4Application Users

This chapter contains the following:

Application Users for Oracle HCM Cloud Service

Application users are the intended users of the Oracle Human Capital Management Cloud (Oracle HCM Cloud) service. They inherit appropriate abstract roles, such as Employee and Line Manager. They also inherit job roles, such as Payroll Manager and Benefits Specialist, from locally defined data roles. These abstract and job roles enable application users to perform their tasks.

This table identifies the main predefined job roles for major components and options of Oracle HCM Cloud.

Cloud Service or Option Predefined Job Role


Benefits Administrator, Benefits Manager, Benefits Specialist

Global Human Resources

Human Resource Analyst, Human Resource Manager, Human Resource Specialist

Global Payroll

Payroll Administrator, Payroll Manager

Payroll Interface

Payroll Coordinator

Talent Management

Human Resource Manager, Human Resource Specialist

Time and Labor

Time and Labor Administrator, Time and Labor Manager

Compensation Cloud

Compensation Administrator, Compensation Analyst, Compensation Manager, Compensation Specialist

For information about the roles and privileges inherited by each of these roles, see the Oracle Human Capital Management Cloud Security Reference guide.

Preparing for Application Users

Many implementation tasks concern preparing your Oracle HCM Cloud service for application users. Decisions made during this phase determine how you manage users by default. You perform these tasks:

  • Manage Application Security Preferences

    • Defines the default format of user names for the enterprise

    • Sets the enterprise password policy

    • Manages the notification of user and password events, such as password expiration, to application users.

  • Manage Enterprise HCM Information

    Sets these options for the enterprise:

    Option Description

    User Account Creation

    Controls whether user accounts are created automatically when a person record is created using the New Person task flows

    User Account Role Provisioning

    Controls whether role provisioning and deprovisioning requests are processed by default

    User Account Maintenance

    Controls whether requests to suspend and reactivate user accounts are processed by default

    Tip: Some enterprises use applications other than Oracle HCM Cloud to manage user and role provisioning. In this case, you set the User and Role Provisioning options to prevent automatic creation and management of user accounts.

Setting Up Default Role Provisioning

Role provisioning rules, also known as role mappings, determine which data and abstract roles users can have and how they acquire them. During implementation, you create role mappings to provision standard roles, such as Employee and Line Manager, automatically to application users. You may also create some HCM data roles and create appropriate role mappings for them. Perform the Manage Role Provisioning Rules task to create role mappings.

Creating Application Users

During implementation, you can create test application users:

  • Using the Create User task

  • On the Security Console, if you have the IT Security Manager job role or privileges

Once the implementation is complete, application users can be created automatically:

  • When a person record is created using a New Person task flow, such as Hire an Employee or Add a Contingent Worker. By default, human resource specialists and line managers can perform the New Person tasks. Whether user accounts are created for new person records is controlled by the User Account Creation enterprise option.

  • When person records are loaded in bulk using HCM Data Loader. For these person records, you set the GenerateUserAccount attribute to Y to request a user account.

When user accounts are created, roles are provisioned to them automatically, as specified by current role mappings.

For more information about application users, roles, and role mappings, see the Securing Oracle HCM Cloud guide. For more information about loading person records in bulk using HCM Data Loader, see the Integrating with Oracle HCM Cloud guide.