20/05/2023, 19:09 Document 2338470.

1
Copyright (c) 2023, Oracle. All rights reserved. Oracle Confidential.

How to Remove Navigator Items for A Specific User/Role (Doc ID 2338470.1)

In this Document

Goal
Solution

APPLIES TO:

Oracle Fusion Sales Cloud Service - Version 11.12.1.0.0 and later

Information in this document applies to any platform.

GOAL

Qn1:On : 11.12.1.0.0 version, Security

How to Remove Navigator Items for A Specific User/Role

We would like to reduce the navigator functionality for a sales administrator custom role.
We used sales administrator because the user needs full access to all data records, but should not be able to access any
admin task in the navigator.

SOLUTION

1) Get the Hierarchical role report for the user

Go to Navigator >> Scheduled Processes

Click button Schedule new Process
Search for User and Role Access Audit Report
In the Process Details fill (you can play with other configurations depending on the objectives):
Population Type: User Name
User Name: <username of the user you want to analyze>
Submit the job and wait for it to finish
Download the csv reports attached

2) Search for your custom role in Navigator >> Security Console

Click on the arrow next to the result and Simulate Navigator

https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-state=lrjyzikfk_53&id=2338470.1 1/5
20/05/2023, 19:09 Document 2338470.1

3) You will see a page with all the navigator menu items
click on the menu item you want to remove (in this example Application Composer)

4) You will be presented with 2 options. Select View Privileges Required for Menu

https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-state=lrjyzikfk_53&id=2338470.1 2/5
20/05/2023, 19:09 Document 2338470.1

5) Verify the privileges that give access to that Navigator menu item

6) Open the csv for the Hierarchical roles from the audit job in excel. Create a filter in the first row

https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-state=lrjyzikfk_53&id=2338470.1 3/5
20/05/2023, 19:09 Document 2338470.1

7) Go to the column with the name ENTITLEMENT-DISPLAY-NAME and filter only for those privileges retrieved before

8) You will see in the list just the records with that privilege

https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-state=lrjyzikfk_53&id=2338470.1 4/5
20/05/2023, 19:09 Document 2338470.1

9) Go to the columns INHERITED-ROLE-DISPLAY-NAME and you will find the role under that has that privilege

10) You will have to remove these privileges from the hierarchy
-either you do not need the hole role and you just remove the role from the hierarchy
-or you will have to create copy of the role, remove the out of the box role from the hierarchy and add the custom one
after removing the privilege from the role

Didn't find what you are looking for?

https://support.oracle.com/epmos/faces/DocumentDisplay?_adf.ctrl-state=lrjyzikfk_53&id=2338470.1 5/5