Security Requirements

The Application Implementation Consultant (ORA_ASM_APPLICATION_IMPLEMENTATION_CONSULTANT_JOB) role has full access to perform all offering opt-in and setup related activities.

Therefore, only assign it to users strictly on a need basis if absolutely necessary and for a temporary duration. Instead, it’s recommended that you create a custom role based on the tasks they need and assign that custom role to the relevant users. While creating custom roles, make sure only the required privileges are assigned. To know why this is the recommended practice, see Guidance for Assigning Predefined Roles and Advisory Note on Subscription Impact.

Other roles are available with predefined and limited access to a subset of tasks. Review the requirements and grant users roles that are required to complete a particular task.

Limit Access to Specific Setup Tasks

To limit a user's access to specific setup tasks, grant both these roles to the user:

• Functional Setups User (ORA_ASM_FUNCTIONAL_SETUPS_USER_ABSTRACT) role

• A role with the task-specific privilege

If you also want to allow the same user to export and import task-related setup data, additionally grant the Export Import Functional Setups User (ORA_ASM_EXPORT_IMPORT_FUNCTIONAL_SETUPS_USER) role.

For details about roles and privileges that are common across Oracle Fusion Cloud Applications, see Security Reference for Common Features. For details about roles and privileges specific to your product area, see your product-specific Security Reference guide.