You can create security classes anytime. Only Provisioning Managers and Shared Services Administrators can define security classes for applications.
You can load security classes for classic Financial Management application from a security (.sec) file. See “Loading Application Security” in the Oracle Hyperion Financial Management Administrator's Guide.