Business Role Groups & Business User Groups

[Expert]

Maintain Business Role Groups and Maintain Business User Groups.

I don't see any link between the 2 apps.

Is there someone who use them and can explain how the 2 apps work ? And if they could work as we want.

[Expert · Accepted solution]

Having said that one is to group users and another is to group the roles. There are different purposes for the two apps. With the Maintain Business User Groups app you can create user groups for your users, to give you an example from real time - an org might want to group all the Account Payable related users in one group for better sorting and identification purpose. One can add or remove users from the groups during the lifecycle of the business users in the company and it provides ease in handling of business users. So usually a Line of Business or job family is where this might be useful. Another example you see would be for instance to have Procurement user group inside which you can have all the business users working in Procurement area including approvers, sourcing manager and so on... This app also helps you for authorization management in case of grouping for the users and naturally the groups can be transported/exported-uploaded between your Dev-Test-Prod as per your identity design.

For the Maintain Business Role Groups, it is around the same tone but now the classification is from a business role point of view. So taking the same example from above I see this as a subclassification from the user groups, where probably you are grouping 4 approvers, 3 purchasers etc. for different sourcing at plants level in the Procurement area and similarly in different business areas . Of course the same capabilities in terms of segregation, handling, transports is applicable to business roles groups as well.

In general both the options are for better segregation, management and handling of grouping between the users and the roles. this totally depends on how the user personas are groups logically in the company and how they would like to be grouped in this new implementation. Usually this also gives an option to redesign the user management strategy in terms of defining the roles and responsibilities in the company for business processes. This usually helps to impose some mass level management at user or role level for users in bulk.

One use case is also in many cases for audit related purposes, its required to pull information on specific business functions in the company where you would need to exports the list of users or impacted roles for audit related concerns. These apps will help and ease the audit management and segregation of duties at a manual level in the system.

[Adiyaraja_AK · Accepted solution]

Hi, At the end, what is the use of this group, i really don't get it. Can we assign this role group to user ? No And when you assign roles to user manually, there you can't even see this role group to filter. Then why we need to group them?

[jim_boyden1 · Accepted solution]

I'm really not sure how this qualifies as a 'Solution'. Sure, you can add Business Roles to a Business Role Group. And then what? You cannot assign that role group to a User. You can add Business Users to a Business User Group. And then what? You cannot assign roles to that User Group. Furthermore, you cannot assign Role Groups to User Groups, so like the OP said, I'm not sure what purpose these functions actually serve. The statement that this 'solution' provides ease of maintenance makes no sense if you can't maintain anything apart from the group membership. If the purpose was just to add a 'tag' to the user for ease if identification, then just add a field to the user record. I sense that there is probably a roadmap for these functions and it just hasn't arrived yet.