PER Security Profiles

Description:

Security profiles and operating units that they give access to.

Parameters

Security Profile

Used tables

hr_all_organization_units_vl, per_security_profiles, per_organization_list, hr_operating_units, hr_locations_all, fnd_territories_vl

Dependencies

If you would like to try one of these Oracle EBS SQLs without having Blitz Report installed, note that some of the reports require functions from utility package xxen_util.

Example Report

None

Report SQL

www.enginatics.com/reports/per-security-profiles/

Blitz Report™ import options

PER_Security_Profiles.xml

Case Study & Technical Analysis: PER Security Profiles Report

Executive Summary

The PER Security Profiles report is a crucial HR security and audit tool within Oracle E-Business Suite. It provides a comprehensive listing of all defined security profiles and, critically, details which operating units and organizations these profiles grant access to. This report is indispensable for HR system administrators, security officers, and auditors to manage and verify access to employee records, ensure compliance with data privacy regulations, and maintain a robust and auditable HR security framework.

Business Challenge

Controlling who can view and manage employee data is a fundamental requirement for HR and a major challenge in a complex ERP environment. Organizations often struggle with:

Granular Access Control: Oracle HR allows for highly granular security down to individual employees, but understanding the cumulative effect of these settings is complex.
Ensuring Data Privacy: Compliance with data privacy laws (e.g., GDPR, CCPA) requires clear visibility into what employee data users can access. Misconfigured security can lead to unauthorized data exposure.
Auditing Security Settings: Regularly auditing HR security profiles to ensure they align with job roles and responsibilities is a critical but often manual and complex task.
Troubleshooting Access Issues: When users report that they cannot see certain employees or organizations, diagnosing the underlying security profile configuration is a key troubleshooting step. A consolidated report accelerates this process.

The Solution

This report offers a clear, consolidated, and auditable view of security profile configurations, transforming how HR manages and verifies data access.

Centralized Security Overview: It presents a detailed list of all security profiles, showing precisely which operating units and organizations each profile allows access to. This provides a holistic understanding of the data access landscape.
Enhanced Compliance Audits: Security officers can use this report to quickly verify that security profiles are correctly configured, ensuring that sensitive employee data is protected and access is aligned with regulatory requirements and internal policies.
Streamlined Access Review: The report facilitates regular reviews of HR security, allowing administrators to identify and rectify any inappropriate or excessive data access, thereby mitigating security risks and improving data governance.
Accelerated Troubleshooting: When an HR user encounters access issues, this report provides immediate insight into the security profile assigned to their responsibility, helping to quickly pinpoint and resolve the problem.

Technical Architecture (High Level)

The report queries Oracle HR’s security definition tables and links them to the organizational structure.

Primary Tables Involved:
- per_security_profiles (the central table defining each security profile).
- per_organization_list (a table that often stores the organizations included in a security profile).
- hr_operating_units (for details of the operating units).
- hr_all_organization_units_vl (for the names and details of organizations).
Logical Relationships: The report selects all security profiles from per_security_profiles. It then determines the operating units and organizations that each profile grants access to, typically by querying per_organization_list or by analyzing the security profile’s definition, and then joins to hr_all_organization_units_vl to display the user-friendly names of these organizations.

Parameters & Filtering

The report includes a straightforward parameter for targeted analysis of security profiles:

Security Profile: Allows users to select a specific security profile to view its detailed access configuration. This is particularly useful when investigating a single profile or preparing for changes.

Performance & Optimization

As a report focused on setup data, it is designed for rapid performance.

Low Data Volume: The underlying security profile and organizational definition tables contain a manageable number of rows, ensuring the query executes quickly.
Indexed Joins: The queries leverage standard Oracle indexes on security_profile_id and organization_id for efficient joins between the security and organizational tables.

FAQ

1. What is a ‘Security Profile’ in Oracle HR? A Security Profile is a mechanism in Oracle HR that defines the population of employees or organizations that a user can access. When a security profile is assigned to a responsibility, any user logging in with that responsibility will only be able to view and process data for the employees or organizations included in that profile.

