Oracle Database Account

Sentinel server requires various PeopleSoft tables for Security, Reporting and Analytics .

Each PeopleSoft environment should provide Oracle Database account for Sentinel. The easiest way is provide SYSADM account for any development environments.

Production environment should have dedicated sentinel account with fine grained access.

Production Account

For example, account for Sentinel will have name - snt_user

Create it user with:

CREATE USER snt_user identified by "YourStrongPassword";

Grant ability to connect to database:

GRANT CREATE SESSION to snt_user;
GRANT ALTER SESSION to snt_user;

Read Access

Login as PSADMIN user and grant read access to all tables and views:

GRANT SELECT_CATALOG_ROLE to snt_user;

GRANT SELECT ON SYSADM.PSTREENODE TO snt_user;
GRANT SELECT ON SYSADM.PS_ROLEXLATOPR TO snt_user;
GRANT SELECT ON SYSADM.PSVERSION TO snt_user;
GRANT SELECT ON SYSADM.PSOPERATION TO snt_user;
GRANT SELECT ON SYSADM.PSPRSMHPASGPGLT TO snt_user;
GRANT SELECT ON SYSADM.PSRECDEFN TO snt_user;
GRANT SELECT ON SYSADM.PSPGEACCESSDESC TO snt_user;
GRANT SELECT ON SYSADM.PS_EOCC_HDR_EXCROL TO snt_user;
GRANT SELECT ON SYSADM.PSPNLGROUP TO snt_user;
GRANT SELECT ON SYSADM.PSAUTHSIGNON TO snt_user;
GRANT SELECT ON SYSADM.PSAUTHBUSCOMP TO snt_user;
GRANT SELECT ON SYSADM.PSMENUITEM TO snt_user;
GRANT SELECT ON SYSADM.PSUSEREMAIL TO snt_user;
GRANT SELECT ON SYSADM.PSACCESSPROFILE TO snt_user;
GRANT SELECT ON SYSADM.PS_SCRTY_QUERY TO snt_user;
GRANT SELECT ON SYSADM.PSROLECLASS TO snt_user;
GRANT SELECT ON SYSADM.PSPNLFIELD TO snt_user;
GRANT SELECT ON SYSADM.PSPRSMDEFN TO snt_user;
GRANT SELECT ON SYSADM.PS_PRCSDEFNPNL TO snt_user;
GRANT SELECT ON SYSADM.PS_PRCSJOBGRP TO snt_user;
GRANT SELECT ON SYSADM.PSDBFIELD TO snt_user;
GRANT SELECT ON SYSADM.PSQRYACCLSTRECS TO snt_user;
GRANT SELECT ON SYSADM.PSRECFIELDDB TO snt_user;
GRANT SELECT ON SYSADM.PSRECFIELD TO snt_user;
GRANT SELECT ON SYSADM.PSOPRALIAS TO snt_user;
GRANT SELECT ON SYSADM.PSPNLGRPDEFN TO snt_user;
GRANT SELECT ON SYSADM.PSOPRDEFN TO snt_user;
GRANT SELECT ON SYSADM.PS_EOCC_CONFIG_HDR TO snt_user;
GRANT SELECT ON SYSADM.PSBCDEFN TO snt_user;
GRANT SELECT ON SYSADM.PS_EOCC_EX_USR_LST TO snt_user;
GRANT SELECT ON SYSADM.PSPRSMSYSATTRVL TO snt_user;
GRANT SELECT ON SYSADM.PS_INSTALLATION_HR TO snt_user;
GRANT SELECT ON SYSADM.PSSTATUS TO snt_user;
GRANT SELECT ON SYSADM.PSAUTHWS TO snt_user;
GRANT SELECT ON SYSADM.PS_PRCSDEFNGRP TO snt_user;
GRANT SELECT ON SYSADM.PSROLEDEFN TO snt_user;
GRANT SELECT ON SYSADM.PSQRYDEFN TO snt_user;
GRANT SELECT ON SYSADM.PSROLEUSER TO snt_user;
GRANT SELECT ON SYSADM.PS_EOCC_USER_LST TO snt_user;
GRANT SELECT ON SYSADM.PSPRSMPERM TO snt_user;
GRANT SELECT ON SYSADM.PSAUTHITEM TO snt_user;
GRANT SELECT ON SYSADM.PSCLASSDEFN TO snt_user;
GRANT SELECT ON SYSADM.PSRELEASE TO snt_user;
GRANT SELECT ON SYSADM.PSPTSCRTY_ADS_P TO snt_user;
GRANT SELECT ON SYSADM.PS_MAINTENANCE_LOG TO snt_user;
GRANT SELECT ON SYSADM.PSPCMPROG TO snt_user;
GRANT SELECT ON SYSADM.PSPTPN_MSG_TBL TO snt_user;
GRANT SELECT ON SYSADM.PSMENUDEFN TO snt_user;
GRANT SELECT ON SYSADM.PS_SCRTY_ACC_GRP TO snt_user;
GRANT SELECT ON SYSADM.PS_JOB TO snt_user;
GRANT SELECT ON SYSADM.PSAUTHPRCS TO snt_user;
GRANT SELECT ON SYSADM.PSQRYFIELD TO snt_user;
GRANT SELECT ON SYSADM.PSPRCSPRFL TO snt_user;
GRANT SELECT ON SYSADM.PSUSERATTR TO snt_user;
GRANT SELECT ON SYSADM.PS_ARCH_SECURITY TO snt_user;
GRANT SELECT ON SYSADM.PSROLECANGRANT TO snt_user;

