Password (OTP) devices. Make an OTP request 3

4 OIM Requests For Related Systems Not only do we use OIM to request access to live HRS data, but it is also used to grant access to other data and reports that can be retrieved outside of HRS. Examples: Business Intelligence (BI) Reporting EPM OIM Website: Role Catalogs: curity/ 4

5 OIM Requests Request for entitlements 1. Access the OIM website. 2. Click on Catalog button in the toolbar. 3. Decide whether your request will be for yourself or for another user. 5

6 OIM Requests 4. Type in the role name from the HRS or EPM Role Catalogs into the search box. 5. Press enter or click the arrow to initiate your search. 6

7 OIM Requests 6. Click the Add to Cart button next to each role that you will be requesting. 7. Continue to add roles to your cart if needed. 8. Click the Checkout button when all roles have been added. 7

8 OIM Requests 9. Type in a Justification for the roles request. 10. For the Effective Date, click the calendar to select today s date. 11. Click the Plus sign to add your supervisor. 8

9 OIM Requests 12. For selecting a supervisor, click the plus sign next to the Supervisor field and type in their first and last name then press enter. Click to highlight the supervisor s name and then click the Select button to add them to the request. 9

10 OIM Requests 13. Review the roles that were chosen in the Cart Items. 14. Click the "Submit" button to finalize your request. 10

11 Compliance Agreement After submitting an OIM request for a data level change or for a roles request, the end user will receive a compliance agreement to complete. This must be completed within 14 days otherwise the request will be dropped. 11

12 Compliance Agreement Click the OIM hyperlink in the . Read the Compliance Agreement. Click Submit. Your web browser will stay within OIM, but most of your screen will go blank. This is normal and your agreement had been submitted. 12

13 Compliance Agreement If you happen to lose the notifying you to complete the Compliance Agreement, you can login to OIM to access it. Click on the Inbox icon in the OIM toolbar and you will find the Compliance Agreement message. 13

14 Tracking a Request 1. Access the OIM website. 2. Click on the Track Requests icon. 14

15 Tracking a Request Users can search for entitlement requests in a few different ways. Raised By Me To see all OIM request history for requests you've submitted. Raised For Me To see all OIM request history for requests related to your jobs. For a User To lookup a specific user s entitlement request history. 15

16 Tracking a Request 3. Type in the full name of the employee. Click the Search button. Beneficiary The employee the entitlement request will impact. Requester The person that submitted the entitlement request. 16

17 Tracking a Request 4. The search results will have an entry for each request as well as a "parent entry" for a group of entitlements requested simultaneously. The "parent entry" is always the lowest numbered request ID in a group. 17

18 Tracking a Request Requested Item - defines the entitlement that was requested. Status - shows what action has been taken or what action needs to be taken for a request. Request ID - hyperlinks you to the request/approval details if desired. 18

19 Tracking a Request 5. Click on the Approval Details tab to view more information about the specified request. 19

20 Tracking a Request 6. Tasks that have been completed or assigned, but not yet completed will have a row associated with them. 20

21 1. Login to OIM. Approving a Request 2. Click on the Inbox icon. 21

22 Approving a Request 3. Select the request(s) that you would like to approve. Press Ctrl click, to select more than one request at a time. 22

23 Approving a Request 4. Click the Actions button. 5. Click the Claim button to indicate that you will be acting on the request(s). Note: There can be more than one approver per request, but only one Data Custodian or Dean/Director needs to approve a request for the OIM workflow to complete. 23

24 Approving a Request 6. Click Actions, then Approve. Enter any comments in the popup window if applicable. 24

25 Data Level Security What is Data Level Security? Department codes are used to determine the data level access of a particular user in Oracle Identity Manager. Users and data custodians can request a specific data level access based upon the department of the employees that they will need to be able to view in HRS. 25

26 Requesting a Data Level Change 1. Login to OIM. 2. Click on the Users icon. 3. Search for the end user by typing in the First Name/Last Name fields. 4. Click Search. 5. Click on the user's "User Login ID." 26

27 Requesting a Data Level Change Displayed search results will appear 6. Click on the Accounts tab. 27

28 Requesting a Data Level Change 7. Select the PeopleSoft HRS row and click on Modify Accounts. 28

29 Requesting a Data Level Change 8. Click the Magnifying Glass next to Row Security Permission List. 29

30 Requesting a Data Level Change 9. Type in the Meaning text box to search for the desired campus code, department, subdepartment, or enter UWS for system-wide access. 30

31 Requesting a Data Level Change 10. Refer to slides 8-10 to select effective date, select a supervisor and add a justification for the data level change request. 11. Click the Ready to Submit button and your request will be submitted to your approvers. 31

32 Overview of Data Level Workflow Below is an overview of the Data Level approval workflow for UWMSN and UW System core users. 32

33 Overview of Data Level Workflow Below is an overview of the Data Level approval workflow for all other institution s core users. 33

34 Overview of OIM Entitlement Workflow Below is an overview of a general OIM entitlement approval workflow for UW Madison and UW System core users. 34

35 Overview of OIM Entitlement Workflow Below is an overview of OIM entitlement approval workflow for all other institution s core users. 35

36 Frequently Asked Questions What entitlements do I have now? Click on the My Profile down-list arrow and click My Access. Click on the Entitlements tab to view your list of entitlements. What is the easiest way to compare roles for two different users? Access OIM and look up both users to do your comparison. After final approval, how long does it take for a user to receive access? Immediately upon approval by data custodian. How does a job code change affect a user's access to HRS/EPM? Transfers and terminations will drop all of the user s entitlements. 36

37 OIM Getting Started (44549) Requesting Entitlements (44840) Resources Complete the Compliance Agreement (45004) Request a Data Level Change (45675) UDDS Code to Grant Data Level Access in HRS (47245) Search for Other Users (45682) Viewing/Removing Current Entitlements (45679) Approving Entitlements (45752) Denying Entitlements (45836) View Request History (45730) Role Catalogs - n/security/ 37

38 38 Questions?