Upload and Download Data Security Assignments

You can download security assignment template files to help you set up security assignments, and then upload the files to your environment.

You can download Sample or Current files. Sample provides a csv file with relevant headers to help familiarize you with the types of data you can expect. Current provides a list of current data assignments you can download to your test or production environments. If you need to filter your options to show specific data security contexts, use the Filter option. Regardless of the file you download, you need to populate these columns: USERNAME, SEC_OBJ_CODE, and SEC_OBI_MEMBER_VAL. Don't change any of the header names in the downloaded files. When you're done updating the files, you can upload them to your environment.

You can also download data security assignment files using the Download File button available from the Security Assignments tab on the Security page. In this case, you don't need to specifically select Data Security Assignments. Click Download File, select the type of file you want to download, and proceed with the remaining steps. You can also upload data security assignment files using the Upload button available from the Security Assignments tab on the Security page. In this case, you don't need to specifically select Data Security Assignments. Click Upload and then proceed with the remaining steps.

Note:

Replace existing configuration settings deletes existing data security assignments.

Ensure that these prerequisites are in place:

  • Security assignment has 1:1 mapping with application roles.
  • Application roles are assigned to groups.
  • Users who are being assigned to a security context are part of the group that's linked to the security context through the application roles.
  1. Sign in to your service.
  2. In Oracle Fusion Data Intelligence Console, click Uploads under Application Administration.
  3. On the Uploads page, click Download File, select Data Security Assignments and then select the type of file you want to download.
  4. Open the csv file you downloaded and complete the fields as required:
    • USERNAME: The user name and user display name.
    • SEC_OBJ_CODE: The object code for which you're adding the data security assignment.
    • SEC_OBJ_MEMBER_VAL: The security assignment member for each context. See Security Object Tables.
  5. When you're done updating the file, save your changes.
  6. On the Uploads page, click Upload File and the applicable file type.
  7. Select whether you want to Merge to the existing settings or Replace existing configuration settings.
  8. Select the file you want to upload and click Upload File.
    You can review the status of the upload on the Uploads tab.
  9. Use Actions next to the file name to perform actions on a specific upload file:
    • Click Properties to check the upload statistics.
    • Click Download to download the file you just uploaded in the event you want to upload the file again.
    • Click Delete if a file fails to process and you want to remove the file history.

Security Object Tables

Use these security object codes and associated SQL to access the assignment member for each context.

Security Objects

Table 6-1 Security Object Codes

Security Object Code
AP Business Units OA4F_SEC_FIN_AP_BUSINESSUNIT_LIST
AR Business Units OA4F_SEC_FIN_AR_BUSINESSUNIT_LIST
Cost Organizations OA4F_SEC_CST_COST_ORG_LIST
FA Asset Book OA4F_SEC_FIN_FA_ASSET_BOOK_LIST
HCM Business Units OA4F_SEC_HCM_BUSINESSUNIT_LIST
HCM Country List OA4F_SEC_HCM_COUNTRY_LIST
HCM Departments OA4F_SEC_HCM_DEPARTMENT_LIST
HCM Legal Employers OA4F_SEC_HCM_LEGAL_EMPLOYER_LIST
HCM Show Self Record OA4F_SEC_HCM_SEE_SELF_RECORD
Inventory Business Units OA4F_SEC_INV_BUSINESSUNIT_LIST
Inventory Organizations OA4F_SEC_INV_ORG_TRANSACTIONS_LIST
Ledgers OA4F_SEC_FIN_LEDGER_LIST
Order Management Business Units OA4F_SEC_OM_BUSINESS_UNIT_LIST
Project Business Units OA4F_SEC_PPM_PROJECT_BUSINESSUNIT_LIST
Project Expenditure Business Units OA4F_SEC_PPM_EXPENDITURE_BUSINESSUNIT_LIST
Project Organizations OA4F_SEC_PPM_PROJECT_ORGANIZATION_LIST
Requisition Business Units OA4F_SEC_PROC_REQ_BUSINESSUNIT_LIST
Spend Procurement Business Units OA4F_SEC_PROC_SPEND_PRC_BUSINESSUNIT_LIST

