12/23/2015 Data Role and Data Access Set in Oracle Fusion Applications

LOGIN REGISTER

HOME TRAININGS FUSION R12

CONTRIBUTORS CONTACT US

Oracle Gold Partners, training schedule is listed here designed by Five Star Rated Oracle Press Authors &
Oracle ACE's.

DATA ROLE AND DATA ACCESS SEARCH

TRAININGS
SET IN ORACLE FUSION
APPLICATIONS
Search products
Details 

Written by Surinder Singh Search

Category: Fusion Financials

Published: 09 December 2014

Created: 09 December 2014

FULLY
Roles, Fusion Features Fusion Implementation Steps
VERIFIABLE
TESTIMONIALS
Fusion General Ledger

User Rating: 5 / 5

PLEASE RATE Vote 5   Rate

http://apps2fusion.com/oracle­fusion­online­training/fusion­applications/oracle­fusion­financials/fusion­financials­training/685­data­roles­data­access­set­in­fu… 1/13
12/23/2015 Data Role and Data Access Set in Oracle Fusion Applications

Like 1 f Share Tweet Share 1

Share 50

In this training article we will learn about system generated
Data  Roles  and  Data  Access  set  in  Oracle  Fusion
Applications  to  access  newly  created  Ledger  and  we  will
also  see  how  to  add  Data  Roles  and  Access  Set  to  the
user.  Let’s  first  understand  briefly  about  Data  Role  and  FUSION HCM C
Data Access Set­ IMPLEMENTATION TRAINING
Finally, a Self Paced Training
Data Roles made sense! The trainer   taug
perfect pace and the overall tra
A data role defines components of data within which a job  procedure w
is performed. The data role inherits the job role that  Read Full Testim
describes the job. For example, a data role entitles a user 
to perform a job in a business unit and data roles are  All Testimonial

implemented as job roles for a set of data. The data role 
inherits abstract or job roles and is granted data security 
privileges. Data roles carry the function security privileges 
APPS2FUSION
inherited from job roles and also the data security privilege  - EVENT LIST
granted on database objects and table rows.

<<  Dec 2015  >>

Let’s  understand  by  this  example­  an  accounts  payables 
 Mon  Tue  Wed  Thu  Fri  Sat  Sun 
specialist  in  the  UK  Business  Unit  may  be  assigned  the
data  role  Accounts  Payables  Specialist  ­  UK  Business     1   2   3   4   5
Unit. This data role inherits the job role Accounts Payables   7   8   9 10 11 12
Specialist  and  grants  access  to  transactions  in  the  UK
Business  Unit.  Data  roles  are  created  and  maintained 14 15 16 17 18 19
using  data  role  templates  in  the  Authorization  Policy 21 22 23 24 25 26
Manager (APM). 
28 29 30 31    

SEARCH ON
APPS2FUSION

Search ...

Search

http://apps2fusion.com/oracle­fusion­online­training/fusion­applications/oracle­fusion­financials/fusion­financials­training/685­data­roles­data­access­set­in­fu… 2/13
12/23/2015 Data Role and Data Access Set in Oracle Fusion Applications

ENQUIRE FOR
  TRAINING

Data Access Sets

Data access sets define a set of access privileges to one
or  more  Ledgers  or  Ledger  Sets.  The  information  on
Ledgers that are attached to data access sets are secured
by  function  security.  Users  must  have  access  to  the 
segment  values  associated  with  the  data  access  sets  to
access the corresponding GL account.

In  the  security  reference  implementation,  the  IT  Security

Manager  job  role  hierarchy  includes  the  Data  Access
Administration  Duty  role,  which  is  entitled  to  manage  data
access sets (the entitlement is Define General Ledger Data
Access  Set).  This  entitlement  provides  the  access
necessary to perform the Manage Data Access Sets task
in General Ledger.

