FND Responsibility Access – Oracle EBS SQL Report

Oracle E-Business Suite SQL report from the Enginatics Library powered by Blitz Report™.

Overview

Responsibilites and related data such as users, concurrent programs, menus, functions, forms, data access set and security profiles and associated ledgers and operating units. This report basically answers all system access related questions. It shows which users or responsibilities have acess to which functions, forms, concurrent programs, ledgers, operating units or inventory organizations.

Depending on parameter selection, this report shows for example:

responsibilities and related menus and request groups
responsibilities, menus, included forms, functions and their full menu navigation path
users and their assigned active responsibilities
users, assigned responsibilities and the concurrent programs they have access to
concurrent programs and the responsibilities that they can be run from
forms or functions and the responsibilities and users that can access them
responsibilities and navigation paths to access a certain form or function from a given user
operating units that a particular responsibility or user has access to through MOAC security profiles or profile option ‘MO: Operating Unit’

The parameters ‘User’, ‘Form’, ‘Function’ and ‘Concurrent Program’ are optional and can either be populated to filter records for a particular value only or entered with % to show all values or left blank to not show data related to that parameter. If the user parameter is left blank for example, then the report does not show any user names and shows information related to responsibility level only.

Example: To show all users having access to the user maintenance form, enter parameters as follows: User Name: % Form Name: FNDSCAUS

Menu exclusions (fnd_resp_functions) are considered: functions excluded directly (rule_type F) or through an excluded menu (rule_type M) are filtered out.

Report Parameters

Responsibility Name like, User Name like, Application, Access to Inventory Org, Access to Operating Unit, Access to Legal Entity, Access to Ledger, Concurrent Program Name like, Concurrent Progr. (all languages), Concurrent Program Short Name, Request Group, Menu Entry like, User Function Name like, Function Name, User Form Name like, Form Name, User Menu Name, Menu Name, Custom Application Responsibilities, Expand Multiple Operating Units

Oracle EBS Tables Used

fnd_form_functions_vl, fnd_form_vl, fnd_menu_entries_vl, fnd_menus_tl, gl_access_set_norm_assign, gl_ledger_set_norm_assign_v, gl_ledgers, hr_operating_units, xle_firstparty_information_v, per_security_profiles, per_organization_list, hr_all_organization_units_vl, fnd_user_resp_groups, fnd_user, per_all_people_f, gl_access_sets_v, fnd_profile_option_values, fnd_profile_options, fnd_application_vl

Report Categories

Enginatics, R12 only

Running This SQL Without Blitz Report

Some Oracle EBS SQL reports in this library require functions from the utility package xxen_util. Install it before running the SQL directly against your Oracle EBS database.

Download & Import Options

Resource	Link
Excel Example Output	FND Responsibility Access 19-Jul-2023 184210.xlsx
Blitz Report™ XML Import	FND_Responsibility_Access.xml
Full SQL on Enginatics	www.enginatics.com/reports/fnd-responsibility-access/

Executive Summary

The FND Responsibility Access report is the “Swiss Army Knife” of security reporting. It answers the question: “Who can do what?” by linking Users -> Responsibilities -> Menus -> Functions -> Forms.

Business Challenge

SoD Analysis: Identifying users who have access to conflicting functions (e.g., “Create Vendor” and “Pay Vendor”).
Access Review: Finding all users who can access a specific sensitive form (e.g., “Bank Accounts”).
Deep Dive: Tracing the full path from a User to a specific Function, including sub-menus.

The Solution

This Blitz Report performs a deep traversal:

User Access: Lists users and their responsibilities.
Menu Explosion: Explodes the menu tree to find every function accessible to that responsibility.
Context: Shows the Operating Units and Ledgers accessible to that user/responsibility combination.

Technical Architecture

The report joins FND_USER, FND_RESPONSIBILITY, FND_MENUS, and FND_FORM_FUNCTIONS. It uses recursive logic (or flattened tables) to traverse the menu hierarchy.

Parameters & Filtering

User Name: Analyze a specific user.
Function Name: Find everyone who can access this function.
Form Name: Find everyone who can open this form.
Access to Operating Unit: Find everyone who can transact in a specific OU.

Performance & Optimization

Heavy Report: Because it explodes the menu tree for every responsibility, this report can generate millions of rows if run without filters. Always filter by User, Responsibility, or Function.

FAQ

Q: Does it handle Menu Exclusions?
- A: The description notes that it may not fully account for menu exclusions in all versions, so verify critical findings manually.

FND Responsibility Access | Oracle EBS SQL Report

Responsibilites and related data such as users, concurrent programs, menus, functions, forms, data access set and security profiles and associated ledgers…