How to create a Custom Role only having access to Setup and Maintenance

 

To create a Custom Role only to have access in Setup and Maintenance, we need the below privileges:

Please follow the below instructions to create the Custom Role:

1 - Navigator >> Tools >> Security Console
2 - Go to Roles Tab
3 - Click on the button in the right top corner - "Create Role"
4 - On the First Tab (Basic Information) provide the required information like Role Name, Role Code, Role Category, Description
5- On the Second Tab (Function Security Policies) please add the below privileges mentioned above.

·       Setup and Maintain Applications

·       Execute Setup Tasks

·       Review Applications Offerings

·       Review Setups Functional User Overview  

6 - Click next through other tabs then finally save and close.

Note: Once the custom role is created, please run the Retrieve Latest LDAP Changes ESS job from Scheduled Processes Navigation

How to get rid of the error “Execution failed with Client received SOAP Fault from server - Security violation for user : fusion_apps_hcm_ess_appid, permission: 192” while running a Report from HCM Extract

To get rid of this permission issue, please follow as per below:

Step 1: Please navigate to the Report under Home > Tools > Reports and Analytics > Browse Catalog > folder path in BI

Step 2: Then select the folder where the report has been put. Click on More > Permissions and make sure BI Administrator Role and BI Consumer Role has been added with access “Full Control”

How to configure only Read Only Access for an User in Oracle HCM Cloud environment

 

To give an user fully read-only access we to follow the below steps. This can be done only with setting a Profile Option.

Step 1 : Navigate to Setup and Maintenance —> Tasks —> Search

Step 2 : Search for the task called “Manage Adninistrator Profile Values”

Step 3 : Now in the Profile Option section, pass the Profile Option Code as “FND_READ_ONLY_MODE” and click on search button.

Step 4 : In the Profile Values section, add the User to give read only access.

              Profile Level —> User

              User Name —> Pass the User name here

               Profile Value —> Enabled.

Step 5 : Save and Close

Step 6 : Now sign in with the User credential and you will see a banner message saying 

              “You have read-only access to all applications. You cannot perform updates.”

How to export all Person Image details using REST API from Oracle HCM Cloud environment

 

Steps to export all Person Image details using REST API from Oracle HCM Cloud environment:

Step 1: 

We can use Postman or SOAP UI tool to test the requirement as below. In the "Image" attribute it will return Base64 encoded value of the image.

Operation: GET

URL: https://******************.oraclecloud.com/hcmRestApi/resources/11.13.18.05/emps

Parameter Tab: a> Key = fields 

                                      Value = PersonId,PersonNumber;photo:ImageId,Image

                            b> expand    = photo

                            c> onlyData = true

   Authorization Tab :    Pass Username and Password                     

Step 2: 

Used a decoder to decode Base64 encoded value to an Image as below.

Sample Delete HDL / HSDL file to delete Ethnicity in Oracle HCM Cloud environment

 

Sample Delete HDL file details to delete Ethnicity in Oracle HCM Cloud environment

-------------------------------------------------------------------------------------------------------

SET ENABLE_INCREMENTAL_LOAD_EVENTS Y

METADATA|PersonEthnicity|EthnicityId|PersonId|PersonNumber|LegislationCode|DeclarerId|DeclarerPersonNumber|Ethnicity|PrimaryFlag|SourceSystemOwner|SourceSystemId|GUID

DELETE|PersonEthnicity|||E1222222|US|||5|N|||

Sample Delete HSDL file details to delete Ethnicity in Oracle HCM Cloud environment

-------------------------------------------------------------------------------------------------------

Assignment Supervisor Flexfield is not visible in Manage Employment page though it has been configured in the Oracle HCM Cloud environment

Assignment Supervisor Flexfield is not visible in Manage Employment page though it has been configured in the Oracle HCM Cloud environment

----------------------------------------------------------------------------------------------------------

As per Oracle documentation (Doc ID 2424558.1), the below DFFs are not enabled on any UI. They are obsolete and will be removed in the coming release from the setup UI:

PER_ASG_GRADE_STEPS_LEG_DDF
PER_ASG_SUPERVISOR_DF
PER_ASG_WORK_MEASURES_DF

How to enable assignment level security in Oracle HCM Cloud environment

 

Steps to enable assignment level security in Oracle HCM Cloud environment :

Note : This is a new Feature from 20D onwards.  All the images have been taken from Oracle.

Business Benefits : 

1> Using this feature, security can be locked down to Assignment level.

2> Using this feature Manager and Organizations can see information that is within the Area Of Responsibility.

How to enable this feature :

1> To secure the access for the workers with multiple assignments, we have to enable the profile option called

“ORA_PER_ASSIGNMENT_LEVEL_DATA_SECURITY_ENABLED”.

2> Then we have to run the “Regenerate Data Security Profiles and Grants” ESS job to set and update person security grants and data roles.

3> To enable assignment level security in the employment contract, we must run the Migrate Employment Data process by selecting this run mode: Enhance contract data to enable its use in the responsive pages.

Once the Assignment Security is enabled, you can navigate as per below and can validate.

Implementation Considerations : 

Part 1

Part 2

Part 3