2. How does this report help with managing data access for different HR roles? Different HR roles (e.g., Payroll Administrator, Benefits Specialist, HR Generalist) require different levels of access. This report helps HR system administrators design and audit security profiles for each role, ensuring that users only see the data relevant to their job functions.

3. Can this report also show which users are assigned to each security profile? This report primarily focuses on the definition of the security profile itself (what data it grants access to). To see which users are assigned to each security profile, you would typically need a separate report that queries fnd_user and fnd_responsibility_vl and then links to the security profile assignments.

Oracle E-Business Suite Reporting Library

We provide an open source Oracle EBS SQLs as a part of operational and project implementation support toolkits for rapid Excel reports generation.

Blitz Report™ is based on Oracle EBS forms technology, and hence requires minimal training. There are no data or performance limitations since the output files are created directly from the database without going through intermediate file formats such as XML.

Blitz Report can be used as BI Publisher and Oracle Discoverer replacement tool. Standard Oracle BI Publisher and Discoverer reports can also be imported into Blitz Report for immediate output to Excel. Typically, reports can be created and version tracked within hours instead of days. The concurrent request output automatically opens upon completion without the need for re-formatting.

The Filters, Columns, Rows and Values fields are used to create and deliver the data in pivot table format with full drill down to details.

Blitz Report Pivots

The Excel template upload functionality in Blitz Report allows users to create their own layouts by uploading an Excel template with additional sheets and charts, automatically refreshed when the report runs again. This allows to create custom dashboards and more advanced visualizations of report data.

Blitz Report Dashboard

You can download and use Blitz Report free of charge for your first 30 reports.

The installation and implementation process usually takes less than 1 hour; you can refer to our installation and user guides for specific details.

If you would like to optimize your Oracle EBS implementation and or operational reporting you can visit www.enginatics.com to review great ideas and example usage in blog. Or why not try for yourself in our demo environment.

