Role Types

Oracle Applications Cloud defines the following types of roles.

• Job roles

• Abstract roles

• Duty roles

• Aggregate privileges

Let's look at the role types in detail.

Job Roles

Job roles represent the jobs that users perform in an organization. You can also create job roles.

Examples: General Accountant and Accounts Receivables Manager

Abstract Roles

Abstract roles represent users in the enterprise independent of the jobs they perform. You can also create abstract roles.

All users are likely to have at least one abstract role that provides access to a set of standard functions. You may assign abstract roles directly to users.

Examples: Enterprise Resource Planning Self Service User and Project Team Member

Duty Roles

Duty roles represent a logical collection of privileges that grant access to tasks that someone performs as part of a job. You can also create duty roles. Here are some duty role characteristics:

• They group multiple function security privileges.

• They can inherit aggregate privileges and other duty roles.

• You can copy and edit them.

Job and abstract roles may inherit duty roles either directly or indirectly. You don't assign duty roles directly to users.

Examples: Budget Review and Account Balance Review

Aggregate Privileges

Aggregate privileges are roles that combine the functional privilege for an individual task or duty with the relevant data security policies. Functions that aggregate privileges might grant access to include task flows, application pages, work areas, dashboards, reports, batch programs, and so on.

Aggregate privileges differ from duty roles in these ways:

• All aggregate privileges are predefined. You can't create, modify, or copy them.

• They don't inherit any type of roles.

You can include the predefined aggregate privileges in your job and abstract roles. You assign aggregate privileges to these roles directly. You don't assign aggregate privileges directly to users.