Security in Oracle Fusion Applications is based on integrations
with Oracle Identity Management in Fusion Middleware, security
features in the database, and Governance, Risk, Compliance, and
Controls, additional resources in support of performing security
tasks include the following­

Authorization  Policy  Manager  (APM)  is  available  in

Oracle  Fusion  Applications  through  integration  with
Oracle  Identity  Management  (OIM).  Authorization
policy  management  involves  managing  duty  roles,
data role templates, and data security policies.  
http://apps2fusion.com/oracle­fusion­online­training/fusion­applications/oracle­fusion­financials/fusion­financials­training/685­data­roles­data­access­set­in­fu… 3/13
12/23/2015 Data Role and Data Access Set in Oracle Fusion Applications

Oracle  Identity  Management  (OIM)  is  available  in

Oracle  Fusion  Applications  through  integration  with Email *
Oracle Fusion Middleware and involves creating and
managing  user  identities,  creating  and  linking  user
accounts,  managing  user  access  control  through
user role assignment, managing enterprise roles, and
First Name *
managing  workflow  approvals  and  delegated
administration. 

Oracle  Fusion  Applications  is  certified  to  integrate Last Name *

with Applications Access Controls Governor (AACG)
in  the  Oracle  Governance,  Risk  and  Compliance
Controls (GRCC) suite to ensure effective Access & 
Segregation of Duties (SOD) Country *

 
Mobile *
Feature of Data Access Set­
091234 5678
Data Access Sets secure access to ledgers, ledger sets,
and  portions  of  Ledgers  using  primary  balancing  segment Training of your interest
values. If primary balancing segment values are assigned
to  Legal  Entity,  then  we  can  use  this  feature  to  secure 
access to specific Legal Entities.
Enter your inquiry
Secures  parent  or  detail  primary  balancing  segment
values.

Secures  the  specified  parent  value  as  well  as  all  its
descendents,  including  midlevel  parents  and  detail
values.
* required information
Requires all Ledgers assigned to the data access set
to share chart of accounts and accounting calendar. For security purposes, please typ
letters and numbers you see belo

When  a  Ledger  is  created,  a  data  access  set  for  that

Ledger  is  automatically  created,  giving  full  read  and  write
access to that Ledger. Data access sets are automatically 
created when we create a new Ledger set as well. We can 
also  manually  create  data  access  sets  to  give  read  only
access  or  partial  access  to  select  balancing  segment SUBMIT
values in the Ledger.

We can combine Ledger and Ledger Set assignments to a 
single  data  access  set  as  long  as  all  Ledgers  share  a
common  chart  of  accounts  and  calendar.  When  a  data 
access set is created, data roles are automatically created
for  that  data  access  set.  Following  five  data  roles  are
http://apps2fusion.com/oracle­fusion­online­training/fusion­applications/oracle­fusion­financials/fusion­financials­training/685­data­roles­data­access­set­in­fu… 4/13
12/23/2015 Data Role and Data Access Set in Oracle Fusion Applications

for  that  data  access  set.  Following  five  data  roles  are
generated  for  each  data  access  set,  one  for  each  of  the LOGIN
Oracle Fusion General Ledger roles­

Chief Financial Officer
USERNAME

Controller

General Accounting Manager
PASSWORD
General Accountant

Financial Analyst
REMEMBER ME

 
Log in
The data roles then must to be assigned to specific users
before they can use the data access set. Forgot your

As mentioned above, you will find Roles created for Chief password?
Financial Officer, Controller, General Accounting Manager,  Forgot your
general Accountant and Financial Analyst. username?
Create an
account

http://apps2fusion.com/oracle­fusion­online­training/fusion­applications/oracle­fusion­financials/fusion­financials­training/685­data­roles­data­access­set­in­fu… 5/13
12/23/2015 Data Role and Data Access Set in Oracle Fusion Applications

Full Ledger Access: Access  to  the  entire  ledger  or

ledger sets. For example, this could mean read only
access  to  the  entire  Ledger  or  both  read  and  write
access.

