Why are security assignments being removed by system?

Molly P

Every morning we have 4 users whose AP BU security assignment gets removed by "system". Evidence is shown in the FDI > Security > Activity screen. These users have different AP roles and all custom AP fusion app roles are mapped to application roles in FDI. Looking at the timestamp, this happens at the same time every morning so we believe there is a process running to remove them. The issue stops when we disable the AUTO_SYNC_ERP process in FDI, but this is also the process that updates security assignments from fusion apps as it should, so we cannot keep it disabled. There is also a fusion apps process 'IDCS Sync Notification' that runs around the time the assignments are getting removed, so this may be an issue in IDCS. Can someone explain this process? How are users being synced and why are only a few users (whose assignments have not changed in years) getting one of their security assignments removed?

Ashish-Oracle

@Molly P From FDI’s point of the view the mechanism of role synchronisations depend on the way the SSO has been configured at your end. I would suggest you review the below document and check which Scenario your security configuration falls under. That would give you more insights on this.

Set Up User Access to Oracle Fusion Data Intelligence Using Single Sign-On

https://docs.oracle.com/en/cloud/saas/analytics/24r3/fawag/set-user-access-oracle-fusion-data-intelligence-using-single-sign.html#GUID-8E6311FF-C26F-4BA2-B48F-AFDC150051CE

You can additionally check if there are any Exclusion Rules set at FDI level for these users.

You can check this in FAW->Console->Security->Security Assignment->Set Exclusion Rules for Security Assignments