Alert	CRM Foundation
ALR Alerts	JTF Grid Datasources
Contracts Core	Lease and Finance Management
OKC Contract Lines Summary	OKL Termination Quotes
Payments	Process Manufacturing Inventory
IBY Payment Process Request Details	GMI Cycle Count Forms
Public Sector Financials	Shipping Execution
PSA Budgetary Control Transactions	WSH Shipping/Delivery Transactions
Warehouse Management	XML Publisher
WMS Control Board Tasks	XDO Publisher Data Definitions
Capacity	Legal Entity Configurator
CRP Available Resources CRP Resource Plan	XLE Establishment and Legal Entity Associations XLE Legal Entities
Service Contracts	Applications DBA
OKS Service Contracts Billing History OKS Service Contracts Billing Schedule	AD Applied Patches AD Applied Patches 11i AD Applied Patches R12.2
Enterprise Asset Management	Installed Base
EAM Assets EAM Weekly Schedule EAM Work Orders	CSI Customer Products Summary CSI Installed Base Extended Attributes Summary CSI Installed Base Summary by Organization
Payroll	Process Manufacturing
PAY Costing Detail PAY Employee Payroll History PAY Payroll Element Details	OPM Batch Lot Cost Details OPM Batch Lot Cost Trends OPM Reconcilation
Subledger Accounting	Workflow
XLA Distribution Links Summary XLA Entity ID Mappings XLA Subledger Period Close Exceptions	WF Activity Status Summary WF Business Events and Subscriptions WF Notifications
Asia/Pacific Localizations	Enterprise Command Center
JA India - TDS Certificates JA India GSTR-1 Return JA India GSTR-2 Return JA India GSTR-3B Return	ECC Admin - Concurrent Programs ECC Admin - Data Load Tracking ECC Admin - Data Sets ECC Admin - Metadata Attributes
Advanced Pricing	Bills of Material
QP Customer Pricing Engine Request QP Modifier Details QP Price Lists QP Pricing Agreements QP Pricing Attribute Definitions	BOM Bill of Material Structure BOM Calendar Exceptions BOM Calendars BOM Item Where Used GUI BOM Routings
Property Manager	Advanced Supply Chain Planning
PN GL Reconciliation PN Generate Lease Analysis PN Generate Lease Details PN Generate Portfolio Detail PN Generate Portfolio Summary	MSC Exceptions MSC Horizontal Plan MSC Pegging Hierarchy MSC Pegging Hierarchy 11i MSC Plan Orders MSC Vertical Plan
E-Business Tax	Projects
ZX Financial Tax Register ZX Lines Summary ZX Party Tax Profiles ZX Tax Accounts ZX Tax Regimes ZX US Sales Tax	PA Capital Project Summary with Asset Detail PA Project Budget PA Revenue, Cost, Budgets by Resources PA Revenue, Cost, Budgets by Work Breakdown Structure PA Task Schedule PA Transaction Sources
Human Resources	Master Scheduling/MRP
PER Employee Assignments PER Employee Grade Changes PER Employee Salary Change PER Information Type Security PER Organization Hierarchy PER Organizations PER Security Profiles	MRP End Assembly Pegging MRP Exceptions MRP Financial Analysis MRP Horizontal Plan MRP Item Forecast MRP Pegging MRP Plan Orders MRP Sourcing Rules and Bills of Distribution
Order Management	Work in Process
ONT Cancelled Orders ONT Order Holds ONT Orders ONT Orders and Lines ONT Recurring Billing Plan ONT System Parameters ONT Transaction Types Listing ONT Transaction Types and Line WF Processes	WIP Account Distribution WIP Discrete Job Shortage WIP Entities WIP Entities Summary WIP Outside Processing WIP Required Components WIP Value WIP Value Summary
Cash Management	Cost Management
CE Bank Account Balances CE Bank Branches CE Bank Statement Import Execution CE Bank Statement and Reconciliation CE Bank Transaction Codes Listing CE Cash in Transit CE Cleared Transactions CE General Ledger Cash Account Usage CE General Ledger Reconciliation CE Transactions Available for Reconciliation	CST AP and PO Accrual Reconciliation CST COGS Revenue Matching CST Cost Groups CST Detailed Item Cost CST Inventory Value - Multi-Organization (Element Costs) 11i CST Inventory Value - Multi-Organization (Item Costs) CST Inventory Value Report - by Subinventory (Item Cost) CST Item Cost Reports CST Miscellaneous Accrual Reconciliation CST Period Close Subinventory Value CST Period Close Subinventory Value Summary CST Periodic Inventory Value CST Supply Chain Indented Bills of Material Cost CST Uninvoiced Receipts
Purchasing	Discoverer
