R12 Multi Org Access Control Concept

MOAC : From Multi-Org.To Multi-Access

Introduction
Multi-Org architecture was first introduced in Oracle Applications Release
10.6. Its primary objective was to secure data from unauthorized access
by individual in different Operating Unit in enterprise. Although security by
Operating Units has been widely used as a reliable method to protect from
unauthorized access to information, many customers have requested to
increase flexibility to enable user to access one or more Operating Units
per user responsibility. Multi-Org Access Control feature allows reduction
in operating costs, but more importantly, it lays a more flexible software
foundation to allow Oracle Applications to support complex business model
such as Shared Services without compromising data security.

Access Control
The Multi-Org Access Control feature, also known as "Security by
Operating Unit", will enable users to access to secured data in one or more
Operating Units within one responsibility. The feature uses Security Profile
concept introduced in Release 11i Oracle Human Resources Management
System, which allows system administrator to predefine the scope of
access privilege as a profile option. A security profile may be defined in
hierarchical or listing mode, which may consist one or more Operating
Units.

A profile option, "MO: Security Profile", is used to associate predefined

security profile to a user responsibility.

The following two process flows illustrate current and new models for
defining Multi-Org.
Select Operating Unit

With the ability to access multiple Multi-Org Operating Units from a single
application responsibility, users are able to enter setup and transaction data
and run concurrent programs for multiple Operating Units without having to
switch the responsibility. Except in a few cases, all Multi-Org enabled
setup and transaction user interface will have "Operating Unit" field. Users
will be able to select the Operating Unit from a list of values assigned to the
user via the security profile and responsibility. Operating Unit context can
also be defaulted or derived from other operating unit sensitive attribute.
Detail on these variations is covered in subsequent sections.

Creating the Security Profile :

Use the screen below to create a security profile:
Run Security List Maintenance Program
This concurrent program must be run from the Standard Report Submission screen after creation of
security profile. It populates the PER_ORGANIZATION_LIST table with the list of organizations included
in the security profile. The organizations included in the "View All" security profiles are not stored in this
table.

The "Security List Maintenance Program" could be preferably run for one named security profile to
prevent disturbing other security profile setup.

Assign MO: Security Profile to Application Responsibility

The last step is to assign a security profile to user responsibility via System Profile Values window. "MO:
Security Profile" can be set at Site and Responsibility level.
MOAC Benefits..

Multi-Org Access Control feature allows you to enter, process data and generate reports
from a single responsibility

This is achieved by providing the Operating Unit field on the forms/pages and while
running the concurrent processes

To Set this feature you need to define the security profile containing operating units and
set it at MO: Security Profile

You can default the Operating Unit on forms/pages by setting the MO: Default Operating
Unit profile

What are the new changes from Multi Organization(Multi Org) to Multiple Organization
Access Control.

As discussed above, security Profiles for data security

o MO: Security Profile

o List of operating units for a responsibility

 OU field on UI

o all transactions

o setup data specific to OU, like transaction type

Enhanced Multi-Org Reporting and Processing

Ledger/Ledger Set parameter on accounting reports and processes

OU parameter on other standard reports and processes

o For example: submit the Payables Open Interface Import w/OU param null to
import all records across all OUs
Multi - Org Concept in Oracle Apps R12

Multi-Org in simple term means the implementation of

multiple business units (or Organization) under a single
installation of Oracle Applications. The concept of Multi-Org will
manage the operations of an enterprise which has got
subsidiaries across globe under a single oracle apps window,
taking appropriate care of data security and data maintenance.
Below are some of the features of multiple organization
functionality.

Any number of Business Units in an Enterprise can be

supported within a single installation of Oracle Application

User can access the data corresponding to and limited to the

operating unit

Reporting can be managed at different organization levels

like, Business Group, Ledger, Operating unit etc

Transactions like Procurement, Receiving, Selling, Shipping

Etc. with the same Party Can be Performed through Different
Organization and can be managed internally through inter
company postings
To achieve the new objective, Oracle has introduced new functionality called Multi-Org
Access Control (MOAC) in release 12. Following are the set up steps needs to follow for
implementing the MOAC architecture for a particular application

Multi Org Setup Steps in R12

1. Define Location

Open HRMS Manager Responsibility and navigate to Work Structure Location

Define your location Specific Details (BG Address and time zone) for your Business Group in
Address Details tab and Shipping details in Shipping Details tab as below.