Tables specific to HRMS systems

GRANT SELECT ON SYSADM.PS_SCRTY_TBL_DEPT TO snt_user;

Write Access

Sentinel can simplify access changes for Users, Roles and Permission Lists. To be able to provide such functionality write access is required to following tables:

GRANT SELECT, INSERT, UPDATE, DELETE ON PS_ARCH_SECURITY TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PS_ROLEXLATOPR   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PS_SCRTY_QUERY   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSAUTHBUSCOMP    TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSAUTHITEM       TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSAUTHPRCS       TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSAUTHSIGNON     TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSAUTHWS         TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSCLASSDEFN      TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSOPRALIAS       TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSOPRDEFN        TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSPRCSPRFL       TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSPRSMPERM       TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSPTSCRTY_ADS_P  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSROLECLASS      TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSROLEDEFN       TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSROLEUSER       TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSUSERATTR       TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSUSEREMAIL      TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON PSVERSION        TO snt_user ; 

Please note, these tables are subject to change based on current/feature Sentinel functionality. Check environment build log for any access errors.

Tables specific to HRMS systems

GRANT SELECT, INSERT, UPDATE, DELETE ON PS_HCSCM_AUTHROLE  TO snt_user ; 
GRANT SELECT, INSERT, UPDATE, DELETE ON PS_INSTALLATION_HR TO snt_user ; 

SACR security related tables for Campus Solutions only

GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_OPR_COMM_SPDKEY  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_OPR_DEF_TBL_CS   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_OPR_GRP_3C_TBL.  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_OPR_SPDKEY_FUNC  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SAA_SCRTY_AARPT  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SAD_TEST_SCTY    TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCC_GE_SCRTY     TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCC_SCRTY_RLCAT  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCC_SL_TRN_SCTY  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCC_STY_TBL_CMP  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCCPU_SRTY_TBL   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCRTY_ADM_ACTN   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCRTY_APPL_CTR   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCRTY_PROG_ACTN  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCRTY_RECR_CTR   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCRTY_TBL_ACAD   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCRTY_TBL_CAR    TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCRTY_TBL_INST   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCRTY_TBL_MLSTN  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCRTY_TBL_PLAN   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCRTY_TBL_PROG   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCRTY_TBL_SRVC   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCRTY_TBL_STGP   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SCRTY_TSCRPT     TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SEC_CC_OPR       TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SEC_CSHOFF_OPR   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SEC_ISET_OPR     TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SEC_ITEM_OPDATA  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SEC_ITEM_SU_OPR  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SEC_ORIGIN_OPR   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SEC_SETID_OPR    TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SEC_UNITSF_OPR   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SEV_PRG_SP_SCTY  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SEV_SCHLCD_SCTY  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SSR_AIR_OPRSCTY  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SSR_ANID_SCRTY   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SSR_APT_ACT_SCR  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SSR_SCRTY_EXAM   TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SSR_SCRTY_GRSTA  TO snt_user ;
GRANT SELECT, INSERT, UPDATE, DELETE ON  PS_SSR_SCRTY_TSRPT  TO snt_user ;

Job data

Sentinel uses job source query which gathers main job information for each employee. Settings located in Admin / Settings / Job Source in your sentinel installation. By default this query fetching data from HRMS environment. Based on organization needs, query can be customised to use different tables and any type of environment.

Access to these tables should be granted for default query in HRMS environment.

GRANT SELECT ON PS_CURRENT_JOB TO snt_user ;
GRANT SELECT ON PS_BUSUNIT_HR_VW TO snt_user ;
GRANT SELECT ON PS_REG_REGION_TBL TO snt_user ;
GRANT SELECT ON PS_NAMES TO snt_user ;
GRANT SELECT ON PS_DEPT_TBL TO snt_user ;
GRANT SELECT ON PS_JOBCODE_TBL TO snt_user ;
GRANT SELECT ON PS_POSITION_DATA TO snt_user ;
GRANT SELECT ON PS_COMPANY_TBL TO snt_user ;
GRANT SELECT ON PS_LOCATION_VW TO snt_user ;
GRANT SELECT ON PS_EMAIL_ADDRESSES TO snt_user ;

Verify Access

To verify that the snt_user has been granted permission for the tables by querying the "DBA_TAB_PRIVS" data dictionary view. Use the following SQL query to display the permissions granted to snt_user for the tables:

SELECT owner, table_name, grantee, privilege
FROM dba_tab_privs
WHERE owner = 'SYSADM' AND grantee = 'snt_user';