Assignment Member SQL

Table 6-2 Assignment Member SQL

Security Object Code SQL Code
OA4F_SEC_CST_COST_ORG_LIST 
SELECT
DISTINCT TL.ORGANIZATION_NAME AS NAME,
TL.ORGANIZATION_ID AS VALUE
FROM
DW_CST_COST_ORG_BOOKS_D D,
DW_INTERNAL_ORG_D_TL TL
WHERE
D.COST_ORG_ID = TL.ORGANIZATION_ID
AND  TL.LANGUAGE = (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES')
AND D. COST_ORG_ID <>-99999
OA4F_SEC_FIN_AP_BUSINESSUNIT_LIST 
SELECT TL.ORGANIZATION_NAME AS NAME, TL.ORGANIZATION_ID AS VALUE 
FROM DW_INTERNAL_ORG_D D, DW_INTERNAL_ORG_D_TL TL
WHERE (D.PAYABLES_INVOICING_BU_FLAG = 'Y' OR D.PAYABLES_PAYMENT_BU_FLAG = 'Y') 
AND D.ORGANIZATION_ID = TL.ORGANIZATION_ID 
AND TL.LANGUAGE = (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES') 
AND D.ORGANIZATION_ID <> -99999
OA4F_SEC_FIN_AR_BUSINESSUNIT_LIST 
SELECT TL.ORGANIZATION_NAME AS NAME, TL.ORGANIZATION_ID AS VALUE 
FROM DW_INTERNAL_ORG_D D, DW_INTERNAL_ORG_D_TL TL
WHERE (D.BILLING_REVENUE_MNG_BU_FLAG = 'Y' OR D.CUSTOMER_PAYMENTS_BU_FLAG = 'Y') 
AND D.ORGANIZATION_ID = TL.ORGANIZATION_ID 
AND TL.LANGUAGE = (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES') 
AND D.ORGANIZATION_ID <> -99999
OA4F_SEC_FIN_FA_ASSET_BOOK_LIST 
SELECT 
BOOK_TYPE_CODE AS name,
BOOK_TYPE_CODE AS value
FROM 
DW_FA_MC_BOOK_CONTROLS_D
WHERE MC_FLAG = 'N'
OA4F_SEC_FIN_LEDGER_LIST 
SELECT ledger.ledger_name   AS name,        
                ledger.ledger_id     AS value 
FROM dw_ledger_d ledger 
WHERE ledger.ledger_id <> - 99999
OA4F_SEC_HCM_BUSINESSUNIT_LIST 
SELECT TL.BUSINESS_UNIT_NAME AS NAME,
TL.BUSINESS_UNIT_ID AS VALUE
FROM DW_BUSINESS_UNIT_D_TL TL
WHERE TL.LANGUAGE =  (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES')
OA4F_SEC_HCM_COUNTRY_LIST 
SELECT TL.COUNTRY_NAME AS NAME, TL.COUNTRY AS VALUE 
FROM DW_COUNTRY_D_TL TL WHERE TL.LANGUAGE = (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES')
OA4F_SEC_HCM_DEPARTMENT_LIST 
select TL.DEPARTMENT_NAME AS NAME, TL.DEPARTMENT_ID AS VALUE FROM DW_DEPARTMENT_D_TL TL where
      LANGUAGE = (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE
      PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES')
OA4F_SEC_HCM_LEGAL_EMPLOYER_LIST 
SELECT TL.LEGAL_EMPLOYER_NAME AS NAME, TL.LEGAL_EMPLOYER_ID AS VALUE FROM DW_LEGAL_EMPLOYER_D_TL TL WHERE LANGUAGE =  (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES')
OA4F_SEC_HCM_SEE_SELF_RECORD 
SELECT YESNO_LKP_CODE AS VALUE,
  NAME                AS NAME
FROM DW_YESNO_LKP_TL
WHERE CODE_TYPE LIKE 'FA_YESNO'
AND LANGUAGE        =  (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES')
AND YESNO_LKP_CODE IN ( 'NO')
OA4F_SEC_INV_BUSINESSUNIT_LIST 
SELECT TL.BUSINESS_UNIT_NAME AS NAME, TL.BUSINESS_UNIT_ID AS VALUE
FROM DW_BUSINESS_UNIT_D_TL TL
WHERE TL.BUSINESS_UNIT_ID IN (SELECT DISTINCT(INV_BUSINESS_UNIT_ID) FROM DW_INV_ORGANIZATION_D)
AND TL.LANGUAGE = (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES') AND TL.BUSINESS_UNIT_ID <> '-99999'
OA4F_SEC_INV_ORG_TRANSACTIONS_LIST 
SELECT INV_ORGANIZATION_NAME AS NAME, INV_ORGANIZATION_ID AS VALUE FROM DW_INV_ORGANIZATION_D_TL TL
