Overview of Security for Oracle Fusion Cloud Procurement

Oracle Procurement applications use the standard role-based security model. Predefined security roles are delivered in the security reference implementation.

Some types of delivered roles are:

Common job roles.
Abstract roles, for common functionality that is not job-specific.
Duty roles, that can carry both function and data security grants.
Discretionary roles, are like duty roles but can be provisioned to users independent of job or abstract roles.

For each of the predefined roles, the included or inherited duties grant access to application functions that correspond to their responsibilities. In some areas of Oracle Procurement you must also grant data access directly to specific users. For example, you must directly set up users such as buyers, category managers and procurement managers as procurement agents.

Predefined Roles for Procurement

Predefined roles for Oracle Procurement are provided in the security reference implementation for these functional areas:

Requisitioning
Purchasing
Supplier
Supplier Portal
Sourcing
Supplier Qualification
Spend Classification
Setup and Administration
Business Intelligence

Note: Oracle recommends that security administrators don't assign these predefined roles directly to users. Instead, make a copy of a predefined role, remove the privileges that your users don't need, and assign users the role that contains only the privileges they need.

The following table lists predefined requisitioning security roles and their descriptions.

Role	Type	Description
Advanced Procurement Requester	Abstract	Creates requests for goods or services for themselves and for others. Also has access to the Add Requisition Lines function which supports the quick creation of multiple requisition lines. This role must be directly assigned to a user.
Procurement Catalog Administrator	Abstract	Manages agreements and catalog content. This includes catalogs, category hierarchies, content zones, information templates, map sets, public shopping lists and smart forms.
Procurement Preparer	Abstract	Creates requests for goods or services for themselves and for others. This role must be directly assigned to a user.
Procurement Requester	Abstract	Creates requests for goods or services for themselves. This role is inherited by users whose primary worker assignment is Employee or Contingent Worker.

The following table lists predefined purchasing security roles and their descriptions.

Role	Type	Description
Buyer	Job	Performs transactional functions in procurement applications, such as for processing purchase agreements and purchase orders.
Category Manager	Job	Identifies savings opportunities. Determines negotiation strategies. Creates requests for quote, information, proposal or auction events on behalf of their organization. Awards future business, typically in the form of agreements and orders with suppliers.
Procurement Contracts Administrator	Job	Creates, manages and administers procurement contracts.
Procurement Manager	Job	Manages a group of buyers in an organization.

The following table lists predefined buying organization supplier security roles and their descriptions.

Role	Type	Description
Supplier Administrator	Abstract	Manages supplier information and user provisioning.
Supplier Manager	Abstract	Manages supplier information and authorizes promotion of prospective suppliers to spend authorized status.

The following table lists predefined supplier portal security roles and their descriptions.

Role	Type	Description
Supplier Accounts Receivable Specialist	Job	Submits invoices and tracks invoice and payment status for the supplier organization.
Supplier Bidder	Abstract	Represents a potential supplier. Responds to requests for quote, proposal, information and reverse auctions.
Supplier Customer Service Representative	Job	Manages inbound purchase orders. Communicates shipment activities for the supplier organization. Tracks, acknowledges or requests changes to new orders. Monitors the receipt activities performed by the buying organization.
Supplier Demand Planner	Job	Manages supplier scheduling, supplier managed inventory, and consigned inventory for the supplier organization.
Supplier Inventory Manager	Job	Manages inventory process control from beginning to end. Monitors available supplies, materials and products to ensure that customers, employees and production have access to the materials they need.
Supplier Product Administrator	Job	Uses retail external portal, and uploads and maintains supplier product and catalog data with the retailer. This catalog data is for both sell-side and buy-side transactions.
Supplier Product Design Engineer	Job	Views items and their related details such as a bill of material, attachments or approved manufacturers list. Reviews and acknowledges change orders, and initiates change requests against items they are providing or manufacturing for the customer.
Supplier Sales Representative	Job	Manages agreements and deliverables for the supplier organization. Acknowledges or requests changes to agreements. Adds catalog line items with customer-specific pricing and terms. Updates contract deliverables that are assigned to the supplier. Updates progress on contract deliverables for which the supplier is responsible.
Supplier Self Service Administrator	Abstract	Manages the profile information for the supplier company. Primary tasks include updating supplier profile information and requesting user accounts to grant employees access to the supplier application. Here are two additional roles that this role has: Maintain Supplier Contact User Account as Supplier Maintain Supplier Contact as Supplier
Supplier Self Service Clerk	Abstract	Manages the profile information for the supplier company. Primary tasks include updating supplier profile information and requesting user accounts to grant employees access to the supplier application. This role does not have any additional roles.

