Overview of User Management

15-4 Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager ■ Not Allowed by Org : Displays only resource objects that are disallowed, based on the users organization. ■ Resources by Policy : Displays a second box that contains the access policies for the user groups to which the user is a member. Select an access policy from this box to display the resource objects that are allowed or disallowed for the user, based on this access policy. A tracking system enables you to view resources that are allowed or disallowed for a user, based on the organizations the user is a member of and the access policies that apply to the user. The resource objects that are allowed for the user are displayed in the Resources Allowed list. This list represents resource objects that can be provisioned for the user. It does not represent the resource objects that are provisioned for the user. The resource objects that are disallowed for the user are displayed in the Resources Not Allowed list. To view the tracking system: 1. Go to the Policy History tab. 2. Find the Display Selection region on this tab.

3. Click Policy History.

From the User Policy Profile History window, you can view resources that are allowed or disallowed for a user for the date and time you selected, as follows: ■ From the History Date box, you can select a date. ■ From the Display Type box, you can display resources that are allowed or disallowed based on the organizations the user is a member of, the access policies that apply to the user, or both. ■ From the Policy box, you can display the access policy that determines what resource objects are allowed or disallowed for the user.

15.4 Assigning Role Entitlements

The Group Entitlements form is displayed in the User Management folder. You use it to create and move forms, and to designate the forms and folders that members of a role can access through the Explorer. To designate forms and folders to roles by using the Group Entitlements form:

1. In the Explorer, double-click Group Entitlements.

The User Group Information page is displayed, as shown in Figure 15–3 :