Run security reports
Finance and operations apps provides a set of rich security reports to help you understand the set of security roles running in your environment and the set of users assigned to each role.
Security reports can be found under System administration > Inquiries > Security. Let’s get to know some of these security reports.
User role assignments report
The User role assignments report generates a view of the current user role assignments in your system. By default, the report includes all users with roles assigned. You can optionally limit the report to a specific set of users by entering a list of users when generating the report.
On the User role assignments parameters pane, go to Records to include > Filter. From here you can add or remove filters to the list of users the report will be generated for. For each user in the report a list of roles is provided, along with any restrictions at the legal entity or organization level.
Role to user assignments report
The Role to user assignment report provides an aggregation of role assignments. Expanding a role in the report shows the list of users assigned to the role, and expanding the user name shows any restrictions the role has applied. The same method for filtering the set of users can be applied to this report as described for the User role assignments report.
Security role effective access report
The Security role effective access report provides a view of the effective permissions for each security role. This report provides a flattened list of permissions grouped by type across all sub-roles, duties, and privileges contained in the role.
This report may take some time to run. If it is the first time the report has run, or there could be changes to the role definitions, the Rebuild collection option should be set to Yes. You can optionally limit the roles to be included in the report by adding a filter under Records to include.
Expanding a role shows the category of objects the role has access to. Expanding one of the object types will show a detailed list of each object of that type included in the role.
Security duty assignments report
The Security duty assignments report provides a view of all the duties contained within a role. This report can be configured to run on any collection of roles to ensure that segregation of duties is maintained between roles. By default, the report will include all roles. To limit the roles included, leverage the filtering provided in the Records to include section.
Expanding a role in the Security duty assignments report will show each duty assigned to the role, along with details of the duty.