PO Approval Assignments PO Approval Groups PO Approved Supplier List PO Cancelled Purchase Orders PO Cancelled Requisitions PO Document Types PO Headers PO Headers 11i PO Headers and Lines PO Headers and Lines 11i PO Internal Requisitions and Sales Orders PO Internal Requisitions/Deliveries Discrepancy PO Invoice Price Variance PO Purchase Price Variance PO Purchase Requisitions with PO Details	DIS Access Privileges DIS Business Areas DIS Discoverer and Blitz Report Users DIS End User Layers DIS Folders, Business Areas, Items and LOVs DIS Import Performance DIS Items, Folders and Formulas DIS Migration identify missing EulConditions DIS Users DIS Workbook Export Script DIS Workbook Import Validation DIS Workbook Owner Export Script DIS Workbooks, Folders, Items and LOVs DIS Worksheet Execution History DIS Worksheet Execution Summary DIS Worksheet SQLs
Assets	Payables
FA Additions By Source FA Asset Additions FA Asset Book Details FA Asset Book Details 11i FA Asset Cost FA Asset Impairments FA Asset Inventory FA Asset Inventory Report FA Asset Reclassification FA Asset Register FA Asset Retirements FA Asset Summary (Germany) FA CIP Cost FA Cost Adjustments FA Depreciation Projection FA Depreciation Reserve FA Journal Entry Reserve Ledger FA Revaluation Reserve FA Tax Reserve Ledger	AP 1099 Payments AP Accounted Invoice Aging AP Cash Requirement AP DPIVA Export LSNA AP Expenses AP Final Payment Register 11i AP Intercompany Invoice Details AP Invoice Approval Status AP Invoice Audit Listing AP Invoice Payments AP Invoice Payments 11i AP Invoice on Hold AP Invoice on Hold 11i AP Invoices and Lines AP Invoices and Lines 11i AP Invoices with PO, Intercompany and SLA Details AP Matched and Modified Receipts AP Negative Supplier Balance AP Open Balances Revaluation AP Open Items Revaluation AP Posted Invoice Register AP Posted Payment Register AP Preliminary Payment Register 11i AP Supplier Statement AP Suppliers AP Suppliers 11i AP Suppliers Revenue Summary AP Suppliers Revenue Summary 11i AP Trial Balance AP Trial Balance Report Definitions
Receivables	General Ledger
AR Adjustment Register AR Aging AR Aging Buckets and Interest Tiers Setup AR Applied Receipts AR Autoinvoice Interface Summary AR Customer Credit Limits AR Customer Credit Snapshot AR Customer Open Balances Period Lookback AR Customer Statement AR Customers and Sites AR Disputed Invoice AR European Sales Listing AR Incomplete Transactions AR Miscellaneous Receipts AR Miscellaneous Receipts 11i AR Open Balances Revaluation AR Open Items Revaluation AR Past Due Invoice AR Payment Terms AR Receipt Register AR Sales Journal By Customer AR Transaction Register AR Transaction Types AR Transactions and Lines AR Transactions and Lines 11i AR Transactions and Payments AR Transactions and Payments 11i AR Unaccounted Transaction Sweep AR Unapplied Receipts Register AR to GL Reconciliation	GL Account Analysis GL Account Analysis (Distributions) GL Account Analysis (Distributions) 11g GL Account Analysis (Drilldown) GL Account Analysis (Drilldown) (with inventory and WIP) GL Account Analysis 11g GL Account Analysis 11i GL Balance GL Balance (pivot) GL Balance by Account Hierarchy GL Code Combinations GL Daily Rates GL Data Access Sets GL FSG Reports GL FSG Row Orders GL Financial Statement and Drilldown (FSG) GL Header Categories Summary GL Journals GL Journals (Drilldown) GL Journals (Drilldown) 11g GL Journals 11i GL Ledger Sets GL Ledgers and Legal Entities GL Ledgers and Organizations GL Oracle FSG Converter GL Oracle FSG Converter 11g GL Period Status GL Periods GL Summary Templates GL Trial Balance - Detail GL effective vs accounting vs period start and end date comparison
Blitz Report	Inventory
Blitz Report Application Categories Blitz Report Assignments Blitz Report Assignments and Responsibilities Blitz Report Category Assignments Blitz Report Column Number Fomat Comparison between environments Blitz Report Column Translation Comparison between environments Blitz Report Column Translations Blitz Report Comparison between environments Blitz Report Default Templates Blitz Report Deletion History Blitz Report Execution Summary Blitz Report History Blitz Report LOV Comparison between environments Blitz Report LOV SQL Validation Blitz Report LOVs Blitz Report License User History Blitz Report License Users Blitz Report Parameter Anchor Validation Blitz Report Parameter Bind Variable Validation Blitz Report Parameter Comparison between environments Blitz Report Parameter Comparison between reports Blitz Report Parameter Custom LOV Duplication Validation Blitz Report Parameter DFF Table Validation Blitz Report Parameter Default Values Blitz Report Parameter Dependencies Blitz Report Parameter Table Alias Validation Blitz Report Parameter Uniqueness Validation Blitz Report Pivot Colums Validation Blitz Report RDF Import Validation Blitz Report Record History SQL Text Creation Blitz Report SQL Validation Blitz Report Security Blitz Report Templates