The following table lists predefined sourcing security roles and their descriptions.

Role	Type	Description
Category Manager	Job	Identifies savings opportunities. Determines negotiation strategies. Creates requests for quote, information, proposal or auction events on behalf of their organization. Awards future business, typically in the form of contracts or purchase orders to suppliers.
Sourcing Project Collaborator	Abstract	Helps determine negotiation strategies, award decision criteria, and perform objective scoring. The role can be assigned to a key organization member helping to do these tasks.

The following table lists predefined supplier qualification security roles and their descriptions.

Role	Type	Description
Procurement Data Analyst	Abstract	Allows access to view, train, and classify spend data for all business units. A user with this role maintains the quality of data used for analysis and reporting, and does so by interpreting patterns and trends using advanced digital tools and methods like data modeling and data mining. This role grants access to Oracle Fusion Spend Classification, and not other Oracle Procurement applications.

The following table lists predefined spend classification security roles and their descriptions.

Role	Type	Description
Procurement Application Administrator	Job	Performs most setup tasks. Performs the technical aspects of keeping the procurement application functions available. Configures the applications to meet the business needs of the organization.

The following table lists predefined setup and administration security roles and their descriptions.

Role	Type	Description
Procurement Application Administrator	Job	Performs most setup tasks. Performs the technical aspects of keeping the procurement application functions available. Configures the applications to meet the business needs of the organization.
Procurement Catalog Administrator	Abstract	Manages agreements and catalog content. This includes catalogs, category hierarchies, content zones, information templates, map sets, public shopping lists and smart forms.
Procurement Contract Administrator	Job	Creates, manages and administers procurement contracts.
Procurement Integration Specialist	Job	Plans, coordinates, and supervises all activities related to the integration of the procurement applications.
Procurement Manager	Job	Manages a group of buyers in an organization.
Supplier Administrator	Abstract	Manages supplier profile and user provisioning.
Supplier Manager	Abstract	Manages supplier information and authorizes promotion of prospective suppliers to spend authorized status.

The following table lists predefined business intelligence security roles and their descriptions.

Role	Type	Description
Purchase Analysis	Abstract	Allows a user to perform line-of-business analysis on requisitions, purchase orders and suppliers. This role is only used to grant access to Oracle Business Intelligence, not the Oracle Procurement applications. The user is not a procurement agent. They are a person who owns the line-of-business and wants to do business intelligence analysis on procurement data. The user who has this role has data access to the business unit associated with their primary worker assignment. You can assign additional business units to their data access. Use the Manage Data Access for Users task, in the Setup and Maintenance work area.

Role

Type

Description

Purchase Analysis

Abstract

Allows a user to perform line-of-business analysis on requisitions, purchase orders and suppliers. This role is only used to grant access to Oracle Business Intelligence, not the Oracle Procurement applications. The user is not a procurement agent. They are a person who owns the line-of-business and wants to do business intelligence analysis on procurement data.

The user who has this role has data access to the business unit associated with their primary worker assignment. You can assign additional business units to their data access. Use the Manage Data Access for Users task, in the Setup and Maintenance work area.