Primary Balancing Segment Value: Access one or 
more  primary  balancing  segment  values  for  that
Ledger.  We  can  specify  read  only,  read  and  write 
access,  or  a  combination  of  the  two  for  different 
primary  balancing  segment  values  for  different 
ledgers and ledger sets.

 Function and Data Security

This helps to secures features and data with privileges that
are mapped to roles. Access through the  Define Security
from  the  Setup  and  Maintenance  work  area  or  your
implementation project.

Use Oracle Identity Manager (OIM) to manage user 
and user­role assignments.

Use Authorization Policy Manager (APM) to 
manage data roles and duty roles.

http://apps2fusion.com/oracle­fusion­online­training/fusion­applications/oracle­fusion­financials/fusion­financials­training/685­data­roles­data­access­set­in­fu… 6/13
12/23/2015 Data Role and Data Access Set in Oracle Fusion Applications

Functions  and  data  are  inaccessible  to  users  unless  they

are  provisioned  with  the  roles  necessary  to  gain  access.
Function  Security  Consists  of  privileges  unconditionally
granted  to  a  role  and  used  to  control  access  toPage  or  a
specific  widget  or  a  functionality  within  a  page,  including
services, regions, and flows.

Data  Security  Consists  of  privileges  conditionally  granted

as  data  security  policies  carried  by  roles,  or  granted  as
Human  Capital  Management  (HCM)  security  profiles,  and
used to control access to data­

Within a business object such as a business unit.
  

Based on user profiles.
  

Based on privacy policies.
  

  For  example­  A  job  role  can  give  view  access  to  the
functions  needed  to  access  invoices,  but  a  data  role  that
inherits the job role gives limited view access to the invoice
data within a business unit, such as the data role Accounts
Payable Manager ­ UK which inherits the job role Accounts
Payable  Manager  for  performing  accounts  payable  duties
for the UK business unit only.

Assign  to  your  user  the  data  role  that  contains  the  data
access set your user needs with the job role that provides
the required functional access level.

Optionally, assign Segment Value Security Rules to 
data roles.

Assigned multiple data roles to a user, if needed.

How to assign Data Roles to User­

  A  user  needs  to  add  these  system  generated  Roles  to

their  User  in  Oracle  Identity  Manager  as  shown  below­
First of all search for your User in Oracle Identity Manager­

http://apps2fusion.com/oracle­fusion­online­training/fusion­applications/oracle­fusion­financials/fusion­financials­training/685­data­roles­data­access­set­in­fu… 7/13
12/23/2015 Data Role and Data Access Set in Oracle Fusion Applications

next step is 

and Finally­

After completing these steps now again log in with your 
user and you should be able to access Ledger or Ledger 
Sets you created­

http://apps2fusion.com/oracle­fusion­online­training/fusion­applications/oracle­fusion­financials/fusion­financials­training/685­data­roles­data­access­set­in­fu… 8/13
12/23/2015 Data Role and Data Access Set in Oracle Fusion Applications

SURINDER SINGH

 Prev Next 

ABOUT THE AUTHOR

SURINDER SINGH
Surinder is an Oracle EBusiness Suite expert, but lately
he has been busy unravelling the power of Oracle Fusion
Financials. He is one of the very few consultants in the
market that specialises in Oracle Fusion Financials.

MORE ARTICLES FROM THIS AUTHOR

Setups and Use of AP Accrual Accounting in Oracle
Apps
Accounting for Payables Transactions in Fusion
Applications
Creating Recurring Invoice in Oracle Fusion
Application
Cross Currency Payments in Oracle Fusion Payables
Fusion Payables- How to Generate Trial Balance

http://apps2fusion.com/oracle­fusion­online­training/fusion­applications/oracle­fusion­financials/fusion­financials­training/685­data­roles­data­access­set­in­fu… 9/13
12/23/2015 Data Role and Data Access Set in Oracle Fusion Applications

