FusionSecurity - Day7 and 8

Oracle Fusion
Security
Day 8
4
Contents
Introduction to User accounts
Users and Role Provisioning
User accounts work around
Provisioning roles to users
Managing security
Managing security using OIM
Managing security using APM
Knowledge check
Questions on Security 2
We make experts - http://apps2fusion.com
Security Overview
WHO can do WHAT on

WHICH set of data?
3
Role Based Access Control
User – Charles Watson has three roles
Role – Human Resource Specialist

Role – Employee
Role – Line manager
4
Roles
 Job role
– Represents a job to which a user is assigned
– Human Resource Specialist
– Payroll Manager
– Inherits duty roles
 Abstract role
– Associated with a user irrespective of their job
– Employee
– Contingent worker
– Line manager
– Inherits duty roles
5
Function Security Privileges
 Individual permissions to access workareas, dashboards, taskflows,
pages, reports, batch programs, BI subject areas etc
 Also known as Entitlements
View Manager Hire Employee

Transaction
Dashboard
6
Data Security Privileges
 Secure access to data
 Secure access to actions and page regions
Manage Person Promote Worker

Phone Data Data
7
Duty Roles
 Represents a duty that is performed by somebody
 Inherited by job roles and abstract roles
 Not assigned to users
 Security privileges granted to duty roles
 Used as building blocks
Worker Promotion Employee Hire Duty

Duty
8
Function Security
9
Data Security
 Security Profiles
– Used to secure HCM data
– Not Reference Data Sets
 Data Role Templates
– Used to secure Reference Data Sets (SetIDs)
10
Data Security
 HCM users access HCM data via direct assignment to abstract roles and
data roles
 Security profiles are assigned to these roles
 Abstract roles
– Included in reference implementation
– Employee, contingent worker, line manager
– Data security is implicit: secured via user context
 Data roles
– Created by customers
– Inherit job roles
– Data security is explicit
– Example: Human Resource Specialist – Vision Operations
11
Data Security Role Inheritence
Human Resource
Specialist
Absence Worker
Users and Roles
Management Duty Administration
Processing Duty
Duty
Worker
Person HCM Document
Employment
Management Duty Management Duty
Maintenance Duty
12
Human Resource Human Resource

Vision Corporation Vision Services
Specialist – Vision Specialist – Vision
security profiles security profiles
Corporation Services
Human Resource
Specialist
Absence Worker
Users and Roles
Processing Duty
Duty
Worker
Person HCM Document
Employment
Maintenance Duty
13
Anna.morris David.east
Human Resource Human Resource

Vision Corporation Vision Services
Specialist – Vision Specialist – Vision
security profiles security profiles
Corporation Services
Human Resource
Specialist
Absence Worker
Users and Roles
Processing Duty
Duty
Worker
Person HCM Document
Employment
Maintenance Duty
14
Data Security
15
Data Security
16
Data Security
 Data Roles automatically created for combinations of Job Role and
Reference Data Set
– Each data role can access a single Reference Data Set
– Data roles are assigned to users
 Data Role Templates
– Contain rules for generation of Data Roles
– Delivered as part of Reference Implementation
– Managed and invoked via APM
 Create new Reference Data Set
– Invoke SetID Data Role Templates from APM
 Create new Job Role
– Add job role to Data Role Template if required and invoke Data Role
Template
17
Data Security – Data Role Templates
(Payroll SLA security)
 Data Roles automatically created for combinations of Job Role and Payroll
– Each data role can access SLA data for a single payroll
– Data roles are assigned to users
– Payroll SLA data roles generated for Payroll Manager in the reference
implementation
 Create new Payroll
– Invoke SetID Data Role Templates from APM
 Create new Job Role
– Add job role to Payroll Data Role Template if required and invoke Data
Role Template
18
Roles and Duty Roles
19
Job Roles, Duty Roles and Privileges
20
Job Roles, Duty Roles, Privileges and Data
Security Policies
21
Steps
 Create Abstract and Job Roles
 Create Duty Roles
 Assign Duty Roles to Job/Abstract Roles
22
Create Abstract and Job
Roles
 Create Role
23
XX_Employee Abstract role
24
XX_Employee
25
XX_Line Manager
26
XX_Line Manager
27
XX_PMP Human Resource Analyst
28
XX_PMP Human Resource Analyst
29
XX_PMP Human Resource Specialist
30
XX_PMP Human Resource Specialist
31
Create Duty Roles
In Authorization Policy Manager
Select hcm for the application and click on
New application role
32
XX_Performance management HR
Specialist Duty
33
XX_Performance Management HR
Specialist Duty
34
Specialist Duty
35
Specialist Duty
36
XX_ Performance Management HR
Specialist Duty : Authorization Policy
37
XX_Performance Management Line
Manager Duty
38
XX_ Performance Management Line
Manager Duty
39
XX Performance Management Line
Manager Duty
40
Manager Duty
41
Manager Duty
42
Manager Duty: Authorization Policy
43
Manager Duty: Authorization Policy: Data
Security
44
XX_Performance Management Worker
Duty
45
Duty
46
Duty
47
XX_ Performance Management Worker
Duty
48
XX Performance Management Worker
Duty
49
Duty Authorization Policy
50
XX Performance Management Worker
Duty
Authorization Policy: Data Security
51
Assign Duty Roles to
Job/Abstract Roles
 In Authorization Policy Manager:
 Edit
the Job/Abstract Roles (External
Roles in APM)
52
XX PMP Human Resource Specialist
53
54
55
56
XX Line Manager
57
XX Line Manager
58
XX Line Manager
59
XX Line Manager
60
XX Employee
61
XX PMP Human Resource Analyst
62
63
64
65
66

FusionSecurity - Day7 and 8

Uploaded by

Copyright:

Available Formats

FusionSecurity - Day7 and 8

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

FusionSecurity - Day7 and 8

Uploaded by

Copyright:

Available Formats

Oracle Fusion

Users and Role Provisioning

User accounts work around

Provisioning roles to users

Managing security using OIM

Managing security using APM

WHO can do WHAT on

User – Charles Watson has three roles

Role – Human Resource Specialist

View Manager Hire Employee

Manage Person Promote Worker

Worker Promotion Employee Hire Duty

Human Resource Human Resource

Human Resource Human Resource

You might also like