Overview of the Security Console in Oracle Fusion Applications

What is the Security Console?

Use the Security Console to

1. Implement, customize and manage security
2. Create and Edit Custom roles
3. Create and Manage User Accounts

Access the Security Console through the Welcome Springboard > Navigator Menu > Tools

Functional Security Overview

Job and Duty Roles grant access to functionality:

• A Duty Role grants access to privileges required to complete a specific task, or a set of related tasks.
• A Job role combines duty roles required to grant access to a broad range of tasks.
• You can assign job roles to users. In combination, the job roles assigned to a person encompass all that he or she is hired to do.
• You cannot assign duty roles directly to users. A User is granted duty role indirectly as components of job roles.
• You work with Risk Management roles in the Security Console.

Seeded Roles have the Prefix of "ORA" in their Codes. These cannot be modified but can only be duplicated. In the below screenshot we see two entries for Accounts Payables Manager, but one of them is a seeded Role and the other is a Customized Role:

Roles can also be viewed Graphically:

Editing a Role

1. Function Security Policies
2. Data Security Policies allow a role to work with a specific Business Unit or a Ledger
3. Role Hierarchy 
4. Segregation of Duties
5. Users. Directly Assign the role to a specific User

Role Administration:

1. Set Role Preferences such as Prefix for Copied Role Name and Code
2. Copy Role Status for copied seeded Roles
3. Bridge for Active Directory

Role-Assignment Strategies

More than one mapping of duty roles to job roles may correctly grant functional access to a user.

1. You may create a single job role for a given user. For it, you would select all the duty roles the user needs.
2. You may assign multiple job roles to a given user. Each would contain a subset of the duty roles the user requires.

The second approach is recommended because it gives greater flexibility. Each job role remains available for assignment to other users in varying combinations with other job roles.

One strategy is to use Role Provisioning Rules to automatically assign roles to users based on a criteria. More information can be found in another article: Manage Role Provisioning Rules in Oracle Fusion Applications.

For more full-detailed Tutorials and Tips, check out #TheOracleProdigy at https://lifeofanoracleprodigy.blogspot.com/

Follow The Oracle Prodigy on Facebook (https://www.facebook.com/theOracleProdigy/) and Twitter (https://twitter.com/D_OracleProdigy)