Security Roles Overview for CAT

Overview

This document outlines the security roles for the Compensation Administration Tool.

You may click on the links below to navigate directly to a section:

---

CAT Security Overview

Five security roles have been developed for the Compensation Administration Tool (CAT) which will allow access to CAT-specific pages and functionality using PeopleSoft row-level security.  CAT Access is separate from HRS access, and you may request access to the CAT even if you do not have HRS access.  However, some links in the CAT that refer to HRS data may not be accessible.  Row-level security tiers data and grants users access to a single division or department but not multiple divisions or departments.  For example, if a user only has access to one division in the CAT, but needs access to multiple divisions because an employee has split funding, they will need to move up an entire security level to view the entire institution.

CAT SECURITY OVERVIEW
CAT Roles and Description of Access
CAT Role	Role Name in OIM	Approvers	Functions
Admin	HR CAT Admin User Update	UWSA Service Center/ Budget Office	Lock out functional users and control job data feed Make changes to all transactional pages Run all processes and reports within the CAT
Update	HR CAT Func User Update	Institutional HRS Approvers	Make changes to all transactional pages Run all processes and reports within the CAT
Read Only	HR CAT Func User Read Only	Institutional HRS Approvers	Search and view records within the CAT Run reports within the CAT
EPM	EPM HR CAT Query Non Sensitive	Institutional HRS Approvers	Query CAT data views through EPM View current and historical CAT comp/funding data
IR EPM (Hyperion or Studio)	IR EPM HR CAT Query Non Sensitive (Most commonly used)	Institutional HRS Approvers	Query CAT data views through EPM and interactive Reporting View current and historical CAT comp/funding data

Role Request Process

1. Request Entitlements (Roles) for HRS
   

   a.  If the user does not currently have HRS Access, request a one-time password device here → UW Digital ID (One-Time Password) - Multi-Factor Authentication Process Overview
   b.  If the user does not currently have EPM Access, determine whether online or desktop access is desired and follow steps here → Requesting EPM Access
   c.  Request access to the CAT for yourself or others follow steps here → Oracle Identity Manager (OIM) 11g- Requesting Entitlements for HRS
   

   i.   Log into Oracle Identity Manager
   ii.  Search the Catalog for 'Entitlements'
   iii. Select the appropriate HRS and/or EPM Role Name (see chart above)
   iv. Add it to your cart.
   

   d.  Submit the role request to the appropriate approver based on the role you are requesting.
   

2. Complete the Compliance Agreement After Requesting Entitlements → Oracle Identity Manager (OIM) 11g- Complete the Compliance Agreement After Requesting Entitlements
   

   a.  After you have submitted your request, you will be emailed an HRS compliance agreement
   b.  Read, complete, and submit
   c.  The appropriate supervisor will receive notification of your request to approve or deny.
   

3. Request a Data Level Change for Additional Access (ex. Division to full Business Unit) → Oracle Identity Manager (OIM) 11g - How to Request a Data Level Change
   

   a.  Under the 'My Access' tab, view the 'Accounts' tab, select 'PeopleSoft HRS' and then click 'Modify Accounts'
   b.  Use the correct UDDS Code for the area that you are requesting access for → Oracle Identity Manager (OIM) 11g - Use UDDS Code to Grant Data Level Access in HRS
   

   i.  Use the search tool next to 'Row Security Permission List' to search for the UDDS Code that grants you the correct row level access
   ii.  Add it to your cart
   

   c.  Submit the request to the appropriate approver.
   

For more information on the role request and approval process, refer to the Oracle identity Manager KBs, or email serviceoperations@uwss.wisconsin.edu.