Report
Centralized Payments in Fusion Applications set up
Steps
An Introduction to Centralized Payments in Oracle
Fusion Applications
Oracle R12 Financial Modules new Features at a
Glance
Prede䇹馚ned Reports in Oracle Fusion Payables
Con䇹馚guring O숢轝erings Demonstration in Oracle
Fusion Applications
Con䇹馚guring Oracle GoldenGate to Integrate EBS
with Fusion Accounting Hub- Part 2
Oracle Fusion Applications-How it started
Con䇹馚guring Oracle GoldenGate to Integrate EBS
with Fusion Accounting Hub- Part 1
De䇹馚ne and Maintain Intercompany Processing
Rules in Fusion Application
Reporting Options at a Glance in Fusion Financials
Oracle Fusion Tax: Overview & New Features
Offline
Smart View Components and Smart View Panel in
Fusion Applications
Business Reasons for Chart of Account Mapping in
Oracle Apps
Fusion Co-existence Mapping in R12.2.4
Fusion General Ledger Prede䇹馚ned Reports

OVERALL RATING (0)

0 out of 5 stars

PEOPLE IN THIS CONVERSATION

COMMENTS (1)

http://apps2fusion.com/oracle­fusion­online­training/fusion­applications/oracle­fusion­financials/fusion­financials­training/685­data­roles­data­access­set­in­f… 10/13
12/23/2015 Data Role and Data Access Set in Oracle Fusion Applications

Sort by Oldest First / Sort by Latest First Subscribe: Email / RSS

GUEST - PRASUN about 5 months ago

Very Nice Thanks

0 Like Share Permalink

LOGIN TO POST A COMMENT

USERNAME

PASSWORD

REMEMBER ME
Login

Register · Forgot password

POST COMMENT AS A GUEST

NAME (REQUIRED):

EMAIL (REQUIRED):

WEBSITE:

          

Write your comment here...

Rate this article :

http://apps2fusion.com/oracle­fusion­online­training/fusion­applications/oracle­fusion­financials/fusion­financials­training/685­data­roles­data­access­set­in­f… 11/13
12/23/2015 Data Role and Data Access Set in Oracle Fusion Applications

I'm not a robot

reCAPTCHA
Privacy - Terms

SUBSCRIBE
Cancel Submit Comment

A AA

LATEST POPULAR ABOUT APPS2FUSION

ARTICLES ARTICLES
Apps2Fusion are passionate about training.
Advanced Subscribe
Training is our core business and we have been
Oracle to New
doing this for many many years. We thrive to meet
Database Oracle
expectations of our trainees and we are Oracle
12c Apps
Gold Partners. We work hard to advise trainees
Administration Articles on
with right career paths. We have published
Training this
various 䇹馚ve star rated Oracle Press Books each
Cloning of Website by
was best sellers in its category. We have helped
R12.2.4 and Email
many and could help you as well. 
User Basic
creation Concepts -
Upgrading List of
Oracle EBS useful
R12.2.0 to Oracle
R12.2.4 Apps

Oracle E- Articles

Business Forum - For

Suite Oracle
Architecture Apps

Oracle EBS Customization

R12.2 and

installation Extensions
OA
Framework
Tutorials
QUICK Training
MENU
http://apps2fusion.com/oracle­fusion­online­training/fusion­applications/oracle­fusion­financials/fusion­financials­training/685­data­roles­data­access­set­in­f… 12/13
12/23/2015 Data Role and Data Access Set in Oracle Fusion Applications

Email Alerts XML

for Our Publisher
Articles and Data

Follow us Template -

on twitter SQL Query

to develop
Join us on
BI
Facebook
Publisher
Self Paced Reports
Courses

OUR
COMPANY

Email Alerts
for Our
Articles

Follow us
on twitter

Join us on
Facebook

Self Paced
Courses

Copyright © Apps2Fusion 2015. Oracle Training Experts.

http://apps2fusion.com/oracle­fusion­online­training/fusion­applications/oracle­fusion­financials/fusion­financials­training/685­data­roles­data­access­set­in­f… 13/13