Blitz Report Text Search Blitz Report Translations Blitz Report User History Blitz Report VPD Policy Setup Blitz Reports Blitz Upload Data Blitz Upload Dependencies Blitz Upload History	INV ABC assignments INV Aging INV Cycle count entries and adjustments INV Cycle count hit/miss analysis INV Cycle count listing INV Cycle count open requests listing INV Cycle count schedule requests INV Cycle count unscheduled items INV Cycle counts pending approval INV Default Category Sets INV Intercompany Invoice Reconciliation INV Intercompany Invoice Reconciliation 11i INV Item Category Assignment INV Item Category Sets INV Item Default Transaction Locators INV Item Default Transaction Subinventories INV Item Demand History INV Item Import Performance INV Item Relationships INV Item Reservations INV Item Statuses INV Item Supply/Demand INV Item Templates INV Items INV Lot Transaction Register INV Material Account Distribution Detail INV Material Movements INV Material Status Change History INV Material Transactions INV Material Transactions Summary INV Onhand Quantities INV Organization Access INV Organization Parameters INV Period Close Pending Transactions INV Physical Inventory Adjustments INV Physical Inventory Tags INV Physical inventory accuracy analysis INV Print Cycle Count Entries Open Interface data INV Safety Stocks INV Stock Locators INV Subinventories INV Transaction Historical Summary INV Transaction Register INV Transaction Source Types INV Transaction Types
Application Object Library	Database Administration
FND Application Context File FND Applications FND Attached Documents FND Attachment Functions FND Audit Setup FND Audit Table Changes by Column FND Audit Table Changes by Record FND Concurrent Managers FND Concurrent Program Incompatibilities FND Concurrent Programs and Executables FND Concurrent Programs and Executables 11i FND Concurrent Request Conflicts FND Concurrent Requests FND Concurrent Requests 11i FND Concurrent Requests Summary FND Data Groups FND Descriptive Flexfield Table Columns FND Descriptive Flexfields FND Document Categories FND Document Sequence Assignments FND Document Sequences FND FNDLOAD Object Transfer FND Flex Hierarchies (Rollup Groups) FND Flex Value Hierarchy FND Flex Value Security Rules FND Flex Value Sets, Usages and Values FND Flex Values FND Form Functions FND Forms Personalizations FND Help Documents and Targets FND Histogram Columns FND Key Flexfields FND Languages FND Lobs FND Log Messages FND Lookup Search FND Lookup Values FND Lookup Values Comparison between environments FND Menu Entries FND Messages FND Nodes FND Profile Option Values FND Profile Options FND Request Groups FND Responsibilities FND Responsibility Access FND Responsibility Access 11i FND Responsibility Menu Exclusions FND Role Hierarchy FND Roles FND Rollup Groups FND SOA Runtime Error FND Tables and Columns FND User Login History FND User Login Page Favorites FND User Login Summary FND User Responsibilities FND User Roles FND User Roles 11i FND Users	DBA AWR Active Session History DBA AWR Blocking Session Summary DBA AWR CPU Load (active session history) DBA AWR CPU vs Wait Time Summary DBA AWR Interconnect Traffic DBA AWR Latch Summary DBA AWR Latch by Time DBA AWR PGA History DBA AWR SQL Execution Plan History DBA AWR SQL Performance Summary DBA AWR Settings DBA AWR System Metrics Summary DBA AWR System Time Percentages DBA AWR System Time Summary DBA AWR Tablespace Usage DBA AWR Wait Class by Time DBA AWR Wait Event Summary DBA AWR Wait Event Summary (active session history) DBA Alert Log DBA Archive / Redo Log Rate DBA Automated Maintenance Tasks DBA Blocking Sessions DBA CPU Benchmark1 DBA CPU Benchmark2 DBA CPU Benchmark3 DBA Dependencies (used by) DBA Dependencies (uses) DBA Editioned Object Summary DBA Editions DBA External Table Creation DBA Feature Usage Statistics DBA Hierarchical Profiler Data DBA Index Columns DBA Jobs DBA Log Switches DBA Objects DBA Parameters DBA Profiler Data DBA Redo Log Files DBA Registry SQL Patch DBA Result Cache Objects and Dependencies DBA Result Cache Statistics DBA SGA Active Session History DBA SGA Blocking Session Summary DBA SGA Buffer Cache Object Usage DBA SGA CPU Load (active session history) DBA SGA Memory Allocation DBA SGA SQL Execution Plan History DBA SGA SQL Performance Summary DBA SGA Target Advice DBA SGA Wait Event Summary (active session history) DBA SGA+PGA Memory Configuration DBA Scheduler Jobs DBA Segments DBA Session Longops DBA Table Columns DBA Table Modifications DBA Tablespace Usage DBA Text Search DBA Trace File Contents