Save the Changes

Following table will hold location details
HR_LOCATIONS_ALL

2. Define Business Group

Open HRMS Manger responsibility and navigate to

Work StructureOrganizationDescription

Enter the business group name and assign the location created in the previous step and
save the changes

Select the LOV as business group under the Organization Classification block

Select Business Group from the LOV and check Enabled check box for the business group
name and save changes
Now click on Others button and select the Business Group info from the additional window
and click OK, then another window will get opened with name Additional Organizations
Information like below

Press TAB and enter the mandatory details like below

Click OK Button, then you will be prompted to save the changes. Press on YES button. The
details will get saved.
Following Table will hold business group information
HR_ALL_ORGANIZATION_UNIT

3. Create Legal Entity

As per the structure defined, we have to create the one legal entity for AU operation.
Switch the responsibility to General Ledger and navigate to the following
SetupFinancialsAccounting Setup ManagerAccounting Setups
In Release R12, the legal entity setup is a part of accounting setup.
Press button Create Legal Entity and enter the Details

Click on Create New Address to create the new address

Click APPLY to save the changes.

Legal Entity details will be available in the following table

XLE_LE_OU_LEDGER_V
4. Define Ledger

Navigate to Accounting Setup Manager and define the New Ledger for the Legal Entity
created

Ledger Details Will be available in the Following table

GL_LEDGERS

5. Create and assign Operating units to Legal Entities to Ledger

In this step we will assign operating unit to Legal Entity. This will be defining from General
Ledger responsibility

Navigate to Setup > Financials > Accounting Setup Manager > Accounting Setups
In the Ledger Definition window, enter the Ledger name and press GO button. Once the
search finishes and resulted with the Ledger name, Click on Update Accounting Options
button

Then Assign the Legal Entity to the ledger by clicking Add Legal Entity button

Search for the legal entity created in our previous step and click on apply button to save the
changes. Now the legal Entity is assigned to Ledger
Now click on Update button next to the operating unit setup option

Click on Add operating unit

Enter the details. Assign the business group and legal entity created from the above steps to
the operating unit and click on apply button
After completing all ledger option press Complete button to complete the accounting setup

6. Create Inventory Information

Switch to Human Resource responsibility and Navigate to the following

Work Structure OrganizationDescription
Click on New Button to create the new Inventory Organization

From the Organization Classifications Frame, select the option Inventory Organization from
the LOV.

Press OK to save the Details

No click on Others button and select Accounting Information option. A small window will
open, Press TAB to enter the details in this window
Assign the following to the inventory organization we have created in our previous steps

Primary Ledger
Legal Entity
Operating Unit

Click OK and Click Yes to save the changes

Again Click Others button and select the Inventory Information from the list
Then add all inventory details and save the changes.

Once the setup is done, run the following reports/programs to use the operating unit we
created

In order to use the operating unit, run the following program and it should be run for all the
new operating unit structure

Switch the responsibility to System Administrator

Program :- Replicate Seed Data
Parameter: - <Operating Unit>

Run the following program

Multi-Org Setup Validation Report

Now the operating units and other related setups are ready to use. Now we have to think
how we can enable the multiple organization can be enabled from a single responsibility.

Enabling Multi Org Access Control (MOAC)

MOAC is implemented in R12 to allow the users to submit requests and access data of
different operating units in a single responsibility. This functionality can be done by setting
the SECURITY PROFILES under HRMS module

There are 2 security profiles:

SECURITY PROFILE: is used for the selection of operating units from the same
business group

GLOBAL SECURITY PROFILE: is used for the selection of operating units from the
different business group

Set up of Multi-Org Access Control:

Setup Security Profile in HRMS

Switch the responsibility to Human resource

Navigate to the following

Security Profile

Select the name for the profile and attach the business group created

In order to have access to the security profile we created, we need to create a responsibility
and assign this profile option to the responsibility

Switch to System Administrator responsibility and navigate to the following

SecurityResponsibilityDefine

Once the responsibility is defined, assign the new security profile option to the responsibility
by navigating the following

Profile System
This is it!!!

