I'm working on an Oracle Cloud implementation project and yours has been the best explanation of how roles, privileges, and data security roles coexist. Keep it up - this is really great!
You can create a master role by copying a seeded role. When you copy a seeded role, the data security policies are copied over. If you copy the role (top level and inherited) all the lower-level duty roles are copied as well, with their data security policies. What you need to remember is that the lower-level data security policies do not matter in a role. The only data security policies the role looks at are the ones at the job level. If it isn’t at the top job level, the role doesn’t see it. So, duplicating the duty role policies is not relevant. If you´d like a further chat, let us know.
I'm working on an Oracle Cloud implementation project and yours has been the best explanation of how roles, privileges, and data security roles coexist. Keep it up - this is really great!
Thank you! We´re glad you found it insightful.
Hi. How can I rceate a master role (Common Job Role) and duplicate/import Data Security Policies from the child roles?
You can create a master role by copying a seeded role. When you copy a seeded role, the data security policies are copied over. If you copy the role (top level and inherited) all the lower-level duty roles are copied as well, with their data security policies. What you need to remember is that the lower-level data security policies do not matter in a role. The only data security policies the role looks at are the ones at the job level. If it isn’t at the top job level, the role doesn’t see it. So, duplicating the duty role policies is not relevant. If you´d like a further chat, let us know.
I want to create a custom privilege (which can be added in functional security policy) for oracle hcm. Please advise
Hi there, sorry we missed this. Have you checked out this session? ua-cam.com/video/VtRc5ZtpG6E/v-deo.html
You can also share your email if you´re happy to do that and we can get back to you. Thank you.
@@safepaas1148yes I did watch the session