Integration -Users Creation &Role Assignment (Automation)

 Integration Inbound 

Designed and Developed Integration to automate Users Creation &Role Assignment (Automation)

EBS  

Fusion 

Scheduled 

1)Set date 

2)Connect to EBS DB 

3)execute Custom Procedure "XXSAI_UTIL_PKG.XXSAI_GET_REF_DATA_PRC"  and it will fetch and return Users and Roles data using below query 

 SELECT person_first_name               first_name,

                   person_last_name                last_name,

                   f.user_name,

                   f.user_name || '@CISCO.COM'     email_address,

                   role_name,

                   active_flag

              FROM apps.xxpdh_user_access_tb  xua,

                   apps.fnd_user              f,

                   apps.hz_parties            h

             WHERE     f.user_name = UPPER (xua.user_name)

                   AND f.end_date IS NULL

                   AND f.person_party_id = h.party_id

                   AND xua.synch_status = 'N';

4) for each record check active_flag ,if active flag=Y add role else remove role  

    IF user exists with active_flag='Y' and role not exists then it adds role to user 

IF user exists with active_flag='Y' and role also exists then 

if user doesnot exist but role existed then create new user and add role to the user 

if user doesnot exist and  role doesnt exist then create user and do not add role 

5)Error handling 

  Integration will Insert Errors in EBS DB table(Audit tables )  

   

1. CHECK_USER_EXIST

https://fa-epuy-test-saasfaprod1.fa.ocs.oraclecloud.com/hcmRestApi/scim/Users?/filter=userName

2. CREATE USERS

Post:

https://fa-epuy-test-saasfaprod1.fa.ocs.oraclecloud.com/hcmRestApi/scim/Users

3.CALL ROLE ID

https://fa-epuy-test-saasfaprod1.fa.ocs.oraclecloud.com/hcmRestApi/scim/Roles?/filter=displayName

4. PATCH_ROLES_ASSIGN-CON

https://fa-epuy-saasfaprod1.fa.ocs.oraclecloud.com:443/hcmRestApi/scim/Roles

Create a role assignment

https://docs.oracle.com/en/cloud/saas/human-resources/farws/op-useraccounts-guid-child-useraccountroles-post.html

Create a role assignment

/hcmRestApi/resources/11.13.18.05/userAccounts/{GUID}/child/userAccountRoles

Delete a role assignment

/hcmRestApi/resources/11.13.18.05/userAccounts/{GUID}/child/userAccountRoles/{UserRoleId}

Get a role assignment

/hcmRestApi/resources/11.13.18.05/userAccounts/{GUID}/child/userAccountRoles/{UserRoleId}

Get all role assignments

/hcmRestApi/resources/11.13.18.05/userAccounts/{GUID}/child/userAccountRoles

Process

1. staging table apps.xxpdh_user_access_tb  created in EBS with the user and required role information
2.  Dell boomi integration creates the user if the user is unavailable in PDH and assigns the custom role in PDH
3.  if the user already exists then the role is added to the user incase it is not already available as part of the role list
4.  we are not creating the custom role via integration the role creation needs to be done manually as part of PDH setup
5. integration remove the user roles when employee left from organization based on EBS input flag-N