We have done with the setup of Multi-Org. This is a key functionality in Oracle R12 which is
serving as the stepping stone to Oracle Multi-Org implementation.
Following SQL query can give the relation between Ledger, Legal entity and Operating Units
in Oracle Apps R12

SELECT hrl.country, hroutl_bg.NAME bg, hroutl_bg.organization_id,

lep.legal_entity_id, lep.NAME legal_entity,
hroutl_ou.NAME ou_name, hroutl_ou.organization_id org_id,
hrl.location_id,
hrl.location_code,
glev.FLEX_SEGMENT_VALUE
FROM xle_entity_profiles lep,
xle_registrations reg,
hr_locations_all hrl,
hz_parties hzp,
fnd_territories_vl ter,
hr_operating_units hro,
hr_all_organization_units_tl hroutl_bg,
hr_all_organization_units_tl hroutl_ou,
hr_organization_units gloperatingunitseo,
gl_legal_entities_bsvs glev
WHERE lep.transacting_entity_flag = 'Y'
AND lep.party_id = hzp.party_id
AND lep.legal_entity_id = reg.source_id
AND reg.source_table = 'XLE_ENTITY_PROFILES'
AND hrl.location_id = reg.location_id
AND reg.identifying_flag = 'Y'
AND ter.territory_code = hrl.country
AND lep.legal_entity_id = hro.default_legal_context_id
AND gloperatingunitseo.organization_id = hro.organization_id
AND hroutl_bg.organization_id = hro.business_group_id
AND hroutl_ou.organization_id = hro.organization_id
AND glev.legal_entity_id = lep.legal_entity_id
Understanding Multi-Organization
Structure in EBS
In order to allow use of the system by multiple business units, accommodating differing
requirements for functional currencies, accounting structures and security, whilst at the same
time ensuring a central core design Oracle provides functionality known as "Multiple
Organizations" in short is called " multi-Org".This allows different business units to have their
own view of the applications, in particular for the financials AP ( Payables), AR ( Receivables),
FA (Fixed Assets), CE (Case Management) and INV ( Inventory).

Multi-Org is an important feature of Oracle Applications for several reasons:

Allows multiple sets of books and multiple legal entities to be configured and to operate
in the same instance

Provides support for data security between business units within a single applications
installation

Permits users to sell and ship products from different legal entities (in different sets of
books) with automatic intercompany accounting

Supports internal requisitions and purchasing/receiving products from different inventory

organizations (within the same set of books)

Enables an enterprise to be housed in one database instance of Oracle, spanning multiple

countries, currencies, and legal entities without a reduction in response times
(architecture-related)

Multiple Organizations Reporting enhances the reporting capabilities of Oracle

Applications products by allowing you to report at the:Set of Books level, Legal entity
level or Operating unit level
Multiple Organization in Oracle Applications depends primarily on defining your organizational
structure in the multi-level hierarchy used by Oracle Applications. The levels are:

Business groups

Accounting sets of books

Legal entities

Operating units]

Inventory organizations

Business Groups: Oracle Applications secures human resources information, including

organization definition, by business group. At least one Business Group will be required for
every country since the employee legislation is specific for each country and employee profile is
set up at the Business Group level. Security access to the sensitive Human Resources data is
secured at the highest level at the Business Group. In short Business Group partitions Human
Resources information in a multi-organization structure. Organization Structures and
Organization Hierarchy is defined within the Business Group.

Multiple sets of books can share the same business group if they share the same business group
attributes, including HR flex-field structures (Grade, positions flex-fields etc).

Accounting sets of books: A General Ledger concept for having separate financial reporting
entities for which chart of accounts, calendar, or functional currency differs. In addition for
scalability and ensuring independent numbering system for all the accounting transactions as
well as the ability to open and close each of the legal entities period independently a separate set
of books will be configured for each legal entity.

Legal entities: An organization that represents a legal company for which you prepare fiscal or
tax reports. You assign tax identifiers and other relevant legal company information to this entity.

Operating units: An organization that partitions and uses data for Payables, Purchasing, Order
Management, Cash Management, Fixed Assets and Receivables. Operating Units allow for
configuration of the Oracle Applications across Multiple Business Groups using a single
installation of the software.

Inventory organizations: An organization that tracks inventory transactions and balances,

and/or that manufactures or distributes products or components. Segregate Item data objects for
Inventory, Purchasing, Order Entry, and the Manufacturing Applications (Organization_Id).

Examples could be manufacturing plants, warehouses, distribution centers, and sales offices

The following applications secure information by inventory organization: Oracle Inventory, Bills
of Material, Engineering, Work in Process, Master Scheduling/MRP, Capacity, and Purchasing
receiving functions. To run any of these applications, you must choose an organization that has
been classified as an inventory organization.

HR Organization
Internal Departments to which Employees are Assigned.

Asset Organizations
An asset organization is an organization that allows you to perform assetrelated activities for
a specific Oracle Assets corporate depreciation book. Oracle Assets uses only organizations
designated as asset organizations