Wednesday, 19 April 2023

BIP --Fusion HCM --Secured List Views

How Can A BI Publisher Report Based On A SQL Query Use The Security Roles In Fusion Applications?


 It is possible to pull Fusion Security into the SQL based reports.  Custom BI Publisher reports should be based on the secured list views (based on VPDs). These views should be used along with other objects to ensure that security is adhered to.  When querying through these views the VPD will ensure that row level security is applied and that the users performing the queries can only access data to which they are entitled.

Ensure that the queries which you are building drive through one or more of the following views:

  • PER_POSITION_SECURED_LIST_V
  • PER_PUB_PERS_SECURED_LIST_V
  • CMP_SALARY_SECURED_LIST_V
  • PER_ASSIGNMENT_SECURED_LIST_V
  • PER_DEPARTMENT_SECURED_LIST_V
  • PER_JOB_SECURED_LIST_V
  • PER_LDG_SECURED_LIST_V
  • PER_LEGAL_EMPL_SECURED_LIST_V
  • PER_LOCATION_SECURED_LIST_V
  • PAY_PAYROLL_SECURED_LIST_V
  • PER_PERSON_SECURED_LIST_V
  • PER_GRADE_SECURED_LIST_V

 

NOTE:  For any information related to SLVs please raise a Service Request with the appropriate support Fusion Product Team(s) to derive a solution.
Refer: Fusion BI Publisher - Fusion Security in BI Publisher Data Models - Secured List Views SLV (Doc ID 2708546.1)

 

BI Publisher Data Security and Secured List Views (20C)

These duty roles have privileges in the following table:

   •     Absence Management Transaction Analysis
   •     Payroll Transaction Analysis
   •     Vacancy Transaction Analysis
   •     Workforce Transaction Analysis

 Table Secured List ViewData Security Privilege 
 HR_ALL_ORGANIZATION_UNITS_FPER_DEPARTMENT_SECURED_LIST_VReport Department Data
 HR_ALL_POSITIONS_F PER_POSITION_SECURED_LIST_V Report Position Data
 PER_JOBS_F PER_JOB_SECURED_LIST_V Report HR Job Data
 PER_LOCATIONS PER_LOCATION_SECURED_LIST_V Report Location Data
 PER_GRADES_F PER_GRADE_SECURED_LIST_V Report Assignment Grade Data
Note  -  PER_JOBS_F, PER_LOCATIONS, and PER_GRADES_F aren't currently secured. The secured list views and privileges for these tables aren't currently used.


These duty roles have privileges in the following table:
    •     Documents of Record Transaction Analysis
    •     Payroll Transaction Analysis
    •     Workforce Transaction Analysis

TableSecured List ViewData Security Privilege
PER_ALL_PEOPLE_FPER_PERSON_SECURED_LIST_VReport Person Data
PER_PERSONSPER_PUB_PERS_SECURED_LIST_VReport Person Deferred Data


The Payroll Transaction Analysis duty role has privileges in the following table:

TableSecured List ViewData Security Privilege
HR_ALL_ORGANIZATION_UNITS_FPER_LEGAL_EMP_SECURED_LIST_VReport Legal Employer Data
PER_LEGISLATIVE_DATA_GROUPSPER_LDG_SECURED_LIST_VReport Legislative Data Group Data
PAY_ALL_PAYROLLS_FPAY_PAYROLL_SECURED_LIST_VReport Payroll Definition Data

The Compensation Transaction Analysis duty role has the privileges in the following table:

TableSecured List ViewData Security Privilege
CMP_SALARYCMP_SALARY_SECURED_LIST_VReport Salary Data

The Human Resource Analyst job role has the privilege in the following table:

TableSecured List ViewData Security Privilege
PER_ALL_ASSIGNMENTS_MPER_ASSIGNMENT_SECURED_LIST_VReport Assignment Data

When creating custom BI Publisher reports, you can find details of the secured list views in Oracle Enterprise Repository (OER). In the Assets pane, set the Type value to View and the Logical Business Area value to Human Capital Management.

The above information is also available in the below URL:

https://docs.oracle.com/en/cloud/saas/human-resources/20c/ochus/security-and-reporting.html#OCHUS1229074

No comments: