Creating custom Payables Invoice Import Submission role

1) Login with user who has the IT security manager role to Fusion home page. Make sure the
ASE_WORKING_APP_STRIPE profile option user/site is set to fscm.
2) In navigator menu, select Security Console. Go to Roles tab. If ASE_WORKING_APP_STRIPE profile option is set
correctly, you should be Roles: fscm in the header.
3) Search for the Payables Invoice Import Submission role.

4) In the role dropdown menu, select Copy Role. Select the Copy top role option. Click Copy Role.
5) In Basic Information train stop, enter the custom role name, role code and description.

6) Click the Summary and Impact Report train stop, click Submit and Close to create the custom role.
7) Confirmation window is displayed.

8) Query the custom role and click Edit Role

 9) Click the Data Security Policies train stop. Select the Manage Payables Invoice policy and select Remove Data
Security Policy.

Verify the policy is removed.

10) Click the Summary and Impact Report train stop. Click Save and Close.
Creating custom Expense Export role

11) Search for the Expense Export role and click Copy Role. Select the Copy top role option. Click Copy Role. In
Basic Information train stop, enter the custom role name, role code an description. Click the Summary and
Impact Report train stop. Click Submit and Close to create the custom role.

12) Query the custom role and click Edit role. Click the Role Hierarchy train stop.
13) Right click on the Payables Import Submission role and select Delete.

14) Click Add Role. Search for the custom Payables Import Submission role.
15) Click Add Role Membership to assign the custom Payables Import Submission role to the custom Expense
Export role. Click the Summary and Impact Report train stop and click Save and Close.
Creating custom Expense Auditor application role

16) Search for the Expense Auditor application role and click Copy Role. Select the Copy top role option. Click Copy
Role. In Basic Information train stop, enter the custom role name, role code an description. Click the Summary
and Impact Report train stop. Click Submit and Close to create the custom role.

17) Query the custom role and edit role. Click the Role Hierarchy train stop. Remove the seeded Expense Export
role and assign the custom Expense Export role.
18) Click the Summary and Impact Report train stop and click Save and Close.
Creating custom Expense Auditor enterprise role

19) Search for the Expense Auditor enterprise role (EXM_ EXPENSE_ AUDITOR_ JOB) and click Copy Role. Select the
Copy top role option. Click Copy Role. In Basic Information train stop, enter the custom role name, role code an
description. Click the Summary and Impact Report train stop. Click Submit and Close to create the custom role.

20) Query the custom role and edit role. Go to Data Security Policies train stop.
 21) Click Create Data Security Policy. Enter Name = Grant AP BU, Database Resource = Business Unit, Data Set =
Select By Key, Actions = Manage Payables Invoice. Enter the BU ID of the BU you want to grant to the custom
role.

22) Click the Summary and Impact Report train stop and click Save and Close.

23) Query the custom role again and edit role. Click the Role Hierarchy train stop. Remove the seeded Expense
Auditor application role and assign the custom Expense Auditor application role. NOTE: It seems there is issue
in security console and the Role Hierarchy is showing blank for enterprise role.

For now, use APM to do this. Search for the custom enterprise role.
Open the role and go to Application Role Mapping tab.

In the fscm stripe, remove the seeded Expense Auditor application role and add the custom Expense Auditor
application role.
Now, you can assign the custom Expense Auditor enterprise role to the user which also has an AP data role. Make sure
the seeded Expense Auditor role is removed from the user. The user should not see all BUs in AP UI any more.