WHERE TL.LANGUAGE = (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES') AND TL.INV_ORGANIZATION_ID <> '-99999'
OA4F_SEC_OM_BUSINESS_UNIT_LIST 
SELECT
TL.BUSINESS_UNIT_NAME AS NAME,
TL.BUSINESS_UNIT_ID AS VALUE
FROM  DW_BUSINESS_UNIT_D_TL TL
WHERE  TL.LANGUAGE = (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES')
AND TL.BUSINESS_UNIT_ID<>-99999
OA4F_SEC_PPM_CONTRACT_BUSINESSUNIT_LIST 
SELECT 
TL.ORGANIZATION_NAME AS NAME,
TL.ORGANIZATION_ID AS VALUE 
FROM 
DW_INTERNAL_ORG_D D, 
DW_INTERNAL_ORG_D_TL TL
WHERE (D.CUST_CONTRACT_MNGMNT_BU_FLAG = 'Y' AND D.BUSINESS_UNIT_FLAG = 'Y') 
AND D.ORGANIZATION_ID = TL.ORGANIZATION_ID 
AND TL.LANGUAGE = (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES')
AND D.ORGANIZATION_ID<>-99999
OA4F_SEC_PPM_EXPENDITURE_BUSINESSUNIT_LIST 
SELECT
TL.ORGANIZATION_NAME AS NAME,
TL.ORGANIZATION_ID AS VALUE
FROM
DW_INTERNAL_ORG_D D,
DW_INTERNAL_ORG_D_TL TL
WHERE (D.PROJECT_ACCOUNTING_BU_FLAG  = 'Y' AND D.BUSINESS_UNIT_FLAG = 'Y')
AND  D.ORGANIZATION_ID = TL.ORGANIZATION_ID
AND  TL.LANGUAGE = USERENV('LANG')
AND D.ORGANIZATION_ID<>-99999
OA4F_SEC_PPM_PROJECT_BUSINESSUNIT_LIST 
SELECT
TL.ORGANIZATION_NAME AS NAME,
TL.ORGANIZATION_ID AS VALUE
FROM
DW_INTERNAL_ORG_D D,
DW_INTERNAL_ORG_D_TL TL
WHERE (D.PROJECT_ACCOUNTING_BU_FLAG  = 'Y' AND D.BUSINESS_UNIT_FLAG = 'Y')
AND  D.ORGANIZATION_ID = TL.ORGANIZATION_ID
AND  TL.LANGUAGE = USERENV('LANG')
AND D.ORGANIZATION_ID<>-99999
OA4F_SEC_PPM_PROJECT_ORGANIZATION_LIST 
SELECT
TL.ORGANIZATION_NAME AS NAME,
TL.ORGANIZATION_ID AS VALUE
FROM
DW_INTERNAL_ORG_D D,
DW_INTERNAL_ORG_D_TL TL
WHERE (D.PROJECT_ORGANIZATION_FLAG  = 'Y' )
AND  D.ORGANIZATION_ID = TL.ORGANIZATION_ID
AND  TL.LANGUAGE = USERENV('LANG')
AND D.ORGANIZATION_ID<>-99999
OA4F_SEC_PROC_REQ_BUSINESSUNIT_LIST 
SELECT
TL.ORGANIZATION_NAME AS NAME,
TL.ORGANIZATION_ID AS VALUE
FROM
DW_INTERNAL_ORG_D D,
DW_INTERNAL_ORG_D_TL TL
WHERE (D.REQUISITION_BU_FLAG  = 'Y' AND D.BUSINESS_UNIT_FLAG = 'Y')
AND  D.ORGANIZATION_ID = TL.ORGANIZATION_ID
AND  TL.LANGUAGE = (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES')
AND D.ORGANIZATION_ID<>-99999
OA4F_SEC_PROC_SPEND_PRC_BUSINESSUNIT_LIST 
SELECT
TL.ORGANIZATION_NAME AS NAME,
TL.ORGANIZATION_ID AS VALUE
FROM
DW_INTERNAL_ORG_D D,
DW_INTERNAL_ORG_D_TL TL
WHERE (D.PROCUREMENT_BU_FLAG = 'Y' AND D.BUSINESS_UNIT_FLAG = 'Y')
AND  D.ORGANIZATION_ID = TL.ORGANIZATION_ID
AND  TL.LANGUAGE = (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES')
AND D.ORGANIZATION_ID<>-99999
OA4F_SEC_SCM_MFGORG_LIST 
SELECT
MFG_ORGANIZATION_NAME AS NAME, 
MFG_ORGANIZATION_ID AS VALUE
FROM
DW_MFG_ORGANIZATION_D_TL TL
WHERE TL.LANGUAGE = (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES')
AND TL.MFG_ORGANIZATION_ID <> '-99999'
OA4F_SEC_SCM_MNTORG_LIST 
SELECT
INV_ORGANIZATION_NAME AS NAME,
INV_ORGANIZATION_ID AS VALUE
FROM
DW_INV_ORGANIZATION_D_TL TL
WHERE TL.LANGUAGE = (SELECT PARAMETER_VALUE FROM DW_CONTENT_PARAM_CONFIG WHERE PARAMETER_CODE='PARAM_GLOBAL_FAW_LANGUAGES')
AND TL.INV_ORGANIZATION_ID <> '-99999'