WorkflowFAQ » Blog Archive » AME Part Three – Roles and Grants for AME Page 1 of 7

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent
(output started at /hermes/web09/b2047/pow.workflowfaqc/htdocs/index.php(1) : eval()'d code:7)
in /hermes/web09/b2047/pow.workflowfaqc/htdocs/wp-content/plugins/wordpress-automatic-
upgrade/wordpress-automatic-upgrade.php on line 121

AME Part Three – Roles and Grants for AME

By default, the “Approvals Management Administrator” and “Approvals Management Business Analyst”
responsibilities do not have any functions associated with them, because their access is restricted by Role
Based Access Control (RBAC). In this section, I will detail the steps needed to add functions so that we can
get into using AME.

Firstly, we’ll create a new user for this demonstration, and assign them the two responsibilities, thus:

If I now log into the eBusiness Suite as that user and try to switch to either of those responsibilities, the
system indicates that there are no functions available for the user (see screenshot below). As I said above,
this is because role based access control ensures that only users with the right roles as well as
responsibilities can access the functions.

So, now we need to modify the user to give them the right roles to administer AME properly. As a system

http://www.workflowfaq.com/roles-grants-for-ame 23/11/2554
WorkflowFAQ » Blog Archive » AME Part Three – Roles and Grants for AME Page 2 of 7

administrator, open the “User Management” responsibility, as shown below.

If you do not have any functions assigned to the responsibility, then you will need to use the SYSADMIN
user and assign the “Security Administrator” role to your user. Select the “Users” option to continue.

Search for the user that you want to add the functions to (in my case, the AMEADMIN user I created
earlier), open the user details and then click on the “Assign Roles” button. You are then presented with a
search window, where you should search for all Roles beginning “Approval”:

You are then returned to the user screen, where you should complete a justification for granting the roles to
the user – if you don’t then the screen will prevent you from continuing. Once you have entered the
justification, you should then hit the Apply button.

Log out as this user, and when you log in as the AME user, you now have functions associated with the two
responsibilities:

Now that we have granted the roles to the user, they can access the functions correctly. However, RBAC
means that when we open the Dashboard, the data is still protected and cannot be viewed:

http://www.workflowfaq.com/roles-grants-for-ame 23/11/2554
WorkflowFAQ » Blog Archive » AME Part Three – Roles and Grants for AME Page 3 of 7

Again, we need to grant some RBAC roles to allow the user to access the different transaction types. The
main principle behind this is to enable organizations to split the Transaction Type maintenance between
different roles – for example to allow HR Super Users to maintain only the HR rules.

Using a different user, navigate to the Functional Administrator responsibility and click on the “Create
Grant” button to create the new grant. In this example, we will create a specific grant for the AMEADMIN
user, however in the real world it is more likely that you will create the grant for a group of users. The
Object is set to “AME Transaction Types”, thus:

In the second step, accept the default data context type of “All Rows” and continue to the third step. Define
the “Set” to be “AME Calling Applications” as shown in the following screenshot:

Finally, review the settings that you have entered and click on the “Finish” button. In order to ensure that
the changes are replicated, now flush the cache by clicking on the “Core Services” tab then choose the
“Caching Framework” sub-menu. Choose “Global Configuration” from the sidebar and then click on the
“Clear All Cache” button. You will be presented with a warning message (see below) which you can ignore
and click on the “Yes” button.

Log out of this user and log back in as the AMEADMIN user, and navigate to one of the AME

http://www.workflowfaq.com/roles-grants-for-ame 23/11/2554
WorkflowFAQ » Blog Archive » AME Part Three – Roles and Grants for AME Page 4 of 7

responsibilities – you are now given a list of the AME Transaction Types that are configured in the system:

In the next blog post, I’ll be providing a practical example of customizing AME within iRecruitment.

Share this: Email 0 Facebook Digg Reddit

• Stum

This entry was posted on Friday, February 12th, 2010 at 12:07 pm and is filed under Functional, Oracle. You can follow any
responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

« AME Part Two – Components of AME

AME Part Four – Customizing AME in iRecruitment »

3 Responses to “AME Part Three – Roles and Grants for AME”

1. Harold Schmitt Says:

October 13th, 2010 at 3:28 pm

Thanks for the information, very helpful…

2. Sue Gordon Says:

November 2nd, 2010 at 7:59 am

This post is great – thank you very much. One thing – when I got to the FINISH button – I then got
an error “you have encountered an unexpected error”. I found the solution at another post
http://ioraclefusion.wordpress.com/tag/ame-b/
“We need to set the AME: Installed Profile option as well to make it work. Set this profile option to
Yes at application level (Human Resources).”
After setting this profile the Grant was saved correctly

3. Sirisha Says:
May 20th, 2011 at 2:21 pm

This was very helpful. Thanks

Leave a Reply

Name (required)

http://www.workflowfaq.com/roles-grants-for-ame 23/11/2554