linear_scale How To

Grant OBI Financial Reporting Authority

The ability to run Oracle Business Intelligence (OBI) financial reports is controlled by grants given in Authority Manager, which has a number of choices to be made about type of privilege, organizational scope and data limits.

Grant OBI Finance Reporting Authority

  • You must have the specific authority you are granting and it must be checked Grantable
    • To grant Report Viewer Salary Data for an org, you must have Report Viewer Salary Data for that org as grantable.
    • Grantable Ad Hoc does not provide the ability to grant Report Viewer, as there is no inheritance on granting.
  • If you do not have OBI grantable authority, you may Request Authority for someone by an authorized grantor.
  • You need to understand the authority model of OBI so that you can make choices about the privilege, limits and scope of what you want to grant. Refer to OBI Financial Reporting Authority Model for more information.

  1. Enter authority.stanford.edu in the browser
  2. Log in using  SUNet ID and password

  1. Select the Grant Authority tile on the Home page
  2. Begin entering a SUNet ID or a Name in the search field   

A list of viable options will display. Refine the search as needed to find the correct person.

  1. Select the employee's name from the search results

 

  1. Under Enterprise Reporting, select the combination of  Financial Reporting business function and the privilege that you want to grant.
Privilege                                                       Capability

Report Viewer

  • View static or interactive reports delivered via OBI report catalogs and dashboards
  • Perform analysis through interactive reports using customization, drill-down and drill-across functionality
  • Share customized dashboard analyses with other OBI users using bookmarks
  • Export analysis outputs to data file, Excel, PDF or PPT
  • Can run ad hoc analyses, but not edit them
Intermediate Ad Hoc User
  • Create analyses for themselves
  • Share analyses with other OBI users (report viewer and ad hoc)
  • Can schedule analyses to be run and emailed to other users
  • Intermediate Ad Hoc users inherit Report Viewer access.

If a user has been granted Report Viewer for multiple orgs/awards/projects/PI, to later add Ad Hoc, only one grant is needed for Ad Hoc to apply to all the previous grants.

  1. Enter an Org Name or 4-character Org Code in the search field.  An Organization Hierarchy for the specified organization at the lowest level  is displayed.
  2. Select the Org Name from the displayed list or select an Org Name at a higher level.

  1. Select limits for PTA or principal owner scope.  Options include:
All Projects and Awards
  • This option allows for reporting access to all projects and awards for the organization selected.
Specific Project(s) and/or Awards
  • Select from the displayed list of Projects/Tasks for the specified organization.
  • Select from the displayed list of Awards for the specified organization.

Projects, project-tasks and awards can only be granted at the scope of the project, project-task or award owning org (designated by a leaf in Authority Manager) and not at parent org levels.

Specific Award(s) Only
  • Select from the displayed list of Awards for the specified organization.

Awards can only be granted at the scope of the award owning org (designated by a leaf in Authority Manager) and not at parent org levels.

Specific Principal Owner(s)
  • Select from the displayed list of Principal Owners for the specified organization.

The grantee will be able to see all accounts owned by the principal owner regardless of the organization scope specified.

  1. Select one or more Data Access limits:
Data Access            Description
Basic Data
  • Labor schedules
  • Leave accrual and balance
  • Expense Requests and SU Credit Card transaction detail and amount
  • Employee details
  • PTA details
  • Approval workflow information

 

Timecard Data
  • Hours paid and worked
  • Timecard approval
  • Everything from Basic Data

Basic Data limits are inherited.

Salary Data
  • Earnings information ($$)
  • Vacation liability ($$)
  • Everything from Timecard Data
  • Everything from Basic Data

Timecard Data and Basic Data limits are inherited.

If you need to give somebody a grantable privilege, please make sure you choose each data access individually. Grantable privilege is not inherited; for example, a user with grantable privilege of Salary data will only be able to grant others with Salary data. They will not be able to grant someone with Basic or Timecard data privilege. Therefore, a grantor will only be able to grant others the data access which they have been granted with grantable privilege.

  1. Select one or more Subject Areas:
Subject Area             Description
Payroll and Labor
  • Payroll and labor adjustments, labor schedules, labor schedule vs. actual, timecard and leave balances
Funds and Expenditures
  • Expense Requests system transaction details and Stanford credit card transaction details
  • Consolidated expenditures (budget, actuals and commitments, iJournals)
  • Procure to Pay transaction detail reporting (e.g., purchase requisitions, purchase orders and invoice payments)
  • Revenue and Fund Management reporting (Beginning fund balance, receipts, transfers, expenses, ending and available balance reporting)

Reference Data and Inquiry Only
  • Project, task, and award attributes
  • Expenditure types and object codes
  • Org hierarchy
  • Fund configuration and authorization

 

  1. Select whether the person Can or Cannot or Can Only grant the privilege to others

If you need to give somebody a grantable privilege, please make sure you choose each data access individually. Grantable privilege is not inherited; for example, a user with grantable privilege of Salary data will only be able to grant others with Salary data. They will not be able to grant someone with Basic or Timecard data privilege. Therefore, a grantor will only be able to grant others the data access which they have been granted with grantable privilege.

  1. Select an Effective Start Date of today or up to 60 days in the  future
  2. Select an Expiration Date  if appropriate
  3. By default, privilege expires on the day of termination
  4. Enter Comments, if appropriate
  5. Click on Grant Authority

 

What Happens Next?
  • Reporting authority for OBI will be enabled after all prerequisites have been recorded as complete in STARS.
  • Every night, new authority assignments and changes to existing assignments are sent to OBI.
  • Reminder emails will be sent to the employee until the Confidentiality Agreement pre-requisite has been met.
  • If prerequisites are not cleared within 300 days the authority will become stuck and will need to be revoked and regranted to allow access once prerequisites are cleared.
  • To revoke or update authority grants, refer to Authority Manager.
Last Updated: Jun 20, 2021